QERYX COMING SOON
OBSERVATORY

Support · Identity

Delete everything. There is no undo.

Deleting the account will end it immediately, with no grace period and no way back. Identity rotation is in development; what it will do is stated below, marked as roadmap.

Delete the account and leave nothing behind.

  1. Profile → Settings → Delete Account

    That is where deletion will sit once QERYX arrives. Its confirmation will name exactly what is about to happen, with no cooling-off email and no retention window pretending to be a courtesy.

  2. The key log is left standing, on purpose

    Nothing is revoked or rewritten in the transparency log. The log is append-only by construction, and an append-only log that can be edited to erase a past entry is not a transparency log at all — so deletion does not touch it. What ends is resolution: there is no fanout, no tombstone, and no goodbye frame, and peers simply stop resolving your Profile ID.

  3. Server-side record hard-deleted

    No grace period. Your device wipes its local state; what your contacts already received stays on their devices, and we will not pretend otherwise.

Rotation is in development.

There is no rotation control yet. What follows is what each instrument will be for when it arrives — roadmap, stated as roadmap.

  1. The Profile ID — the public handle (roadmap)

    The name people find you by. Rotating it will stop the old handle resolving; your conversations, contacts, and history stay.

  2. The SERPENT ID — the secret root (roadmap)

    The private identifier that never appears in chat, and never leaves your device. Rotation will append the new identity to the log rather than retract the old one; verified contacts will see the change and should verify your keys again.

Ask the three that go wrong.

Does deleting the app from my phone delete my account?

No — and the difference is deliberate. Removing the app will end the session and take the chat database with it, but the account material that only your device holds stays in the keychain, so a reinstall will offer to restore the identity you already had. Deleting the account, and the panic wipe, do the opposite: they destroy that material and prove it, with a write-ahead marker so a wipe interrupted at any step finishes itself on the next launch. Reinstall remembers. Panic forgets.

Does deleting my account delete my messages from my contacts' phones?

No. Messages already delivered live on their devices — end-to-end encryption means their copy answers to them, not to us. Deletion removes your account, your keys, and your server-side record.

Is there a way to undo a deletion?

No. The record is hard-deleted in a single transaction. If you hold an encrypted backup and its passphrase, you will be able to restore a device — but a deleted account is gone as a matter of design, not policy.

Why would I rotate instead of delete?

Rotation will be for a burned identifier — a handle that leaked further than you wanted. You keep your history and your contacts; only the identifier changes, and the old one is retired in the log.