Privacy

Pilot version, November 2026. Plain-language summary; not legal advice.

What we collect

Only short jolt events: when your phone feels a sharp bump while driving, it records the approximate time (rounded to the minute), the place, your speed, your direction of travel, how hard the jolt was, and a rough GPS accuracy. That is all.

What we do not collect

• No routes or trails. Your position is held in memory only to tag a jolt; it is never stored as a track.
• No account, name, email, phone number or advertising ID.
• Events within 200 m of where you started or finished a patrol are dropped on your phone before upload, so your home and workplace are not marked.
• No ads, no analytics, no third-party trackers, no cookies. Map tiles are loaded from OpenStreetMap, which sees your IP address like any website you visit; the street-name lookup is done by our server using only the pothole's location.

Your anonymous ID

Your phone makes a random ID (stored only on the phone, replaced every 30 days). The server stores a salted, shortened hash of it so that "three different vehicles" can be counted. You can reset it any time in Drive mode ("Reset ID").

How long we keep it

Raw jolt events are deleted after 90 days. Pothole records (a location, severity and counts, with no link to any person) are removed after they have not been hit for 60 days. The public map and the share pages show only potholes, never individual events.

Who sees it

The site operator (for tuning and removing false positives) and the public, but only as aggregated potholes. We may share confirmed-pothole lists with municipalities. We never sell data.

Your choices

Contributing is optional and you can stop any time. To ask about or remove your data, contact the site operator, quoting the first 8 characters of your ID shown on the Drive page (the full ID is not needed). Under Canadian privacy law (PIPEDA) you can ask for access to personal information we hold about you; because events carry no names, we may only be able to find them with your ID.

Security

Traffic is encrypted (HTTPS). Admin access is password protected.