Legal & Policies

Last updated April 19, 2026

These are the legal and operational documents for Umbrella X. We have kept the set small on purpose: three primary documents cover almost everything, with one extra page for account deletion (because Google Play requires it as a separate, public URL). For older bookmarks the standalone Cookies, Community Guidelines, DMCA, EULA, and Content Reporting URLs still resolve and forward you to the right section. If anything is unclear, write to support@umbrellax.io and we will explain.

✗

We do NOT scan your messages. We do NOT report to authorities automatically. Moderation acts only on reports from a specific user. NCMEC reporting requires verified victim-side standing. The full privacy pledge is published on our warrant canary page.

Primary documents

Privacy Policy

What personal data we collect, how it is protected with end-to-end encryption, how long we keep it, and the rights you have under the GDPR, the CCPA, and the personal data law of the Republic of Kazakhstan. Includes our cookie and local-storage practices in section 10. Read the Privacy Policy.

Terms of Service

The agreement between you and UmbrellaX TOO. Acceptance, eligibility, license, account responsibilities, acceptable use (with the full prohibited content list and the four-tier enforcement system), reporting and moderation tools, copyright and DMCA procedure, the Apple App Store addendum, and the standard liability and dispute resolution clauses. This document also serves as the End User License Agreement, the Community Guidelines, and the DMCA / Copyright policy. Read the Terms of Service.

FAQ

Practical, plain-English answers to the questions people ask most often: how to sign up (no phone number required), manage an attached phone number, delete your account, report abuse, block someone, what end-to-end encryption means in practice, where servers are located, what we collect, what cookies the site stores. Written for users in a hurry. Read the FAQ.

Operational

Account Deletion

Step-by-step instructions for deleting your account from inside the app or by emailing delete@umbrellax.io if you no longer have the app. Lists exactly what is deleted, what is retained briefly afterwards, and the 30-day window for changing your mind. This is the canonical URL Google Play and App Store reviewers test directly under their store policies. Read the Account Deletion page.

Warrant Canary

A page with five independent statements about secret legal demands, each with its own update timestamp. As long as every statement is refreshed at least once every 35 days, no secret demand in that specific category has occurred. Quarterly counts of public legal requests (court orders, foreign subpoenas, NCMEC at victim request, DMCA) appear in real time on the same page. Read the Warrant Canary.

Transparency Log

Per-request public record of every legal demand we have received and our response. Each entry — including a redacted PDF of the original court document, our written response, and our reasoning — is published 90 days after we processed the request. Quarterly archives are GPG-signed for independent verification. This is the level of transparency Apple and Cloudflare publish; Telegram, Signal, and WhatsApp publish only aggregate counts. Read the Transparency Log.

Victim Support Portal

Direct, verified channel for victims of harmful content — and the parents, guardians, lawyers, advocates, and law enforcement officers acting on their behalf — to request that we transmit hash-only metadata to the relevant external reporting database (NCMEC for CSAM, StopNCII for non-consensual intimate imagery, GIFCT for terrorism and mass violence content, Polaris for human trafficking, or case-by-case for other categories). We do not file external reports automatically; this portal explains how to provide the standing-of-victim verification we require before transmitting anything. Open the Victim Support Portal.

Older URLs (kept for stability)

The pages below used to be standalone documents and have been folded into the primary documents above. The URLs still resolve so that bookmarks, store-listing fields, and external references do not break. Each page contains a short summary and a link to the relevant section.

  1. EULA — Apple App Store addendum and core license grant. The full Terms of Service this EULA supplements are at /terms.
  2. Community Guidelines — community standards. Now part of Terms of Service section 5.
  3. Content Reporting — how to report abusive content or users. Now part of Terms of Service section 6.4 and the FAQ.
  4. Cookies — what the website stores in your browser. Now part of Privacy Policy section 10.
  5. DMCA / Copyright — Designated Agent contact and takedown procedure. Now part of Terms of Service section 15.

Who we are

Umbrella X is operated by UmbrellaX TOO, a limited liability partnership registered in the Republic of Kazakhstan under business identification number 260440006927, with its registered office at ul. Zheltoksan, d. 1/6, korpus 3, kv. 13, 090000 Uralsk, Kazakhstan. General support: support@umbrellax.io. Privacy and data protection: privacy@umbrellax.io. Legal and contractual matters: legal@umbrellax.io. Security disclosures: security@umbrellax.io.