Account & Data Deletion

Delete your account in the app

1. Open Sulle.
2. Go to Profile.
3. Tap Delete account.
4. Read what will be removed, then type DELETE to confirm.

Delete your account on this page

You do not need the app for this. Nothing has to be installed, reinstalled or signed in to. What you do need is the phone you registered with, because sending a text message from it is what proves the request is yours.

You can do this from a computer. The browser shows you a short code and a Sulle number, your phone sends that code as a text message, and this page confirms when it arrives. Sulle never sends a message to a number typed into this form.

What happens when you delete

Your account becomes unreachable straight away. Messages are no longer delivered to it, it cannot be found by phone number or name, it shows no presence, and your devices are signed out. This is not a deactivation: there is no state in which the account still works.

There is then a 7-day window in which the deletion can be cancelled from any of your own devices, so that someone who did not mean to do this can undo it. Every one of your other devices is told when deletion starts, and you will be shown the exact date by which you can still cancel. Once the window closes the erasure happens, and it cannot be undone. It is completed without undue delay, and within 30 days at the latest.

After the deletion finishes, you can register again with the same phone number. It will be a new account — nothing from the old one is restored.

What is removed

Erased

• The account record.
• Every device on the account, and its push notification identifiers.
• Encryption keys and prekeys.
• Conversation participation, blocked lists and settings.
• Call participation records.
• Profile pictures.
• Encrypted backups and encrypted archive transfers.
• Partially uploaded media.
• Phone verification records.
• The records of messages you have sent.

Kept

Entries in the cryptographic identity chain. These record that a device was added to or removed from an account. They contain no message content, no phone number and no name. We keep them for security and abuse prevention. Deleting an account issues a new account identifier, so these entries no longer point at any living account.

Reports that other users made about your account may be kept for up to 90 days after your account is deleted, so that our team can complete a safety review. If you reported someone and then delete your account, your identity and your own words are removed from the report.

If you have paid a renewal on sulle.fi, the invoice and payment records (email address, amount, date) are retained for six years after the end of the financial year, as the Finnish Accounting Act requires. They contain no phone number and nothing about your use of the service.

Kept to prevent double use of a purchase. On Android, Google tells us that the app was bought but not when, so we keep a hashed form of your phone number together with the date your first year started, for 13 months from that date and also after deletion. It lets us refuse a second free year for the same number; the hash cannot be turned back into the number.

Expires on its own

Two kinds of thing are not erased by your deletion. They are left where they are and age out by themselves:

• A message still queued for someone who has not come online.
• Photos, videos and files you have sent, once they have finished uploading.

Both are stored encrypted, we cannot read either of them, and both are discarded automatically 30 days after they were sent.

Groups

Groups you were in continue without you. Your membership is removed; the group and its other members are not affected.

What deletion does not reach

• Messages already delivered to other people — those are on their devices, and are not ours to delete.
• The history on your own device — it stays there until you remove the app. Puida Oy has no access to it.

If neither route works

If you can use neither the app nor the form above, write to support@sulle.fi and we will help you complete one of them. We cannot delete an account on the strength of an email alone — we hold no email addresses, so an email does not identify an account. Never send us your account PIN or your recovery code.