Privacy Policy

Last updated: 21 June 2026

Road Defender MT ("we", "us", "the app") helps drivers in Malta report parking violations and road obstructions and, where appropriate, escalate them to the Local Enforcement System Agency (LESA). This Privacy Policy explains what personal data we collect, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Maltese data protection law.

1. Who we are

The data controller is Road Defender MT Ltd, Malta. For any privacy question or to exercise your rights, contact us at roaddefendermt@gmail.com.

2. Data we collect

• Account information — your first name, surname and email address.
• Contact & profile details — your mobile number and home address.
• Your vehicles — the license plate number(s) you register to your account.
• Reports you submit — the reported vehicle's license plate number, the violation or obstruction type, any description you write, the precise GPS location at the time of the report, the date and time, and the photo(s) you capture.
• Technical data — a device push-notification token (so we can alert you about your reports) and basic, anonymous diagnostic/analytics data used to keep the app working.

Photos are captured in-app with your camera and are compressed before being stored. We do not access your photo library.

3. How we use your data

• To create and manage your account and registered vehicles.
• To operate the reporting service and process the reports you submit.
• To notify the relevant vehicle owner where the service provides for owner alerts.
• To forward eligible reports to LESA for enforcement.
• To send you push notifications about the status of your reports.
• To maintain the security, integrity and reliability of the app.

4. Legal bases (GDPR)

We process your data on the basis of: your consent (which you can withdraw), the performance of our service to you, our legitimate interests in operating and securing the app, and compliance with legal obligations and the public-interest task of supporting local traffic enforcement.

5. Data sharing

We share data only where necessary to run the service:

• LESA — report details are forwarded to enforcement authorities as part of the reporting process.
• Service providers — hosting and database (Supabase), authentication (Apple / Google sign-in), automated image and license-plate recognition, push notification delivery (Apple Push Notification service) and email delivery. These providers process data on our behalf under data-processing agreements.

We do not sell your personal data, and we do not use it for advertising.

6. International transfers

Where data is processed outside the EU/EEA by our service providers, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Data retention

Reports are retained for up to 3 years for legal and enforcement compliance. Your account and associated profile data are deleted promptly when you request account deletion (in the app via Settings → Delete Account) unless we are legally required to keep specific records. See Delete Your Account for details.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• restrict or object to certain processing;
• data portability; and
• withdraw consent at any time.

You can exercise these rights in the app (Settings → Delete Account) or by emailing roaddefendermt@gmail.com. You also have the right to lodge a complaint with the Maltese supervisory authority, the Information and Data Protection Commissioner (IDPC) — idpc.org.mt.

9. Biometric data

Where Face ID / Touch ID is used to sign in, authentication is handled entirely by your device's operating system. We never access, receive or store your biometric data.

10. Children

Road Defender MT is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18.

11. Security

We use industry-standard technical and organisational measures to protect your data, including encrypted connections and access controls. No system is completely secure, but we work to keep your data safe.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated in the app.

13. Contact