Privacy policy
Last updated: 27 July 2026
Geoxity Inc. ("Geoxity", "we") builds and operates the My City platform on behalf of participating municipalities. This page explains what data we collect, why, where it lives, and what your rights are.
Summary
- Your reports are stored in Canada. Automated classification runs in the United States — see “Where your data is processed”.
- Photos uploaded with reports have faces and licence plates auto-blurred before the original is discarded — the unblurred image is never stored. One exception, described below: the photo you attach is sent for automated classification before blurring.
- We never sell personal data, and your data is never used to train anyone’s AI models.
- You can request export or deletion of your data at any time.
What we collect
- Account: your phone number or email, display name, locale preference, and the city tenant you belong to.
- Reports: the description, photos (auto-blurred), location, and the status of each issue you submit.
- Voice recordings: optional voice messages attached to reports, automatically transcribed and retained for 90 days by default.
- Sign-in identifiers: if you use Google Sign-In or Apple Sign-In, the identifier and basic profile your provider shares with us to create your account.
- Device: an opaque push-notification token so we can notify you when your report's status changes.
- Diagnostics: anonymized crash reports and performance traces, opt-out at any time from the in-app Privacy screen.
How we use it
- Route reports to the responsible crew within your city.
- Notify you when status changes (assigned, in progress, resolved).
- Improve the product through aggregated, de-identified usage analysis.
Who sees it
- Your municipality’s authorized staff can see reports filed within their tenant.
- Geoxity engineering can access data when required for support, with audit logs.
- Google Cloud processes reports on our behalf to classify them and transcribe voice messages. Google acts as our processor and is contractually barred from using this content to train its models.
- We do not sell or rent data to third parties. Ever.
Where your data is stored
Every database, file bucket, and log sink that holds your personal data lives in Google Cloud’s Canadian regions (Toronto and Montréal). Your account, your reports, your photos and your voice recordings are all stored in Canada and stay there.
Where your data is processed
To route a report to the right crew, we use Google’s Gemini models on Google Cloud Vertex AI to suggest a category and urgency, and to transcribe voice messages. As of 27 July 2026 this processing happens in Google Cloud’s United States multi-region, because the current generation of these models is not offered from a Canadian region. What is sent for processing is the report description, the photo, and the voice recording — never your name, phone number or email. Be aware that the photo sent for classification is your original picture, before blurring: the automatic face and licence-plate blurring is applied to the copy we STORE, and classification happens before that, while you are still composing the report. The picture sent for classification is not retained by us or by Google once the suggestion comes back. If you would rather not send a picture for classification at all, you can file the report without a photo. The content is processed to answer that single request and is not used to train Google’s models. Your data remains stored in Canada; only this processing step crosses the border.
Canadian privacy law permits this. PIPEDA does not require personal data to be kept in Canada; it requires that we protect it comparably wherever it is handled and that we tell you when it is processed outside the country, which is the purpose of this section. While it is handled outside Canada it may be subject to lawful access requests under the laws of that country. If you would rather not have your report classified automatically, you can file it without a voice recording and choose the category yourself; contact us at teamlead@geoxity.co if you want your report excluded from automated classification entirely.
Your rights
Under Canadian privacy law (PIPEDA, plus Quebec's Law 25 where applicable), you can request access to, correction of, or deletion of your personal data. Write to teamlead@geoxity.co; we respond within 30 days.
Contact
Privacy questions: teamlead@geoxity.co. General inquiries: info@geoxity.co. Mail: Geoxity Inc., Toronto, ON, Canada.