Account deletion request

Last updated: 24 September 2026

This page is for the app “ملفى — نقاط ومكافآت” (Milfa — Points & Rewards), package cloud.milfa.app, published by Hulul Al-Hgad Trading Est. It explains how to request deletion of your account, what data is deleted, and what is kept and for how long.

Option 1 — inside the app (immediate)

1. Open the Milfa app and sign in.
2. Go to “My account”.
3. Tap “Delete account”.
4. Confirm it is you: a verification code is sent to your account email (or your mobile number if the account has no email). Enter the code.
5. Your account and data are deleted immediately, and all your sessions on all devices are ended.

The same steps work on the website milfa.cloud without installing the app.

Option 2 — by email (if you cannot sign in)

1. Email support@milfa.cloud from the email address registered on your account.
2. Use the subject “Account deletion request” and include your registered email or mobile number.
3. We verify your identity and delete the account within 30 days at most, then confirm by email.

Data that is permanently deleted

• Your profile: name, email, mobile number, all linked sign-in methods (email, Google, phone) and your sessions.
• Your trusted devices, active sign-in codes, and push-notification subscriptions.
• Your notifications, reward-redemption requests, content reports, and emails we sent you.
• Your Google Wallet membership pass (revoked with Google).
• Your link as a staff member of any brand, and any pending invitation.
• If you own a brand: the brand itself is deleted in full — its branches, staff accounts, rewards, items, packages, customer list, all its transactions, subscription, payments, images and public page. The deletion screen warns you before you confirm.

Data that remains without your identity

Your record as a customer of other brands is not deleted in full, because it is the brand’s own accounting record: your mobile number is erased and your name becomes “Deleted customer”. The transaction figures (amount, date, points) remain with no information identifying you, and cannot be linked back to you.

If you sign up again with the same number, your account starts empty and previous balances are not restored.

Data we keep, and for how long

• Abuse-protection logs: hashed (HMAC) fingerprints of sign-in code attempts — no raw phone number and no raw network address. Automatically deleted after 24 hours.
• Hosting provider technical logs (Supabase): server logs that contain no account data, deleted per the provider’s policy.
• We keep no other copy of your data after deletion, and we never sell or share it for advertising.

Contact

support@milfa.cloud · +966 55 053 5715 · 920012635