Privacy Policy
Last updated: June 1, 2026
At ChaloChallan, your privacy matters. This Privacy Policy explains what information we collect, how we use it, and what rights you have over your data. By using our platform, you agree to the practices described below.
1. Information We Collect
- Account information: Email address, display name, and UPI VPA or bank details for reward payouts.
- Report data: Vehicle registration numbers, violation type, photos, videos, and verification recordings you submit.
- Location data: GPS coordinates extracted from the EXIF metadata of your uploaded media to verify the location of the reported violation.
- Device and usage data: Browser type, IP address, and basic usage analytics to improve the Platform experience.
2. How We Use Your Information
- Report verification: We use your submitted media, location data, and metadata to verify the authenticity of traffic violation reports.
- Posting on X: Verified reports are watermarked and posted on X (formerly Twitter) tagging the relevant traffic police handles. Your personal identity is never included in these posts.
- Reward payouts: Your UPI VPA or bank details are used exclusively to process reward payments for confirmed challans.
- Communication: We may use your email to send report status updates, payout notifications, and important service announcements.
3. Information Sharing
- Public leaderboard: Only your anonymized display name and report statistics appear on the public leaderboard. No personal details are exposed.
- Posts on X: Published posts contain only the violation evidence, location, and vehicle number. Your identity as the reporter is never disclosed.
- Law enforcement: We may share report data with traffic police authorities when required for challan issuance or if compelled by law.
- No sale of data: We do not sell, rent, or trade your personal information to third parties for marketing or any other purpose.
4. Data Storage and Security
- Cloud infrastructure: Your data is stored securely on Supabase cloud infrastructure with encryption at rest and in transit.
- File storage: Uploaded media files are kept in private storage buckets accessible only via time-limited signed URLs. They are not publicly accessible.
- Access controls: Only authorized team members have access to user data, and access is limited to what is necessary for report verification and platform operations.
5. Your Rights
- Access: You can request a copy of the personal data we hold about you at any time.
- Correction: You can update or correct your account information through your dashboard settings.
- Deletion: You can request deletion of your account and associated personal data. Note that anonymized report data may be retained for public safety records.
- Data portability: You can request an export of your data in a machine-readable format.
6. Cookies
- Authentication cookies: We use Supabase authentication cookies to keep you signed in securely. These are essential for the Platform to function.
- No tracking cookies: We do not use third-party tracking cookies or advertising cookies. We do not run ads on the Platform.
7. Data Retention
- Account data: Retained for as long as your account is active. Deleted within 30 days of an account deletion request.
- Report data: Retained indefinitely for public safety records, but personal identifiers are removed upon account deletion.
8. Changes to This Policy
- Updates: We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform. Continued use after changes constitutes acceptance.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected]. You may also review our Terms of Service.