Your account

Apple or Google

Whichever you tapped on the first screen. Both hand the app a signed token; the app does not store a password and we never see one. Apple can give the app a private relay email instead of your real one, and that is fine — it still works for finding you from contacts only if friends have that relay address, which they won’t, so add your phone number to your profile instead.

Two providers, two accounts

Apple and Google sign-ins are separate accounts. If you signed up with one and later tap the other, you get a fresh, empty account with a new username. Sign out and go back in with the one you used first.

Your name from the provider

Apple hands over your name exactly once, at the very first sign-in, and Google sends it with every sign-in. Either way it only seeds the display name; you can change it afterwards.

What you can change

Settings → Edit Profile changes your display name, your bio (up to 140 characters), your profile photo and your banner. The photo and banner go through the system picker, so the app only ever receives the one picture you pick. Both are stored in public buckets because your page is public.

Your phone number

Optional. Add it so friends who have it in their contacts can find you. It is stored only as a SHA-256 hash of its digits; nobody, including us, can read the number back. Clear the field to remove it.

Your username

Three to twenty characters of lower-case letters, numbers, dots and underscores, chosen when you join, and it stays. It is the address of your page (probablylate.app/your-handle) and what friends search for, so it cannot move under them. If you need a different one, the only way is to delete the account and make a new one.

Your page

Everyone, in the app or on the web, can see your username, display name, bio, photo, banner, friend count and the names and covers of your public rolls. Share it from your profile (the card that grows out of the Dynamic Island), from Settings, or by letting someone scan the QR on your membership ticket. Prints are never on it.

What happens

Settings → Sign out leaves the account on this phone. Your rolls and prints are on the server and come back when you sign in again; the stamps you have collected stay on the phone. The phone stops receiving notifications for that account.

Prints still on their way

Any print still uploading is lost if you sign out before it lands. The app counts them and warns you — “give them a moment and they’ll land” — and lets you wait or sign out anyway.

How

Settings → Danger Zone → Delete Everything. You type delete to confirm. There is one destructive row on purpose: it deletes the account on the server and wipes the phone, in that order, and there is no undo and no waiting period.

What goes

• Your account, username, display name, bio, photo and banner.
• Every print you took, with its caption, voice note, reactions, comments and views.
• Your friendships, pending requests and blocks.
• Your push token and your contact hashes.
• Rolls you own that nobody else is on. A roll with other members passes to its longest-standing member instead, so their prints are not taken from them.
• Everything on the phone: stamps, cached pictures and voice notes, settings, the walkthrough.

Your comments on other people’s prints go with your account. Prints you took on a shared roll are removed from that roll for everyone. Image files are cleared from storage by the nightly sweep that follows; see What we keep. Your Plus subscription is not cancelled by this — it belongs to your Apple ID — so cancel it there too if you mean to.

“Nothing was deleted”

Deleting needs the server, so that the account really goes and not just the phone. If it could not be reached, nothing is changed anywhere, and the app says so. Check the connection and try again.

Without the app

Write to info.probablylate@gmail.com from the address you signed in with, with your username, and we will do it. See Data protection.