COMPLIANCE & PRIVACY

Account & Data Deletion Policy

Google Play Store & GDPR Compliant Self-Service Deletion

XG8

XG8 Password Keeper

Developer: XG8 | Package: app.xg8.passkeeper

1. Overview & Data Deletion Commitment

In accordance with Google Play's User Data & Account Deletion Policy and the General Data Protection Regulation (GDPR), XG8 Password Keeper provides users with transparent, immediate, and unconditional control over their accounts and stored data.

You may delete your account and all associated encrypted vault records at any time directly through the Android application, this self-service web portal, or via verified email request.

2. How to Delete Your Account

Option A: In-App Deletion

Delete directly within the native Android application:

Open XG8 Password Keeper on your Android device.
Unlock your vault and navigate to Settings.
Tap Account Management → Delete Account.
Enter your Master Password to securely verify your identity and confirm permanent deletion.

Option B: Email Request Alternative

Submit a manual deletion request by email:

Send an email to: info@x-gate.app
The email must be sent from your registered account email address.
Subject line: Account Deletion Request.
Security Notice: Do not include your Master Password or TOTP codes. Verification is conducted solely via your registered email address, and your account and encrypted vault records will be permanently erased from the database within 24 hours.

3. Data Handling, Types Deleted & Retention Period

When an account deletion is executed, the following data types are permanently and irrecoverably purged from our servers:

Data Category	Specific Items Purged	Retention Period
User Account Record	Email address, Phone number, Cryptographic Salt, Master Password Hash, 2FA TOTP secret, Recovery key hashes	0 Days (Immediate)
Encrypted Vault Data	All AES-256-GCM encrypted passwords, usernames, TOTP secrets, notes, URLs, and authentication tags	0 Days (Immediate)
Subscription & Session Tokens	Active JWT authentication tokens, device session identifiers, and subscription billing tokens	0 Days (Immediate)

Zero-Knowledge Security Notice: Because XG8 Password Keeper utilizes client-side zero-knowledge encryption, once an account is deleted, your data cannot be recovered by anyone, including XG8 support staff.

4. Self-Service Web Deletion Portal

Service Clarification: vault.x-gate.app is the official zero-knowledge web client and sync server for XG8 Password Keeper.

You can immediately execute permanent account deletion right now using the secure form below:

Registered Account Email *

Master Password *

6-Digit 2FA TOTP Code (Optional if enabled)

I understand this action is permanent and all my stored passwords, logins, and private vault data will be destroyed immediately.

5. Contact & Inquiries

General & Support: info@x-gate.app
Security Team: security@x-gate.app
Web Portal: https://vault.x-gate.app