FixMyCity BENGALURU
Privacy · ಗೌಪ್ಯತೆ

Privacy policy

Version 2026-08-01 · Effective for MyCity / Fix My City
Digital Personal Data Protection Act, 2023 · Section 5

FixMyCity (also called MyCity in the app) is a civic reporting app for Bengaluru. The public record only works if reports are open. That openness stops at the things that could put a reporter at risk.

In short: photos, ward, category, and timestamps are public. Your email, phone number, and exact home location are not. You can export or erase your account from Settings at any time.

1. Who we are

FixMyCity / MyCity is an independent civic project operated in connection with Orrgo. It is not a government service, and is not affiliated with, endorsed by, or operated by any government body. The service is available at https://fmc.orrgo.com and through the MyCity mobile app.

2. What we collect

When you use the app, we may process:

  • Account: email address (via Google Sign-In), display name, and a device identifier needed to keep you signed in.
  • Reports: photos you take, category and description, GPS coordinate and time stamped on each photo, ward mapping, and timeline updates.
  • +1 / support: that you supported a report, with coarsened location suitable for grouping — not a precise trail of your movements.
  • Optional analytics: anonymised usage statistics only if you opt in at consent.
  • Moderation signals: content reports you file, and automated flags (for example duplicate media or blur review).

We do not need your phone number for Google Sign-In. If OTP login is offered later, your number is stored for authentication only and is never shown on a report.

3. Why we process it

We use this data to:

  • Place your report in the right neighbourhood and show it on a dated public timeline
  • Group nearby reports of the same kind so streets are not flooded with duplicates
  • Verify that a photo was taken near the claimed place and time
  • Moderate abuse and keep the public record usable
  • Let you download a copy of your data or request erasure

We process this under the consent you give at first run (DPDP Act, 2023, Section 5), for the purposes stated in the in-app consent notice.

4. What is public

  • Photos of the issue (EXIF metadata is stripped before public serving)
  • Ward, category, and timestamps
  • +1 counts and dated timeline updates
  • Your display name and ward on reports you file (not your email or phone)

5. What is never shown publicly

  • Your email address or phone number
  • Your exact home location
  • Who flagged or reported a post
  • Precise GPS of +1 interactions (stored only in a coarsened form)

6. Photos and location

Civic photos inevitably catch streets, landmarks, and sometimes bystanders. We strip EXIF from served assets. You can report a post for privacy concerns (face, plate, house number) from the app. Precise coordinates on an issue are kept for mapping and verification; public presentation is meant to describe the street problem, not to pin a specific house as “the reporter’s home.”

7. Sharing

We do not sell personal data. We may share limited data with:

  • Infrastructure providers that host the API, database, and media (under contract, only to run the service)
  • Google, when you choose Google Sign-In (their terms also apply to that sign-in)
  • Moderators reviewing flagged media or reports

Passing reports on to any authority is not active yet. If it ships, we will send an evidence pack only with the purposes disclosed at that time, and the citizen record will remain separate from any official ticket status.

8. Retention

  • Account data: kept while your account is active
  • After erasure: name, email, and similar identifiers are removed or anonymised; hard-purge of deleted account rows follows within about 30 days except where a legal hold applies
  • Civic reports: stay on the public record without your name after erasure — a ward’s history cannot be deleted by one person
  • Auth challenges / short-lived tokens: purged quickly after use

9. Your rights

From Settings → Account & data in the app you can:

  • Download a copy of your data (export)
  • Withdraw consent / request erasure (delete account)

Erasure anonymises authorship but retains the civic evidence already filed. That trade-off is stated in the consent notice so it is not a surprise at deletion time.

10. Children

MyCity is intended for adults. If you are under 18, do not create an account or post without verifiable parental consent as required by applicable law.

11. Security

We transmit data over HTTPS and restrict access to account and media systems. No method of transmission or storage is perfectly secure; report suspected incidents to the contact below.

12. Changes

If we change this policy in a material way, we will update the version date above and, where required, ask for fresh consent in the app (consent version 2026-08-01).

13. Contact / grievance

Questions, corrections, or grievances about personal data:

We aim to respond within a reasonable period consistent with the DPDP Act.