Account & Personal Data Deletion

Last updated: October 27, 2026

Web Request Form — Account & Personal Data Deletion

Use this form if you cannot sign in to the app or prefer to submit a deletion request on the web. You may choose full account deletion or partial data deletion below.

Account Email Address

Deletion Scope

Specific Data Categories or Additional Instructions (Optional)

I confirm that I am the owner (or authorized representative) of the account email address entered above and understand that permanent deletion of account data cannot be undone once verified and executed.

You can also email support@mellott.us directly from your registered address.

1. In-App Self-Service Account Deletion (Web, iOS & Android)

If you have access to your Mellott.US account on the web (https://mellott.us) or in the Mellott Cloud iOS or Android mobile applications, you can initiate permanent account deletion directly inside the app:

Sign in and open Settings → Account (or Profile → Account Settings on mobile).
Scroll to the Danger Zone / Delete Account section and select Delete My Account.
Complete the step-up authentication check (passkey, TOTP, or password) to confirm permanent erasure.

If you cannot sign in or have already uninstalled the mobile app or browser extension, submit the unauthenticated web form above or email support@mellott.us.

2. Partial Data Deletion (Deleting Specific Data Without Closing Your Account)

You do not need to delete your entire account to remove specific categories of data. At any time inside the web, iOS, or Android apps, you can individually delete files, photos, notes, calendar events, password vault items, health/fitness entries, saved weather locations, enrolled passkeys/devices, or push notification tokens. You can also select Delete stored content, telemetry & device records (keep account login active) in the form above.

3. Data Categories Permanently Deleted vs. Retained for Legal Compliance

When a full account deletion request is verified, the following actions are completed within 30 days (and encrypted backups age out on their rolling 30-day schedule):

Permanently Deleted Immediately: Account profile (name, email, username, avatar), password hashes, passkeys/WebAuthn credentials, TOTP secrets, mobile phone bindings, push notification tokens (Web Push, APNs, FCM), paired device records, encrypted password vault items, files, photos, videos, notes, messages, calendar events, contacts, financial budget entries, health/workout records, and location history.
Retained Solely for Statutory & Telecom Compliance: Under US TCPA / CTIA telecommunications regulations, immutable SMS opt-in and opt-out audit rows (sms_opt_in_consent) and email unsubscribe suppression hashes are retained in a write-only compliance ledger solely to prove prior consent and prevent unwanted messages from ever being sent again. Security audit logs without personal content age out automatically under our 5 GiB FIFO ring buffer.

4. Verification & Processing Timeline (GDPR / CCPA / App Stores)

To protect your account against unauthorized deletion by a third party, requests submitted through the unauthenticated web form above are verified by sending a one-time confirmation notice to the account's registered email address. Once confirmed, deletion is executed promptly and always completed within 30 calendar days (or sooner where required by GDPR, UK GDPR, CCPA/CPRA, Apple App Store, or Google Play policies). Questions may be directed to support@mellott.us.