Account & Data Deletion

Delete Through the App

Follow these steps to permanently delete your WhereShot account and the data stored with it:

1. Open WhereShot and tap Settings in the tab bar.
2. Scroll to the Account section.
3. Tap Delete Account. If you never signed in, the same option reads Delete My Data and does the same thing to the data held for your anonymous account.
4. Confirm when prompted. If you signed in with Google or Apple you will be asked to sign in once more, so that we know it is you.

Nothing is erased until that confirmation is given, and the deletion cannot be undone afterwards.

Request by Email

If you prefer, or if you no longer have the app installed, you can ask us to do it for you:

1. Send a deletion request to [email protected].
2. Include the email address linked to your WhereShot account for verification.

What Data Gets Deleted

When you delete your account, the following is permanently removed:

• Your sign-in account, and with it the email address and display name that Google or Apple shared with us
• Every place WhereShot has identified for you: the place names, cities, countries, coordinates, addresses, the clues the model read, and the dates
• Every place you saved as Been or Want to go, together with the notes you wrote
• Your Atlas, the map built from the location tags in your camera roll, which is stored only on your device
• The app's settings and stored state on that device, including the record of which photos you have already identified

What Happens to Everything Else

We would rather be exact than reassuring, so two things are worth spelling out:

• Photos you chose to save. These can only ever be read by the account that uploaded them, so once that account is gone they are unreachable by anyone, including us through the app. If you would rather the image files were erased from storage outright, say so in your email and we will remove them.
• Unspent identification credits from version 1. A record of these is kept so that a balance cannot be reset by deleting an account and creating a new one. It holds no name, no email address and no location, only an internal identifier that no longer belongs to any account.