Download

Account Deletion

Last updated April 19, 2026 · Effective April 7, 2026

You can delete your Umbrella X account at any time. This page explains exactly how to do it, what happens to your data afterwards, and what we cannot delete because it is no longer in our control. You do not need to log in to read this page, and you do not need an active account to request a deletion. This is the canonical URL we provide to Google Play Console under the Account Deletion requirement and to App Store Connect. A 30-second walk-through is also on the FAQ; the legal framing is in section 12 of the Privacy Policy and section 8 of the Terms of Service.

1. Three ways to delete your account

Method 1 (in-app, signed by your private key) is the primary path and works for everyone. Method 2 (restore-then-delete with your 24-word recovery phrase) is for users who lost the original device. Method 3 (SMS-based, by email) is only available if you attached a phone number to your account at some point.

2. Method 1 — From inside the app (preferred)

If you have the Umbrella X app installed on a device where your account is signed in:

  1. Open the Umbrella X app.
  2. Tap Settings (the gear icon in the bottom navigation, or the menu in the top corner depending on your device).
  3. Tap Account.
  4. Scroll to the bottom of the Account screen and tap Delete Account.
  5. Read the on-screen summary of what will be deleted.
  6. Confirm with your device biometric (Face ID, Touch ID, fingerprint) or device passcode. The app signs a deletion request with the private key that only your device holds, and sends it to our servers.

Because the deletion request is cryptographically signed by your account key, we know it is genuinely from you without any SMS, email, or support ticket. The app logs you out and clears its local storage on the device; deletion on our side begins immediately.

3. Method 2 — Restore from your 24-word recovery phrase, then delete

If you lost the device but kept your 24-word recovery phrase somewhere safe, you can still delete your account:

  1. Install the Umbrella X app on a new device.
  2. On the welcome screen, tap I already have an account and then Restore from recovery phrase.
  3. Enter the 24 words in order. The app reconstructs your private key locally from the phrase.
  4. Once restored, follow Method 1 on the new device.

This is the reason the 24-word recovery phrase is important: it is your only way to access the account from anywhere except the original device.

4. Method 3 — By email (only if you attached a phone number)

If you attached a phone number to your account at any point and you still control that number, you can request deletion by email. This path is only offered as a fallback for users who did not keep their recovery phrase — it is not the primary path.

  1. Click this link to open your email client with the request template pre-filled: delete@umbrellax.io.
  2. In the body, replace [your phone] with the phone number you attached to the account, including the country code (for example, +7 701 234 5678).
  3. Send the email.

When we receive the request, we look up the salted hash of the number against our records. If there is a match and the account had attached this phone, we send a one-time SMS confirmation code to that number. Reply to the confirmation email with the code. Once verified, the deletion is queued. If we do not receive a valid code reply within 7 calendar days, the request is discarded and your account stays active.

We refuse Method 3 requests when the phone number was never attached to an account, when the account was already deleted, or when the SMS code cannot be verified. If you no longer control the phone number and you do not have the recovery phrase, there is no way for us to verify that the deletion request is coming from you — we will not delete the account in that case, because doing so would let anyone who later recycles the phone number impersonate you. If you have a legitimate edge case (for example, the phone number belonged to a deceased family member), write to delete@umbrellax.io and we will discuss a safe verification path.

5. What is deleted and what is retained briefly

The following is removed from our systems as soon as the deletion is processed, which is almost always within minutes of confirmation and always within 24 hours:

  1. Profile information: display name, avatar, bio, status text, any profile fields you set.
  2. Account record: the database row that ties your public key and username to an Umbrella X account. After deletion, the username is freed for anyone to register, and — if you had a phone number attached — the phone hash is also removed, so the number is free to be attached to a new account.
  3. Contact discovery hashes: the cryptographic hashes we stored so that other users could find you via their address books.
  4. Push notification tokens tied to the account.
  5. Message metadata older than 30 days associated with the account (routing records, timestamps, delivery state). Metadata from the last 30 days is retained for its normal 90-day window and then purged together with everybody else's metadata on the regular schedule.
  6. Stored media references the account uploaded to our servers that no other user has retained.

A small amount of data is retained for a short period: security logs for 30 days after deletion (the same logs we keep on every account to detect fraud and abuse — IP addresses, session timestamps, rate-limit events), and legal hold data only in the rare case that we are compelled by a valid court order to preserve specific information about an account that is the subject of an investigation. We preserve the minimum required, for the duration required, and no more.

6. The 30-day cancellation window

For the first 30 days after deletion, we keep a minimal tombstone record so that you can cancel the deletion if you change your mind. To cancel, restore your account from your 24-word recovery phrase on a new device and then write to delete@umbrellax.io signed from that restored account, asking us to reverse the deletion; or, if you had attached a phone number and used Method 3, reply to the original deletion thread from that phone / email. If it is within the window and we can verify the request, we restore the account (minus any metadata that has already aged out on its normal schedule). After 30 days the tombstone is purged and deletion becomes irreversible: there is no backup from which we can restore the account.

7. What we cannot delete

This is the part that is most important to understand honestly. Umbrella X is end-to-end encrypted. That means the copies of your messages that have already been delivered to the people you chatted with live on their devices, not on ours, and the encryption keys to decrypt those copies belong to them, not us. We have no technical ability to reach into someone else's phone and delete a message you sent them. If you would like a message to disappear from the other person's device too, you can try the normal "Delete for everyone" action inside a chat before you delete your account, which asks their device to remove the copy; this is a request their device can honor, but it is not guaranteed and it cannot be done after your account no longer exists.

Similarly, we cannot delete data from screenshots, forwards, or backups that other users made outside the Service. We cannot delete your phone number from the address books of people who saved it. We cannot delete data from third parties we do not control, such as push notification logs held by Apple or Google for delivery purposes — those are retained under the policies of those providers, and they do not include message content.

8. A note for Google Play and App Store reviewers

This page is the canonical account deletion URL we submit to the Google Play Console under the "Account deletion" requirement and to App Store Connect under Apple App Store Review Guideline 5.1.1(v). It is reachable without authentication and without installing the app, in keeping with the Google Play 2024 data deletion policy. If you are a store reviewer, you can test Method 3 (the email-based path) directly from this page — the mailto link in section 4 opens a fully pre-filled deletion request. Note that the default deletion path for Umbrella X is Method 1 (in-app, cryptographically signed by the user's private key) rather than SMS — this matches the overall crypto-first account design and removes the need for phone-number-based recovery to be present on every account. The legal framing of the right to deletion under GDPR Article 17 and Kazakhstan Law No. 94-V of 21 May 2013 is in section 9 of the Privacy Policy.

9. Contact

For deletion requests: delete@umbrellax.io. To cancel a pending deletion within the 30-day window: delete@umbrellax.io. For privacy questions related to deletion: privacy@umbrellax.io. Operated by UmbrellaX TOO, BIN 260440006927, registered at ul. Zheltoksan, d. 1/6, korpus 3, kv. 13, 090000 Uralsk, Kazakhstan.