Data Deletion Instructions

1. Request deletion of your UFI data

UFI is operated by Covert Digital Solution. Email hello@ufi.my with the subject “UFI Data Deletion Request”. Say that you want your UFI account and associated personal data deleted, identify the sign-in provider you used (for example Facebook), and include your UFI account ID if you know it. Do not send more personal information than necessary.

You do not need to log in to read these instructions or send a request. A person handles your request. This page is an instruction URL, not an automated Facebook data-deletion callback.

2. Verify control of the account

We reply to arrange a proportionate account-control check, normally a supervised fresh sign-in to UFI using your existing provider. Email matching alone does not prove that you own the account; Facebook email is not treated as verified. Screenshots and a claimed account ID are not enough on their own.

Never send us your provider password, one-time login codes, cookies or access tokens. Do not send identity documents unless a specific proportionate alternative has been agreed. If you cannot sign in, explain that in your request. We cannot delete someone else’s account on an unverified request.

3. What is deleted and what may be retained

After account-control verification, our deletion process removes the UFI profile, sign-in identities, password hash where present and session credentials, and deletes or unlinks the requester’s unreported conversation records while preserving another participant’s records. Requests involving moderation, administrative access or a documented legal hold need separate review. Necessary pseudonymous references and keyed sign-in identifiers may be retained to preserve active bans and another person’s case; they are not a retained full profile. Deletion must not undo an active ban or destroy required evidence.

We retain only the minimum moderation and related audit records needed while a case, appeal or ban is active, with deletion 90 days after closure or expiry, whichever relevant event occurs last. This is a deletion requirement, not merely a review date. A permanent ban remains active until lifted. A documented legal hold may extend retention of the affected records; its reason, scope and review must be recorded. Report images keep the separate seven-day access expiry described in the Privacy Policy.

Our policy requires backups to expire within 30 days and verified erasures to be reapplied before restored data is returned to service. A restricted erasure ledger outside database backups holds identifiers and integrity information needed for that replay. The 90-day rule concerns eligible moderation and audit records in the application database, not automatic expiry of this separate ledger or its independent recovery copy. Documented legal-hold exceptions must identify affected records and be reviewed; they are not a blanket exemption for all backups. This is not instantaneous deletion of every backup.

These are policy requirements, not a claim that all retention controls have already been verified in the deployed service. Deletion and retention operations require operator action and verification; publication alone does not install an automatic cleanup schedule or confirm completed removal. Our response distinguishes completed removal from retained information and outstanding work, with the reason and applicable retention period.

Signing in again after completed account deletion may create a new account; it does not restore the deleted profile. UFI cannot erase copies held independently by other participants.

4. Confirmation and follow-up

We reply to the same request thread with the outcome, including any information retained, the reason, applicable retention period and outstanding steps. Acknowledging your email is not confirmation that deletion is complete. If you need an update, reply to that thread; there is no automated status-tracking page or guaranteed instant response.

Removing UFI from Facebook’s Apps and Websites settings revokes that connection but does not by itself delete UFI’s stored records. Send the request above as well. UFI cannot delete your Facebook account or records controlled by Facebook.