Umbrella
EN

Account Deletion

Last updated April 7, 2026 · Effective April 7, 2026

You can delete your Umbrella X account at any time. This page explains exactly how to do it, what happens to your data afterwards, and what we cannot delete because it is no longer in our control. You do not need to log in to read this page, and you do not need an active account to request a deletion. This is the canonical URL we provide to Google Play Console under the Account Deletion requirement and to App Store Connect. A 30-second walk-through is also on the FAQ; the legal framing is in section 12 of the Privacy Policy and section 8 of the Terms of Service.

1. Two ways to delete your account

Method 1 is preferred because it is fastest and confirms your identity automatically. Method 2 is for users who no longer have access to the app but still control the phone number they registered with.

2. Method 1 — From inside the app

If you have the Umbrella X app installed and you can sign in to your account:

  1. Open the Umbrella X app on your phone.
  2. Tap Settings (the gear icon in the bottom navigation, or the menu in the top corner depending on your device).
  3. Tap Account.
  4. Scroll to the bottom of the Account screen and tap Delete Account.
  5. Read the on-screen summary of what will be deleted.
  6. Tap Continue. The app asks us to send a six-digit confirmation code to the phone number registered on the account.
  7. Enter the code you receive by SMS and tap Confirm Deletion.

Once you enter the code, deletion begins immediately. You do not need to do anything else. The app logs you out and clears its local storage on the device.

3. Method 2 — By web request (email)

If you cannot use the app (for example, you already uninstalled it, you lost the device, or you never had the app on this device), you can request deletion by email. We still verify that you own the phone number before we delete anything, so this method requires access to the phone number you registered with.

  1. Click this link to open your email client with the request template pre-filled: delete@umbrellax.io.
  2. In the body, replace [your phone] with the phone number registered to your Umbrella X account, including the country code (for example, +7 701 234 5678).
  3. Send the email.

When we receive the request, we send a one-time SMS confirmation code to that phone number. Reply to the confirmation email with the code, or follow the instructions we send you. Once we have verified the code, the deletion is queued and you receive a final confirmation. If we do not receive a valid code reply within 7 calendar days, the request is discarded and your account stays active.

We refuse requests that we cannot verify. If you no longer control the phone number associated with the account, we cannot delete the account through Method 2 for security reasons — if we did, anyone who recycled the phone number later could delete accounts by impersonation. If you have a legitimate reason why verification is impossible (for example, the phone number belonged to a deceased family member), write to delete@umbrellax.io and we will work out a safe verification path case by case.

4. What is deleted and what is retained briefly

The following is removed from our systems as soon as the deletion is processed, which is almost always within minutes of confirmation and always within 24 hours:

  1. Profile information: display name, avatar, bio, status text, any profile fields you set.
  2. Account record: the database entry that ties your phone number to an Umbrella X account. After deletion, the phone number is free to register a new account.
  3. Contact discovery hashes: the cryptographic hashes we stored so that other users could find you via their address books.
  4. Push notification tokens tied to the account.
  5. Message metadata older than 30 days associated with the account (routing records, timestamps, delivery state). Metadata from the last 30 days is retained for its normal 90-day window and then purged together with everybody else's metadata on the regular schedule.
  6. Stored media references the account uploaded to our servers that no other user has retained.

A small amount of data is retained for a short period: security logs for 30 days after deletion (the same logs we keep on every account to detect fraud and abuse — IP addresses, session timestamps, rate-limit events), and legal hold data only in the rare case that we are compelled by a valid court order to preserve specific information about an account that is the subject of an investigation. We preserve the minimum required, for the duration required, and no more.

5. The 30-day cancellation window

For the first 30 days after deletion, we keep a minimal tombstone record so that you can cancel the deletion if you change your mind. To cancel, write to delete@umbrellax.io from the phone or email associated with the request, and ask us to reverse the deletion. If it is within the window and we can verify the request, we restore the account (minus any metadata that has already aged out on its normal schedule). After 30 days the tombstone is purged and deletion becomes irreversible: there is no backup from which we can restore the account.

6. What we cannot delete

This is the part that is most important to understand honestly. Umbrella X is end-to-end encrypted. That means the copies of your messages that have already been delivered to the people you chatted with live on their devices, not on ours, and the encryption keys to decrypt those copies belong to them, not us. We have no technical ability to reach into someone else's phone and delete a message you sent them. If you would like a message to disappear from the other person's device too, you can try the normal "Delete for everyone" action inside a chat before you delete your account, which asks their device to remove the copy; this is a request their device can honor, but it is not guaranteed and it cannot be done after your account no longer exists.

Similarly, we cannot delete data from screenshots, forwards, or backups that other users made outside the Service. We cannot delete your phone number from the address books of people who saved it. We cannot delete data from third parties we do not control, such as push notification logs held by Apple or Google for delivery purposes — those are retained under the policies of those providers, and they do not include message content.

7. A note for Google Play and App Store reviewers

This page is the canonical account deletion URL we submit to the Google Play Console under the "Account deletion" requirement and to App Store Connect under Apple App Store Review Guideline 5.1.1(v). It is reachable without authentication and without installing the app, in keeping with the Google Play 2024 data deletion policy. If you are a store reviewer, you can test Method 2 directly from this page — the mailto link in section 3 opens a fully pre-filled deletion request. The legal framing of the right to deletion under GDPR Article 17 and Kazakhstan Law No. 94-V of 21 May 2013 is in section 9 of the Privacy Policy.

8. Contact

For deletion requests: delete@umbrellax.io. To cancel a pending deletion within the 30-day window: delete@umbrellax.io. For privacy questions related to deletion: privacy@umbrellax.io. Operated by UmbrellaX LLP, BIN 260440006927, registered at Zheltoqsan St., 1-6, building 3, apt. 13, Oral, West Kazakhstan Region, Republic of Kazakhstan.