Privacy Policy

Plain English summary: we collect your info so you can report faults, track progress, and appear on leaderboards. All uploaded images are automatically scanned for content safety. Google AdMob creates advertising profiles that link your activity across different apps — your municipal reporting may influence ads you see elsewhere. You can control this through iOS tracking settings. We never sell your data.

1. Introduction

My Street Champion ("MSC", "we", "us", "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, process, store, and protect your data when you use our website, mobile application, and related services.

We comply with the Protection of Personal Information Act, 4 of 2013 (POPIA) and other applicable data protection laws, ensuring that your personal information is handled lawfully, fairly, and transparently.

2. Information We Collect

2.1 Personal Information

• Full name and username
• Contact number
• Email address
• Physical address (required for ward detection and councillor routing)
• Identification number (if provided for verification)
• Reference numbers from official fault reports to municipalities
• Profile photo or avatar (optional)

2.2 Location Data

Your address and ward (entered manually or detected via GPS) — required for:

• Routing reports to correct ward councillor
• Ward-level leaderboards and competitions
• Local community sponsor advertisements
• Municipality and ward verification

2.3 Technical & Usage Data

• Device type and operating system
• IP address and geolocation data
• App usage statistics and crash reports
• Time and date of reports submitted
• Photographs and videos uploaded for incident reporting (automatically scanned for content safety using Google Cloud Vision API)
• Advertising interaction data (ad views, clicks)

2.4 Image Moderation Data

• Automated content analysis of all uploaded images using Google Cloud Vision API
• Image safety scores and moderation decisions
• Flagged content categories (if inappropriate content detected)
• Moderation logs and violation records
• User violation history for account management

2.5 Third-Party Service Data & Cross-App Tracking

• Data processed by Google Firebase (authentication, storage, messaging, analytics, crash reporting)
• Cross-app advertising identifiers: Google AdMob uses your device's advertising identifier to create behavioural profiles that link your activity in our app with your behaviour across other AdMob-enabled apps and websites
• Cross-app data sharing: your municipal reporting activity, location data, and app usage patterns may influence advertisements shown to you across Google's advertising network
• Google AdMob advertising identifiers and interaction data
• Google Places API data (address validation and autocomplete)
• Performance and diagnostic data via Firebase Crashlytics
• Google Cloud Vision API data (automated image content moderation and safety analysis)

3. How We Collect Your Data

We collect personal information through:

• Verification processes with municipalities and councillors
• Direct submissions when you create an account or submit a fault report
• Automatic data capture via cookies and analytics tools
• Integrated third-party services such as Google Firebase, Google AdMob, Google Places API, Google Cloud Vision API, and ward mapping services

4. Purpose of Processing

We process your personal information for:

• Logging, tracking, and escalating municipal service delivery issues
• Ensuring your reports reach the correct ward councillor using location data
• Facilitating communication with ward councillors and other stakeholders
• Gamifying reporting through leaderboards and rewards
• Displaying ward-level leaderboards and local community sponsor advertising
• Enabling Google AdMob to create cross-app advertising profiles for personalised ads across multiple applications
• Automatically scanning uploaded images for inappropriate content and policy compliance
• Maintaining community safety standards and preventing harmful content
• Enforcing content policies and managing user violations
• Sending status updates and notifications
• Analysing trends for municipal performance reporting
• Improving the app through crash reports and performance data
• Marketing and promotional activities (where consent is given)

5. Data Sharing & Third Parties

We may share your data with:

• Relevant municipalities and ward councillors for issue resolution
• Verified community champions for follow-ups
• Contractors or service providers appointed by municipalities
• Technology service providers, including Google Firebase, Google AdMob, Google Places API, Google Cloud Vision API, and ward mapping services
• Local community sponsors (for prize fulfilment and relevant advertising)
• Research institutions and partners (only anonymised and aggregated data)
• Marketing partners (with your consent)

These providers may process limited personal and technical data strictly to provide their services. We do not sell your personal data.

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law:

• Service delivery reports: 5 years
• Leaderboard and competition records: 3 years
• Account information: until deletion request
• Crash logs & diagnostics: 24 months (standard Firebase retention)
• Advertising data: 24 months or until consent withdrawal
• Image moderation logs: 24 months for security and compliance purposes
• Aggregated/anonymised data: may be retained indefinitely

7. POPIA Rights of Data Subjects

As per POPIA, you have the right to:

• Access your personal data
• Request correction or deletion of your data
• Object to the processing of your data
• Withdraw consent for marketing communications
• Control cross-app advertising tracking via iOS Settings > Privacy & Security > Tracking
• Lodge a complaint with the Information Regulator (justice.gov.za/inforeg)

To exercise these rights, contact admin@mystreetchampion.co.za. We may require proof of identity.

8. Cookies & Tracking

Our website uses cookies for functionality, analytics, and advertising. In the mobile app, we use:

• Google Advertising ID: for cross-app advertising profiles and targeted ads
• Firebase Installation ID: for app analytics and crash reporting
• Performance cookies: to monitor website and app performance
• Functional cookies: for user preferences and settings

Cross-app tracking (mobile app): Google AdMob connects your activity across all AdMob-enabled apps, and your municipal reporting may influence ads in other apps. iOS users can disable this via Settings > Privacy & Security > Tracking. Website visitors can manage cookies via browser settings.

9. Data Security

We implement security measures including SSL/TLS encryption for data transmission, encrypted cloud storage via Google Firebase, role-based access controls, regular security audits and monitoring, and automated content moderation for uploaded images. However, no online system is 100% secure.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16.

11. International Data Transfers

Your data may be processed outside South Africa by our service providers (Google Firebase, AdMob, etc.) but remains protected under POPIA-equivalent safeguards and adequacy decisions.

12. Marketing & Communications

We may send you service updates and notifications, community leaderboard updates, local sponsor offers (ward-targeted), and platform news and feature announcements. You can opt out of non-essential communications at any time.

13. Changes to This Policy

We reserve the right to update this policy. Changes will be posted on our website and app with appropriate notice.

14. Data Sources & Attribution

Municipal boundary data: Municipal Demarcation Board (demarcation.org.za). General municipal info: Municipalities of South Africa (municipalities.co.za). Geographic datasets: ArcGIS Public Data Portal.

Disclaimer: My Street Champion is independent and not affiliated with any government entity.

15. Contact Information

For privacy and POPIA queries:

• Email: admin@mystreetchampion.co.za
• Data Protection Officer: admin@mystreetchampion.co.za
• Website: www.mystreetchampion.co.za
• Physical address: to be added when available

16. Governing Law

This Privacy Policy is governed by South African law, including POPIA and other applicable data protection legislation.