@@ -5,6 +5,9 @@ Every release of NotLogi (formerly LogiMX), newest first. Downloads are on each
 
 ## Unreleased
 
+- Remove NotLogi: About → Remove NotLogi lists what goes and takes it away: the agent and its login service, start at login, the launcher and icons, then the program itself (the .deb through one password prompt, the AppImage file; on macOS the bundle goes to the Trash and its permissions are reset, on Windows the setup's uninstaller runs). Settings, profiles and backups stay unless the switch says otherwise. On Linux `logimx-uninstall [--all]` does the same from a terminal.
+- Linux: leftovers of older installs are cleaned up when the app starts and when the package is installed: a second launcher and icons from a checkout or an AppImage beside the .deb (two NotLogi in the app grid), a launcher whose program is gone, a user service shadowing the package's, an old rule and binaries under /etc and /usr/local. Start agent at login now drives the package's own service.
+
 ## [0.12.5](https://github.com/aabdelghani/notlogi/releases/tag/v0.12.5) - 2026-10-16
 
 - Linux on Wayland: 0.12.4 did not open at all on Ubuntu 24.04 and later (#16). The restart onto XWayland went through Electron's relauncher, which leaves the new process unable to use the setuid sandbox, the only sandbox those systems allow, so it died at once and silently. The app now starts itself as a plain child process.
 
@@ -43,6 +43,10 @@ Download from the [latest release](https://github.com/aabdelghani/notlogi/releas
 
 Quit Logi Options+, Solaar or logiops while NotLogi runs: they drive the same buttons.
 
+To remove NotLogi: **About → Remove NotLogi** in the app lists what goes and takes it away (settings
+stay unless you say so). On Linux, `logimx-uninstall [--all]` does the same from a terminal (installed
+by the .deb, and in the repository at `packaging/uninstall.sh`).
+
 ## Supported devices
 
 | Device | State |
 
@@ -36,7 +36,8 @@ The app follows **MVVM**: Model, view models, views.
   - `media.js`: volume and brightness.
   - `battery.js`: battery notices.
   - `settings.js`: the window's own settings file.
-  - `autostart.js`, `system.js`: autostart, app icons, updates and the problem report.
+  - `autostart.js`, `system.js`: autostart, the clean-up of older installs, app icons, updates and the problem report.
+  - `uninstall.js`, `uninstall-plan.js`: Remove NotLogi. The plan (what goes, by kind of install) has no Electron in it and is tested; `packaging/uninstall.sh` does the same from a terminal.
   - `state.js`: what the parts share and change: devices, settings, windows.
   - `../flow.js`: Flow. NotLogi on each computer finds the others on the local network (UDP 24871),
     pairs with a shared key, and when the pointer is pushed against the edge facing another computer,
 
@@ -27,6 +27,7 @@ mkdir -p "$PKG/DEBIAN" "$PKG/opt/logimx" "$PKG/usr/bin" "$PKG/usr/lib/udev/rules
 cp -a "$UNPACKED/." "$PKG/opt/logimx/"
 install -m755 "$ROOT/agent/build/logimx-agent" "$PKG/usr/bin/logimx-agent"
 install -m755 "$ROOT/agent/build/logimxctl"   "$PKG/usr/bin/logimxctl"
+install -m755 "$ROOT/packaging/uninstall.sh"  "$PKG/usr/bin/logimx-uninstall"
 install -m644 "$ROOT/udev/60-logimx.rules"    "$PKG/usr/lib/udev/rules.d/60-logimx.rules"
 install -m644 "$ROOT/udev/logimx-i2c.conf"    "$PKG/usr/lib/modules-load.d/logimx-i2c.conf"
 sed 's|^ExecStart=.*|ExecStart=/usr/bin/logimx-agent|' "$ROOT/systemd/logimx.service" \
@@ -74,6 +75,9 @@ cat > "$PKG/DEBIAN/postinst" <<'POST'
 #!/bin/sh
 set -e
 chmod 4755 /opt/logimx/chrome-sandbox 2>/dev/null || true
+# what installs made from a checkout, or the app's Install rule button, left outside home: the
+# package has its own copies, and a second one only shadows the first
+rm -f /etc/udev/rules.d/60-logimx.rules /usr/local/bin/logimx-agent /usr/local/bin/logimxctl /usr/local/lib/systemd/user/logimx.service 2>/dev/null || true
 if command -v udevadm >/dev/null 2>&1; then
   udevadm control --reload || true
   udevadm trigger --subsystem-match=hidraw --action=add || true
@@ -101,6 +105,8 @@ PRERM
 cat > "$PKG/DEBIAN/postrm" <<'POSTRM'
 #!/bin/sh
 set -e
+# purge: the rule the app's Install rule button may have placed before the package was installed
+[ "$1" = purge ] && rm -f /etc/udev/rules.d/60-logimx.rules 2>/dev/null || true
 command -v udevadm >/dev/null 2>&1 && udevadm control --reload || true
 command -v update-desktop-database >/dev/null 2>&1 && update-desktop-database -q /usr/share/applications || true
 exit 0
 
@@ -0,0 +1,44 @@
+#!/bin/sh
+# logimx-uninstall: remove NotLogi from this computer, for when the app itself will not open.
+# Removes the agent's service, autostart, launcher and icons for this user, then the package or the
+# AppImage. Settings, profiles and backups stay unless --all is given.
+#   logimx-uninstall [--all] [path/to/NotLogi.AppImage]
+set -u
+ALL=no; APPIMAGE=""
+for a in "$@"; do case "$a" in --all) ALL=yes ;; -h|--help) sed -n '2,5p' "$0"; exit 0 ;; *) APPIMAGE="$a" ;; esac; done
+H="${HOME:?}"; CFG="${XDG_CONFIG_HOME:-$H/.config}"; SHARE="${XDG_DATA_HOME:-$H/.local/share}"
+
+echo "== stopping NotLogi"
+# stopped before it is disabled: a unit with Restart= would start the agent again after a plain kill
+systemctl --user daemon-reload >/dev/null 2>&1 || true
+systemctl --user stop logimx.service openoptions.service >/dev/null 2>&1 || true
+systemctl --user disable logimx.service openoptions.service >/dev/null 2>&1 || true
+pkill -x logimx 2>/dev/null; pkill -x logimx-agent 2>/dev/null; sleep 1
+pkill -9 -x logimx-agent 2>/dev/null || true
+
+echo "== this user's files"
+rm -f "$CFG/systemd/user/logimx.service" "$CFG/systemd/user/openoptions.service" \
+      "$CFG/autostart/logimx.desktop" "$CFG/autostart/openoptions.desktop" \
+      "$SHARE/applications/logimx.desktop" "$H/.local/bin/logimx-agent" "$H/.local/bin/logimxctl" \
+      "${XDG_RUNTIME_DIR:-/run/user/$(id -u)}/logimx.sock"
+find "$SHARE/icons/hicolor" -path '*/apps/*' \( -name 'logimx*.png' -o -name 'notlogi*.png' -o -iname '*logimx*.png' \) -delete 2>/dev/null
+systemctl --user daemon-reload >/dev/null 2>&1 || true
+update-desktop-database -q "$SHARE/applications" 2>/dev/null || true
+gtk-update-icon-cache -q -f -t "$SHARE/icons/hicolor" 2>/dev/null || true
+if [ "$ALL" = yes ]; then
+  echo "== settings, profiles and backups"
+  rm -rf "$CFG/logimx" "${XDG_STATE_HOME:-$H/.local/state}/logimx" "$CFG/LogiMX" "${XDG_CACHE_HOME:-$H/.cache}/LogiMX"
+fi
+
+[ -n "$APPIMAGE" ] && [ -f "$APPIMAGE" ] && { echo "== $APPIMAGE"; rm -f "$APPIMAGE"; }
+
+# the package, and what was placed outside home by hand or by the Install rule button
+SYS="/etc/udev/rules.d/60-logimx.rules /usr/local/bin/logimx-agent /usr/local/bin/logimxctl /usr/local/lib/systemd/user/logimx.service"
+NEED=no; for f in $SYS; do [ -e "$f" ] && NEED=yes; done
+dpkg -s logimx >/dev/null 2>&1 && NEED=yes
+if [ "$NEED" = yes ]; then
+  echo "== system files (asks for your password)"
+  if [ "$(id -u)" = 0 ]; then SUDO=""; elif command -v sudo >/dev/null 2>&1 && [ -t 0 ]; then SUDO=sudo; else SUDO=pkexec; fi
+  $SUDO sh -c "if dpkg -s logimx >/dev/null 2>&1; then apt-get purge -y logimx 2>/dev/null || dpkg -P logimx; fi; rm -f $SYS; udevadm control --reload 2>/dev/null; update-desktop-database -q /usr/share/applications 2>/dev/null; true"
+fi
+echo "NotLogi removed.$([ "$ALL" = yes ] || echo ' Settings kept in ~/.config/logimx and ~/.config/LogiMX; add --all to remove them.')"
@@ -27,7 +27,7 @@ app.setPath('userData', require('path').join(app.getPath('appData'), 'LogiMX'));
 if (plat.IS_WIN) app.setAppUserModelId('io.github.aabdelghani.logimx');
 // The main process in parts (main/), loaded once the app's name and settings folder are set;
 // each one gets what it uses from the others.
-const parts = ['env', 'settings', 'window', 'tray', 'agent', 'osd', 'battery', 'emoji', 'ring', 'media', 'bluetooth', 'system', 'autostart', 'i18n'].map(n => require('./main/' + n));
+const parts = ['env', 'settings', 'window', 'tray', 'agent', 'osd', 'battery', 'emoji', 'ring', 'media', 'bluetooth', 'system', 'autostart', 'uninstall', 'i18n'].map(n => require('./main/' + n));
 const state = require('./main/state');
 const ctx = Object.assign({}, ...parts.map(p => p.provide));
 parts.forEach(p => p.link(ctx));
 
