Privacy policy

• Your reports are stored in Canada. Some processing crosses the border: automated classification runs in the United States, and address lookup goes to a mapping service outside Canada — see “Where your data is processed”.
• Photos uploaded with reports have faces and licence plates auto-blurred before the original is discarded — the unblurred image is never stored. One exception, described below: the photo you attach is sent for automated classification before blurring.
• We never sell personal data, and your data is never used to train anyone’s AI models.
• You can request export or deletion of your data at any time.

• Account: your phone number or email, display name, locale preference, and the city you belong to.
• Reports: the description, photos (auto-blurred), location, and the status of each issue you submit.
• Voice recordings: optional voice messages attached to reports, automatically transcribed and retained for 90 days by default.
• Sign-in identifiers: if you use Google Sign-In or Apple Sign-In, the identifier and basic profile your provider shares with us to create your account.
• Device: an opaque push-notification token so we can notify you when your report's status changes.
• Diagnostics: anonymized crash reports and performance traces, opt-out at any time from the in-app Privacy screen.

• Route reports to the responsible team within your city.
• Notify you when status changes (assigned, in progress, resolved).
• Improve the product through aggregated, de-identified usage analysis.

• Your municipality’s authorized staff can see reports filed in their city.
• Geoxity engineering can access data when required for support, with audit logs.
• Google Cloud processes reports on our behalf to classify them and transcribe voice messages. Google acts as our processor and is contractually barred from using this content to train its models.
• The OpenStreetMap Foundation’s Nominatim service receives the location of a report — and the address you type if you use address search — so we can turn a map pin into a civic address and back again. It runs outside Canada, and it receives no name, phone number or email.
• We do not sell or rent data to third parties. Ever.

Every database, file bucket, and log sink that holds your personal data lives in Google Cloud’s Canadian regions (Toronto and Montréal). Your account, your reports, your photos and your voice recordings are all stored in Canada and stay there.

Data residency is a per-deployment configuration: every deployment of My City is placed in the region the law of its own country requires. This deployment is the Canadian one described above. Some processing steps do cross the border, and each is set out in “Where your data is processed” below — automated classification of a report runs in Google Cloud’s United States multi-region, and address lookup runs on the OpenStreetMap Foundation’s Nominatim service outside Canada.

To route a report to the right team, we use Google’s Gemini models on Google Cloud Vertex AI to suggest a category and urgency, and to transcribe voice messages. As of 27 July 2026 this processing happens in Google Cloud’s United States multi-region, because the current generation of these models is not offered from a Canadian region. What is sent for processing is the report description, the map location you pinned, the photo, and the voice recording — never your name, phone number or email. Be aware that the photo sent for classification is your original picture, before blurring: the automatic face and licence-plate blurring is applied to the copy we STORE, and classification happens before that, while you are still composing the report. The picture sent for classification is not retained by us or by Google once the suggestion comes back. If you would rather not send a picture for classification at all, you can file the report without a photo. The content is processed to answer that single request and is not used to train Google’s models. Your data remains stored in Canada; this processing step crosses the border, as does the address lookup described in the next paragraph.

A second processing step also happens outside Canada: address lookup. To show a report at a civic address rather than a pair of numbers, we send the report’s exact coordinates to Nominatim, the geocoding service operated by the OpenStreetMap Foundation, a not-for-profit registered in the United Kingdom. Every report that is filed triggers this lookup; results are cached for a while, so a nearby lookup may be answered without contacting the service again. In the other direction, if you use the address search box instead of dragging the pin, the address text you type is sent to the same service, together with a rectangle drawn around the part of the map you are viewing so that nearby matches rank first. Nothing else accompanies either request: no name, phone number or email, no photo, no voice recording and no report description. Unlike Google Cloud, the OpenStreetMap Foundation is not our contracted processor — it operates Nominatim as a public service under its own privacy policy, and it may keep logs of the requests it receives. If you would rather not send a typed address, drag the pin instead; the coordinates of a filed report are sent either way.

Canadian privacy law permits this. PIPEDA does not require personal data to be kept in Canada; it requires that we protect it comparably wherever it is handled and that we tell you when it is processed outside the country, which is the purpose of this section. While it is handled outside Canada it may be subject to lawful access requests under the laws of that country. You do not choose the report’s category yourself — it is set automatically, and municipal staff correct it where needed. If you would rather limit what leaves the country, file the report without a photo and without a voice recording, so that only the written description and the report’s location are sent; and contact us at teamlead@geoxity.co if you want your report excluded from automated classification entirely.

Under Canadian privacy law (PIPEDA, plus Quebec's Law 25 where applicable), you can request access to, correction of, or deletion of your personal data. Write to teamlead@geoxity.co; we respond within 30 days.

Privacy questions: teamlead@geoxity.co. General inquiries: info@geoxity.co. Mail: Geoxity Inc., Toronto, ON, Canada.