Delete your IDFire account
You can delete your IDFire account and its data at any time. You do not need the app installed, and you do not need to sign in to this page to make the request.
Last updated: 24 September 2026
Two ways to delete your account
1. In the app
- Open the IDFire app.
- Go to Settings → Account.
- Choose Delete account.
- Confirm. You will be asked to authenticate, because deletion is irreversible.
2. By email, including if you have already uninstalled the app
Send a request to privacy@idfire.ai with the subject line Account deletion request, from the email address on your IDFire account.
We will verify the request before acting on it. Because IDFire holds sensitive identity data, we have to be sure a deletion request is really from you — an unverified deletion is itself a way to attack someone. Where you still have access to your account, we authenticate you through it. We will not ask you to email us a photograph of your identity document in order to delete your data.
We complete verified deletions within 30 days, and sooner in most cases. We will confirm in writing when it is done.
What is deleted
- Your identity record: legal name, date of birth, email address, phone number, and the identity data extracted from your document.
- Your biometric data. The stored facial representation is destroyed, and the derived copy held by our matching service is revoked.
- Your authentication credentials, passkeys, device registrations and sessions.
- Your vault contents. Note that we only ever held these as ciphertext we could not read.
- Your decentralized identifier and the assertions issued under it.
- Any child accounts you manage, and their records, subject to the preservation duty below.
What survives deletion, and why
We would rather tell you this plainly than have you discover it later.
| What is retained | Why | For how long |
|---|---|---|
| A non-biometric ban record, only if your account was banned | So that a validly imposed ban cannot be defeated by deleting and re-registering. It is a keyed hash of document number, date of birth and issuing authority — not biometric data | Duration of the ban, subject to periodic review and to your right to object |
| A biometric record, only for the unlawful-conduct tiers in Section 11 of the Terms, and only with a documented evidence pack | Ban enforcement for fraud, child sexual exploitation, sanctions evasion or credible threats | Duration of the ban, and in any case no more than 24 months from your last interaction |
| Records relating to child sexual abuse material | US federal law requires preservation and reporting to NCMEC. This obligation overrides a deletion request | As required by law |
| Records under a legal hold — litigation, an active investigation, or a statutory preservation duty | We are not permitted to delete them while the hold is in force | Until the hold lifts. We will tell you this applies, unless prohibited |
| Transaction and audit records required for compliance | Legal and regulatory record-keeping obligations | As required by the applicable obligation |
| Data inside backups already taken | Backups are immutable snapshots; we do not edit them | Until the backup expires on its schedule. We do not restore deleted data from backups |
If your account was never banned and no legal hold applies, nothing on this list is retained about you.
Deletion is irreversible
Your vault cannot be recovered. Its contents are encrypted with keys we do not hold. Once you delete your account, no one — including IDFire — can decrypt or restore them. Export anything you want to keep first.
You will lose access to services you signed in to with IDFire. Deleting your IDFire account does not delete accounts you hold with relying parties, but you will no longer be able to use IDFire to sign in to them. Contact those services directly about their own records.
Re-registering later means starting over, including identity verification from the beginning.
Deleting a child's account
A parent or guardian may delete a child account at any time, from the parental controls area or by writing to privacy@idfire.ai. You may also review everything we hold about your child, and refuse any further collection, without deleting the account.
Withdrawing consent ends the child account, because it cannot operate without consent. The only records that survive are those covered by the CSAM preservation duty above.
If you want less than full deletion
- Remove biometrics only. Withdraw biometric consent in the app. This destroys the authentication template and ends biometric sign-in while keeping your account.
- Get a copy of your data first. Request an export at privacy@idfire.ai before deleting. We provide it in a portable, machine-readable format.
- Correct something instead. If the issue is inaccurate data, ask us to correct it.
If we refuse
If we decline a deletion request, we will tell you why, and you may appeal by replying to our decision. A person not involved in the original decision reviews the appeal. You may also complain to your data protection authority or state attorney general.
Contact
| Deletion requests and privacy rights | privacy@idfire.ai |
|---|---|
| Support | support@idfire.ai |
| Entity | IDFire Technologies Inc., a Delaware corporation |
Related: how long we keep information · your rights · biometric destruction guidelines