@@ -5,10 +5,12 @@ const fs = require('fs');
 const { execFile } = require('child_process');
 const plat = require('../platform');
 const ROOT = require('path').join(__dirname, '..');   // the app's own folder
+const { isOurIcon } = require('./uninstall-plan');
+const list = d => { try { return fs.readdirSync(d); } catch (e) { return []; } };
 
 // from the other parts of the main process, filled in by link()
-let APPIMAGE, PACKAGED, WM_CLASS, launchCmd, loadUi, resPath;
-exports.link = ctx => { ({ APPIMAGE, PACKAGED, WM_CLASS, launchCmd, loadUi, resPath } = ctx); };
+let APPIMAGE, PACKAGED, WM_CLASS, debInstalled, launchCmd, loadUi, resPath;
+exports.link = ctx => { ({ APPIMAGE, PACKAGED, WM_CLASS, debInstalled, launchCmd, loadUi, resPath } = ctx); };
 
 // Artefacts left by an older name of the project: a stale enabled unit points at a binary
 // that no longer exists and quietly fails at login.
@@ -27,11 +29,41 @@ function cleanupLegacyAutostart() {
   }
 }
 
+// Leftovers of other installs of NotLogi in this user's account: a launcher and icons written by a
+// checkout or an AppImage beside the package's own (two NotLogi in the app grid), a launcher whose
+// program is gone, a user unit saying the same as the package's. An install that still works, and
+// is not this one, is left as it is.
+const SYSTEM_UNIT = '/usr/lib/systemd/user/logimx.service';
+function cleanupLeftovers() {
+  const home = os.homedir();
+  const launcher = path.join(home, '.local', 'share', 'applications', 'logimx.desktop');
+  const iconDir = path.join(home, '.local', 'share', 'icons', 'hicolor');
+  // the package's launcher serves, whether this is the package or something started beside it
+  const deb = (PACKAGED && !APPIMAGE && fs.existsSync('/usr/share/applications/logimx.desktop')) || debInstalled();
+  let drop = deb;
+  if (!drop) { try { const m = /^Exec=(?:"([^"]+)"|(\S+))/m.exec(fs.readFileSync(launcher, 'utf8')); drop = !!m && !fs.existsSync(m[1] || m[2]); } catch (e) {} }
+  if (drop) {
+    try { fs.unlinkSync(launcher); execFile('update-desktop-database', [path.dirname(launcher)], () => {}); } catch (e) {}
+    if (deb) {
+      for (const size of list(iconDir)) for (const f of list(path.join(iconDir, size, 'apps'))) if (isOurIcon(f)) { try { fs.unlinkSync(path.join(iconDir, size, 'apps', f)); } catch (e) {} }
+      execFile('gtk-update-icon-cache', ['-q', '-f', '-t', iconDir], () => {});
+    }
+  }
+  const unit = path.join(home, '.config', 'systemd', 'user', 'logimx.service');
+  try {
+    if (fs.existsSync(SYSTEM_UNIT) && /^ExecStart=\/usr\/bin\/logimx-agent\s*$/m.test(fs.readFileSync(unit, 'utf8'))) {
+      fs.unlinkSync(unit);
+      execFile('systemctl', ['--user', 'daemon-reload'], () => execFile('systemctl', ['--user', 'enable', 'logimx.service'], () => {}));
+    }
+  } catch (e) {}
+}
+
 // Re-apply the login setting every time the app starts, so a rename, a moved checkout or a
 // hand-edited unit cannot leave 'start at login' switched on but broken.
 function ensureAutostart() {
   if (!plat.IS_LINUX) { try { if (loadUi().autostart) plat.setLoginItem(true); } catch (e) {} return; }
   cleanupLegacyAutostart();
+  cleanupLeftovers();
   // a unit written by an AppImage points into a mount that no longer exists: rewrite or drop it
   try {
     const unitPath = path.join(os.homedir(), '.config', 'systemd', 'user', 'logimx.service');
@@ -78,13 +110,20 @@ function setAutostart(on) {
   const unitDir = path.join(os.homedir(), '.config', 'systemd', 'user');
   const unitPath = path.join(unitDir, 'logimx.service');
   const agentBin = on ? stableAgentBin() : null;
-  if (agentBin) {
+  if (agentBin === '/usr/bin/logimx-agent' && fs.existsSync(SYSTEM_UNIT)) {
+    // the package's own unit: enabled as it is, and a copy of this user's saying the same goes
+    try { fs.unlinkSync(unitPath); } catch (e) {}
+    execFile('systemctl', ['--user', 'daemon-reload'], () => execFile('systemctl', ['--user', 'enable', 'logimx.service'], () => {}));
+  } else if (agentBin) {
     const unit = `[Unit]\nDescription=NotLogi agent for MX Master and MX Keys devices\nAfter=graphical-session.target\nPartOf=graphical-session.target\n\n[Service]\nType=simple\nExecStart=${agentBin}\nRestart=on-failure\nRestartSec=2\n\n[Install]\nWantedBy=graphical-session.target\n`;
     try {
       fs.mkdirSync(unitDir, { recursive: true });
       fs.writeFileSync(unitPath, unit);
       execFile('systemctl', ['--user', 'daemon-reload'], () => execFile('systemctl', ['--user', 'enable', 'logimx.service'], () => {}));
     } catch (e) {}
+  } else if (!on && fs.existsSync(SYSTEM_UNIT)) {
+    execFile('systemctl', ['--user', 'disable', 'logimx.service'], () => {});   // the package's unit: off at login, still running now
+    if (unitPointsAtMissingBinary(unitPath)) removeAgentUnit(unitPath);
   } else if (unitPointsAtMissingBinary(unitPath)) {
     // nothing durable to point a unit at, and the one on disk is already broken. The desktop
     // entry starts the app, which starts its own agent, so drop the unit rather than let it
@@ -102,6 +141,7 @@ function iconName() {
 function ensureDesktopEntry() {
   if (!plat.IS_LINUX) return;          // the installer made the shortcuts
   if (PACKAGED && !APPIMAGE) return;   // the .deb installs its own entry
+  if (debInstalled()) return;          // the .deb is installed beside this: its entry serves (cleanupLeftovers drops ours)
   try {
     const iconDir = path.join(os.homedir(), '.local', 'share', 'icons', 'hicolor', '256x256', 'apps');
     const appDir = path.join(os.homedir(), '.local', 'share', 'applications');
@@ -120,4 +160,4 @@ function ensureDesktopEntry() {
   } catch (e) {}
 }
 
