Reports are sent to the address in rua= in your DMARC record, usually once a day from each large email provider.
If you don't get any reports, rua= is probably missing from your DMARC record, or DMARC is missing entirely. Run a check of the domain and you'll see right away.
The file is only read to show the result. It isn't stored anywhere.