Delete your AnybanQID account

You can delete your account from inside the app:

1. Open the AnybanQID app and sign in.
2. Go to Profile (the account tab).
3. Tap Delete account.
4. Read the warning, which explains that deletion is permanent.
5. Enter the 4-digit confirmation code we text to your registered mobile number. This confirms the request is really coming from you.

Deletion begins as soon as the code is accepted. It cannot be undone — to use AnybanQID again you would enrol from the beginning.

If you cannot access the app — for example you lost the device, or you have already uninstalled it — email [email protected] from the email address registered to your account, with the subject Delete my AnybanQID account. We will verify your identity before acting on the request and will complete it within 30 days.

When your account is deleted, the following are permanently erased, irreversibly anonymised or revoked:

• Your identity record — name, National Identity Card (NIC) number, date of birth, gender, email address, mobile number and address
• Your bank verification details, including the masked bank account number and the name of your bank
• Every consent you granted to a service, and the details each service was allowed to see
• Your registered devices are revoked, active sign-ins are ended, and signing certificates are revoked. The public keys held for your devices are deleted.
• Your private signing key lives only on your phone and never leaves it. When your account is deleted the app resets its local keys, so the private key is wiped from the app.
• Any pending approval requests

A small set of records must survive deletion because the law requires it, or because erasing them would destroy the integrity of signatures that other parties have relied on:

• Audit records of approvals and signatures. These are tamper-evident and hash-chained: they are what allows a signature you made to be relied on afterwards, and what lets you show what you did or did not approve. Security audit records (which contain no NIC in plain text) are kept for the period required by law and then deleted. They are separated from your identity record so that they no longer identify you directly.
• Issued certificates. A certificate that has already been issued cannot be withdrawn from the parties that hold it; it is revoked rather than erased.

Backups roll over and deleted data disappears from them on the normal backup cycle.

Nothing in this category is used to contact you, to market to you, or to rebuild your account.

Deleting your AnybanQID account does not close any account you hold with a bank or other service that you signed in to using AnybanQID. Those organisations are separate data controllers and keep their own records under their own policies. Contact them directly if you want that data deleted too.

If you obtained a signing certificate, its certificate data is also held by LankaSign (operated by LankaPay), a separate certification authority. Deleting your AnybanQID account revokes the certificate, but LankaSign keeps its own records under its own policies and legal obligations. Contact LankaSign directly about that data.

Clobe (Pvt) Ltd (clobe.lk)
Echelon Square, Colombo 00100, Sri Lanka
Email: [email protected]

For everything else we do with your data, see the Privacy Policy.