Account and Data Deletion

One Vikn account signs you in to every Vikn product, so deleting it removes you from all of them. That includes Vikn Desk (Play Store: io.vikn.vikndesk) and Vikn Remote Desk (Play Store: io.vikn.desk.viewer).

You do not need the app installed to make a request, and you do not need to sign in to read this page. If you have already uninstalled, the email route below still works.

In the app

In Vikn Desk, open Profile, then Security, then Delete Account. In Vikn Remote Desk, use Delete account in the top right of the home screen. Either way you will be asked to retype your own email address, enter your password, and confirm — and either way it is the same Vikn account that is closed, not just the product you happen to be using.

The account is closed the moment you confirm: every device is signed out, and it cannot be used again.

Your data is then erased 30 days later, and those 30 days are yours to change your mind in. Signing in again at any point before the deadline cancels the deletion and restores the account exactly as it was. Nothing is erased until the 30 days are up, so there is nothing to ask us to undo — and once they are, there is no undo at all.

If you are the only owner of an organization, the app stops you and names it: deleting your account would leave nobody able to administer that workspace. Make someone else an owner first, or use the email route below and we will close the organization with your account.

By email

Send an email to support@vikn.io from the address your Vikn account is registered under, with the subject "Delete my account". This is the route if you no longer have either app installed, if you cannot sign in, or if you want only part of your data removed rather than the whole account.

• Tell us which you want: your whole Vikn account deleted, or only your data in one product.
• If you cannot write from the registered address, say so — we will verify your identity another way before doing anything, because acting on an unverified request is itself a way to lose someone their account.

We acknowledge every emailed request within 7 days and tell you what will be deleted and what we are obliged to keep before we act.

Two things happen at different speeds, and it is worth being plain about which is which. Closing the account happens the moment it is requested. Erasing what is stored happens 30 days later, once the window in which you can change your mind has closed.

Your account, at once

• Every session and every refresh token is revoked, so each device is signed out. An access token already issued stays valid until it expires, which is under fifteen minutes.
• The account stops working. The only thing it can still be used for is signing in to cancel the deletion.

Your account, after 30 days

• Your name, profile photo and password hash are erased.
• Your email address and phone number stop being usable to sign in or to find you, and the address becomes available to register again.
• Your membership of every organization ends, along with your roles and permissions in them.

Vikn Desk

Carried out once the 30 days are up, not at the moment you press the button — until then the deletion can still be cancelled, and cancelling has to leave your work intact.

• Your personal profile and settings, your notification history, and your unread markers.
• Your authorship on tickets, replies and internal notes is removed from your identity: the record your organization keeps of its own customer support survives, but it no longer names you. That applies to the files and voice messages attached to them too — they stay with the organization, no longer attributed to you, because they are part of the support record it is entitled to keep.
• Your push notification registrations, so no device receives anything further. If you want them to stop before the 30 days are up, turn notifications off in the app or in your device settings.

Vikn Remote Desk

Carried out once the 30 days are up. One part of this you should not wait for:

• The machines registered to your account, and the device credentials held for them.
• Your identity on past sessions. Session history is retained as the audit and billing record for the account the machine was registered to, without naming you.

A registered machine holds its own credential, separate from your sign-in, and it is that credential — not your session — that keeps the machine reachable. It is removed with everything else when the 30 days are up. If you need a machine to stop being reachable before then, remove it from your device list in the app: that takes effect immediately and needs nothing from us.

There is nothing to delete from the content of past sessions: screens, keystrokes, clipboard and transferred files were never sent to us and were never stored.

• Invoices, payment records and tax documents, for as long as tax and company law requires us to hold them. We cannot delete these on request.
• Data that belongs to an organization rather than to you — tickets your employer handled, session history for its machines — held on that organization’s instructions. If you are the last owner of an organization, tell us and we will delete the organization with your account.
• A minimal record that an account with your email address was deleted, and when, so that the deletion itself can be evidenced and the address is not silently re-created.
• Security and abuse records where we are required to keep them to protect the Service or other people.

• Requested in the app: the account is closed at once, and everything above is erased 30 days later, when the window to cancel closes. Signing in before then stops it.
• Requested by email: acknowledged and verified within 7 days, then deleted from live systems within 30 days of that verification.
• Either way, purged from encrypted backups within a further 90 days, as those backups age out. Backups are not searched or restored in the meantime.

• To undo a deletion you have already asked for: sign in again before the 30 days are up. That is all it takes, and nothing has been erased yet.
• To leave one workspace: ask that organization’s owner to remove you. Your account and your other organizations are untouched.
• To stop one machine being reachable in Remote Desk: remove it from your device list in the app. That takes effect at once and needs no request to us.
• To stop notifications: turn them off in the app or in your device settings.
• To correct or export your data instead: write to us at the same address — see the rights section of the relevant privacy policy.

Deleting your account does not cancel a subscription you bought through the App Store or Google Play, because those are managed by Apple and Google, not by us. Cancel it in the store first, or it will keep renewing after your account is gone. A subscription bought directly from us is cancelled as part of the deletion.