Legal
Privacy Policy
Effective date: June 19, 2026 ยท Last updated: June 19, 2026
Summary: Road Data collects anonymized road condition data using your device's motion sensors and GPS while you drive. Your personal identity is never attached to road event data. We sell aggregated, anonymized road damage data to road construction companies and government agencies. You can delete your account and all associated data at any time.
Who we are
Road Data is a crowd-sourced road damage detection service operated by USA Website Developer ("we," "us," or "our"). The app uses your device's accelerometer and GPS to detect road damage events โ potholes, rough surfaces, and collapsed roadway sections โ and logs their location for road improvement purposes.
Our primary website is roaddata.tech. You may contact us regarding privacy matters using the information at the bottom of this policy.
What data we collect
Account data โ when you create an account:
- Email address
- Password (stored as a secure hash โ we cannot read it)
- Full name (optional, provided by you)
- Vehicle ID or license plate (optional, provided by you)
- Company name, phone number, license state (optional, provided by you)
Road event data โ automatically collected when monitoring is active:
- GPS coordinates (latitude, longitude) at the moment of detection
- GPS accuracy in meters
- Vehicle speed at time of detection (km/h)
- Vehicle heading / direction of travel
- Accelerometer readings (X, Y, Z axes and total G-force)
- Severity classification (medium, high, or critical)
- Event type (e.g. pothole, surface roughness)
- Road name and route number (reverse-geocoded from GPS via OpenStreetMap)
- City, county, state, and postal code
- Weather conditions at time of detection (temperature, humidity, wind, description)
- Timestamp of detection
- Anonymous device identifier
What we do NOT collect:
- Your real-time location when monitoring is not active
- Photos, audio, or video
- Contacts, messages, or other app data
- Browsing history or behavior outside this app
- Payment information
How we use your data
We use the data we collect for the following purposes:
- Providing the service โ storing your road event detections and making them accessible to you through the app
- Road damage reporting โ aggregating detection data to identify road damage patterns by location and severity
- Data sales (commercial) โ selling anonymized, aggregated road damage datasets to road construction companies, state and county Departments of Transportation (DOTs), fleet operators, and insurers. See Section 4 for details.
- Service improvement โ understanding how the app is used to improve detection accuracy and features
- Communications โ sending account-related emails such as password reset links
Data sales and commercial use
We sell road damage data. By using this app, you consent to your road event detections being included in anonymized datasets sold to third parties for road infrastructure purposes.
When we sell data to third parties, we:
- Remove all personal identifiers โ your name, email, vehicle plate, and account ID are never included
- Replace your account ID with an anonymous device identifier that cannot be traced back to you
- Only share location data, sensor readings, road names, and weather conditions
- Do not sell your email address, name, or any directly identifiable information to any third party
Buyers of our data include state and local Departments of Transportation, road construction and maintenance companies, municipal governments, fleet management companies, and road safety research organizations.
If you do not wish your road detections to be included in data sales, you may delete your account at any time (see Section 7). We do not offer a partial opt-out where your data remains in the app but is excluded from sales.
Data sharing and third parties
We share data with the following third-party services:
- Supabase โ our database and authentication provider (supabase.com). Your account and road event data is stored on Supabase infrastructure. Supabase is SOC 2 Type II certified. See their privacy policy at supabase.com/privacy.
- OpenStreetMap Nominatim โ used to convert GPS coordinates to road names. Only coordinates are shared; no account data is sent. See openstreetmap.org/copyright.
- Open-Meteo โ used to retrieve weather conditions at detection time. Only coordinates are shared. See open-meteo.com/en/terms.
- Data buyers โ road construction companies, DOTs, and other infrastructure organizations who purchase anonymized road damage datasets as described in Section 4.
We do not share your data with advertising networks, social media platforms, or any party not listed above.
Data retention
- Account data โ retained until you delete your account
- Road event data โ retained indefinitely for data quality and historical analysis purposes, even after account deletion (in anonymized form)
- Local device data โ stored in your browser's local storage; cleared when you clear browser data or uninstall the app
Your rights and choices
Depending on your location you may have the following rights:
- Access โ request a copy of your personal data
- Correction โ update your name, vehicle, or contact information in the app Settings tab
- Deletion โ delete your account by contacting us. Your personal account data will be deleted. Road event data will be retained in anonymized form.
- Portability โ export your road event data using the Export tab in the app (CSV or GeoJSON format)
- Withdrawal of consent โ stop contributing data at any time by stopping monitoring or deleting your account
California residents (CCPA): You have the right to know what personal information we collect and sell, to opt out of the sale of personal information, and to request deletion. To exercise these rights, contact us using the information below. Note that road event data sold to third parties is anonymized and may not qualify as "personal information" under CCPA.
EU/EEA residents (GDPR): Our legal basis for processing your data is (a) contract performance for account and service data, and (b) legitimate interest for road damage data collection and sale. You may lodge a complaint with your local supervisory authority.
Security
We take reasonable technical measures to protect your data including encrypted data transmission (HTTPS), hashed password storage, row-level security policies limiting data access per account, and server-side API key management. No system is completely secure, and we cannot guarantee absolute security of your data.
Children
Road Data is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to this policy
We may update this privacy policy from time to time. We will notify registered users of material changes by email. The effective date at the top of this page will always reflect the most recent version. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact us
For privacy questions, data requests, or to exercise your rights, contact us: