Delete your account & data

This page explains how to request deletion of your data from Vistra, the field-reporting app developed by Shining Technologies. It applies to data held for the Vistra mobile apps and web app.

How long we keep your data: we keep your data while your account exists. We do not delete accounts for being inactive. When you ask us to delete your account, there is a 30-day grace period, and after that your account, reports, photos and files are permanently deleted.

Delete your account in the app

The quickest way, and the only one that needs no email back-and-forth:

1. Open the Vistra app and go to Account → Delete account.
2. Enter your password and confirm.

You are signed out on every device straight away and your account can no longer be used. Your data is permanently deleted after a 30-day grace period; email us before then if you change your mind and we will restore it.

No longer have the app?

Choose either option — both reach the same team:

1. Use the form below — enter the email address associated with your Vistra account and submit.
2. Or email us at privacy@vistra.report with the subject “Data deletion request”, from the email address on your account.

We will reply to verify the request is genuinely yours (to protect your account). Once verified, the same 30-day grace period applies as for deleting in the app, and then your account and data are permanently deleted. Tell us in that time if you change your mind and we will cancel the request.

What data is deleted

When your request is processed, we permanently delete the personal data associated with your account, including:

• Your account profile (name, email, and authentication credentials).
• Your reports and their content — text, photos, image annotations, captions, and locations.
• Your businesses, branding (logos, colours), folders, tags, and templates.
• Shares, share links, invites, and comments you created.
• Report version history and AI suggestion history.
• In-app notifications and registered device push tokens.
• Sessions, and device and usage metadata tied to your account.

What we keep, and for how long

A limited amount of data is retained only where the law requires it or to protect against fraud and abuse. It is not used for any other purpose and is deleted when the retention period ends:

• Billing & transaction records — Tax invoices and payment records are kept for 7 years as Australian tax law requires, held in our payment providers’ systems (Stripe, Apple, Google).
• Security & abuse logs — login records and minimal records such as IP addresses tied to security events, retained for up to 12 months (even after your account is deleted), then deleted or anonymised.
• Database backups — residual copies roll off on our rolling backup cycle, within 35 days. Earlier versions of deleted files are removed from file storage within 30 days.

Once these periods elapse, the remaining data is permanently removed. Reports you delete on their own (without deleting your account) sit in the trash for 30 days and are then permanently deleted. If you have questions about a request, contact privacy@vistra.report.