Restrict access to the user’s account files

Hello. When a user registers using an Ultimate Member registration form, I have created a file type field that, upon completion, is saved in uploads/ultimatemember/[ID]/hashname.pdf

This link is accessible even when not logged in. Could I change this behavior so that it is only accessible by the user themselves and the administrator?

Thank you very much.