Delete your account

Deleting it in the app

On a computer: in Midlight, open Settings › Account, find Delete your Midlight account and choose Delete account…. Midlight lists what it is about to delete; type delete to confirm. This needs a computer that is signed in to the account and up to date: older versions of the Midlight desktop app can’t delete the account. If you see “Your account wasn’t deleted (426). Try again.”, update Midlight on that computer and try again.
On iPhone or Android: in the Midlight app, open the Account tab and choose Delete account. The app says what it will delete; type delete to confirm.

Deleting starts as soon as you confirm. Midlight tells you when it has finished, or if it failed and you need to try again. It cannot be undone, and there is no trash to get it back from.

Asking without the app

If you can’t use the app, email hello@midlight.ai, say you want the account deleted, and give the email address you sign in to Midlight with. We then write to that sign-in address and delete the account only once you reply from it to confirm: that reply is how we know the account is yours. We delete it within 30 days of your request and tell you when it is done, exactly as if you had done it in the app.

If you sign in with Apple and chose Hide My Email, your sign-in address is an Apple relay address. If our confirmation can’t reach it, we will tell you, and you can delete the account yourself in the app instead.

What is deleted

Everything Midlight’s server keeps for the account:

The account itself, and each Google or Apple sign-in linked to it. Midlight also asks Apple to revoke an Apple sign-in.
What the account keeps: its Workspaces and Projects (including the pointers to folders and files on your computers), its Memory and that Memory’s history, its Work, and the chats it kept from your computers.
Every file you attached, both the text Midlight extracted and the original, deleted from storage.
Your computers, phones and browsers as the account knew them: their names, their keys, and each phone’s registration for notifications. Any web sign-in to the account ends.
Midlight AI: any allowance the account had, and its usage records — what each request cost and how many tokens it used. Prompts and replies are never stored there. Midlight holds no payment records: no customers, subscriptions, payments or invoices.
Dictation: Midlight’s server keeps no dictation history, so there is none to delete; the short-lived counters that pace your dictations are cleared.
Your invitation, and any request for one, made for any address you sign in with — including one already used or withdrawn.

What happens to your computers and phones

Every computer and phone is signed out, and so is any browser. Each phone, and each computer running a current Midlight, forgets the account and says it was deleted. Phones are also sent a notification with nothing in it but that, so they find out promptly; a phone acts only once Midlight’s server confirms it.

A computer running an older Midlight is signed out and told it was removed from the account. It keeps its data like any other, and won’t sign in again until Midlight is updated.

Your computers keep what Midlight has on them. Deleting the account never wipes a computer from afar, whichever version of Midlight it runs: each one keeps its chats, including ones never synced, its Memory, Projects, files and settings. Your own files and folders, and your own installs of Claude Code and Codex, are never touched.

On the computer you delete from, Midlight offers Also erase Midlight’s data on this computer. It starts unchecked; tick it to erase that computer’s copy as well.

The next time someone signs in on a computer that kept its data, Midlight asks whether to bring that data into the new account or erase it first; an older Midlight asks once it has been updated. Nothing from it is uploaded until that choice is made.

A computer that is offline is signed out the next time it connects. After 180 days the server no longer remembers the account at all, so a computer that has been away longer is simply refused. Either way it keeps its copy.

What is kept, and for how long

The account’s identifier and when it was deleted, so a device that was offline can be told its account is gone. It is a random identifier with no name, address or content in it, and it is removed after 180 days.
Backups. Deleting doesn’t edit backups already made. Copies in Midlight’s encrypted database backups are removed as those backups are rotated out, on a schedule that keeps about eight weeks of them.
A file being uploaded at that moment. An upload already under way can still reach storage after the account is deleted. A later cleanup looks for it; one that finishes after that cleanup stays in storage, tied to no account, until it is removed.
Notes for that cleanup. Until storage confirms each deleted file is gone, the server keeps random identifiers for it and when to try — no names and no content.
An invitation not made for an address. An invitation code that named no email cannot be linked to your account, so a scrambled copy of the code and when it was used remain.

What deleting cannot reach

What other companies already received. The model providers that answered your chats, and Groq for dictation, hold what they were sent under their own policies. Deleting your Midlight account cannot recall it.
Logs and diagnostic reports. Server logs and the diagnostic reports Sentry has accepted aren’t erased one by one when an account is deleted; they are kept for their own retention periods, separate from your account. Diagnostic reports carry no account identifier, so there is nothing to find them by. The Privacy Policy says what they contain.

Afterwards

Signing in again with the same Google or Apple account starts a new, empty account. Your invitation was deleted with the old one. On a computer that kept its data, Midlight asks at that sign-in whether to bring the data into the new account; it comes along only if you choose.