-exports.provide = { LEGACY_NAMES, cleanupLegacyAutostart, ensureAutostart, stableAgentBin, unitPointsAtMissingBinary, removeAgentUnit, setAutostart, ensureDesktopEntry };
+exports.provide = { LEGACY_NAMES, cleanupLegacyAutostart, cleanupLeftovers, ensureAutostart, stableAgentBin, unitPointsAtMissingBinary, removeAgentUnit, setAutostart, ensureDesktopEntry };
@@ -1,6 +1,7 @@
 // Where NotLogi runs from: the platform, the app's own folder, how it is launched, the agent's socket.
 const { app } = require('electron');
 const path = require('path');
+const fs = require('fs');
 const plat = require('../platform');
 const ROOT = require('path').join(__dirname, '..');   // the app's own folder
 
@@ -13,9 +14,14 @@ const APPIMAGE = process.env.APPIMAGE || '';
 const WM_CLASS = 'notlogi';
 // files shipped next to the app: repo root in development, resources/ in a package
 const resPath = (...p) => PACKAGED ? path.join(process.resourcesPath, ...p) : path.join(ROOT, '..', ...p);
+// The .deb's app, when it is installed: an AppImage or a checkout started beside it leaves the
+// launcher and autostart to the package, or the app grid shows two NotLogi and the wrong one
+// starts at login (one install at a time; the package wins).
+const DEB_APP = '/opt/logimx/logimx';
+const debInstalled = () => process.execPath !== DEB_APP && fs.existsSync(DEB_APP) && fs.existsSync('/usr/share/applications/logimx.desktop');
 // how to launch this very app again (autostart, desktop entry)
-const launchCmd = () => APPIMAGE ? `"${APPIMAGE}"` : PACKAGED ? process.execPath : `${process.execPath} ${ROOT} --no-sandbox --class=${WM_CLASS}`;
+const launchCmd = () => debInstalled() ? DEB_APP : APPIMAGE ? `"${APPIMAGE}"` : PACKAGED ? process.execPath : `${process.execPath} ${ROOT} --no-sandbox --class=${WM_CLASS}`;
 
 const SOCKET = plat.agentEndpoint();
 
-exports.provide = { PACKAGED, APPIMAGE, WM_CLASS, resPath, launchCmd, SOCKET };
+exports.provide = { PACKAGED, APPIMAGE, WM_CLASS, resPath, launchCmd, debInstalled, SOCKET };