Account deletion

Delete your SecureOne account

Last updated 18 September 2026

This page is for the Android app SecureOne: Phone Security (com.secureone.app), made by Aman Ashok Gupta, trading as AGC One, Nashik, India. It applies whether you installed the app from Google Play or from this website.

How to delete your account

1. Email support@agcone.in from the email address your account uses, with the subject “Delete my SecureOne account”. Sending it from that address is how we know the request is yours.
2. We reply to confirm, and delete the account and the data listed below within 30 days of your request, usually much sooner. We write again when it is done.
3. On your phone, sign out in the app (Settings) or uninstall it. Signing out, or Settings › Clear scan data, deletes the results the app keeps on the phone. We cannot reach your phone, so this step is yours.

If you no longer have that mailbox, write from another address and say which account you mean. We will ask you to confirm before deleting anything.

You can also ask us to delete only some of your data, for example your reports or your registered phones, without closing the account.

What is deleted

• Your account — email address, optional name, and the dates you signed up and last signed in.
• Sessions and sign-in codes — every signed-in device is signed out.
• Registered phones — push tokens, device IDs, model names and app versions used for alerts and Find my phone, and any Find my phone results, including locations.
• Your reports — fraud reports and “disagree with verdict” reports, including any text you typed.
• Your plan — deleting the account ends any plan on it. Refunds follow the Refund policy.

What is kept, and for how long

• Payment records — for each payment, the Razorpay order and payment IDs, the amount and the date, with the name and mobile number given at checkout. These are kept for as long as Indian tax and accounting law requires, then deleted. Razorpay keeps its own records under its own policy.
• Report counts — a report you sent added one to a number’s or link’s total. That count stays, but nothing links it to you once your report is deleted.
• Cached check results — verdicts for links, domains and file fingerprints are stored by the item, not by person, and expire within 30 days.
• Crash reports — carry no account ID, email or anything you were checking, so they cannot be picked out by person. Firebase Crashlytics removes them after 90 days.
• Breach checks — the app asks XposedOrNot directly from your phone. What XposedOrNot keeps is under its own policy; we never held that request.

Everything else about what leaves your phone is in the Privacy policy.