Delete your QuantumPass account and associated data
In the updated app: open App Settings > Delete QuantumPass Account on your primary vault device. Review the warning, type DELETE, and confirm with biometrics. The app shows progress and resumes after a restart. Keep your receipt until completion.
The current public request method is to email privacy@quantumpass.io with the subject QuantumPass account deletion. You can use this method without installing or retaining the app. State that you want your QuantumPass account and associated data deleted, and whether you still have access to an enrolled device.
Do not send recovery codes, passwords, private keys or authentication tokens. We need to verify your authority before deleting an account. A name or email alone is not proof of ownership of a device-enrolled QuantumPass account.
Before requesting deletion
- Set up another sign-in method with each connected website first. Otherwise you may lose access.
- Expect QuantumPass registrations, shared-access grants, active sessions, offline access and recovery relationships to be affected.
- Deleting QuantumPass does not delete your bank, store or other independent website accounts.
Scope and retained information
The request covers your QuantumPass account and associated device and access data. We will determine the records associated with the verified account and explain any information that must be retained for security, fraud prevention, legal obligations or handling the request. Operational logs and backup copies may have different retention periods; this page does not promise immediate erasure of every copy.
We terminate QuantumPass sessions and send signed deregistration requests to connected websites before completing deletion. Unavailable websites are retried automatically. Deregistration removes QuantumPass-imposed password restrictions, but does not create a password or override a website's other security policies. Wait for the app's completed status; clearing local app data is not server-side deletion.
QuantumPass-managed security logs and server backup files have a 30-day retention policy. Minimal hashed suppression records and deletion receipts are kept separately to prevent deleted credentials from being restored and to let you check the result. Copies you exported or sent to another person remain under your control.