Privacy Policy

Viatic is operated by Adonai Garcia, trading as ViaTechLabs. The operating entity may change to a Canadian corporation; if it does, this policy will be updated and the change announced in the App. This policy describes how we collect, use, disclose and protect your information when you use the Viatic mobile application ("the App") and the website viatic.org. For the purposes of this policy, ViaTechLabs is the organization accountable for your personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

When you use the App, we collect the following:

Account information: Email address and an automatically generated, locale-neutral username when you create your account. You can change the username; we do not ask for your real name.

Location data: GPS coordinates extracted from the photos and videos you upload or from your device, with your permission, to place reports on the map and determine the municipality. We do not track your location in the background.

Media content: Photos and videos you attach to your reports. The original file is stored in a private bucket with no public URL. A redacted copy, with faces and licence plates blurred, is created automatically and is the only version shown to regular users.

Report data: Type of violation, date, time, location, your comments and the licence plate you enter. The plate is stored in a separate private table and is never shown to regular users.

Registered plates (Pro): If you register a vehicle you own, we store the plate, your name as it appears on the vehicle permit and, temporarily, the photo of the permit used for verification.

Expiration dates: If you enable reminders, we store the expiration dates you enter (driver's licence, plate renewal, insurance, health card) and the labels you give them.

Company data: For partner brand or fleet accounts we store the trade name, business number, contact details, branches and the fleet's plates.

Push notification token: If you authorize notifications, we store a technical identifier provided by Apple or Google that lets us send you alerts.

Authority accounts: For municipal users we store the organization, the role within it and an audit log of every action taken on reports and exports.

2. How we use your information

We use your information to: show redacted reports on the App's public map, calculate your points and rank, notify you about the status of your reports, moderate content and review automatic redactions before publication, give authorized municipal officers access to the original media and plate of approved reports in their jurisdiction so they can record an enforcement decision, notify you when a plate you registered appears in a published report, send the expiration reminders you set up, manage redemptions and paid plans, and improve the App.

3. Redaction and what other users see

Regular users and the public only ever see the redacted version of a report: faces and licence plates blurred, no plate field. Redaction fails closed: if the automatic process has low confidence or fails, the report is withheld from every public surface until a moderator reviews it. Moderators employed by ViaTechLabs see both versions in order to review the blur. Officers with an authority role see the original media and the plate, only for approved reports inside their organization's jurisdiction, and only inside the App. Every such access is logged.

4. Disclosure

Approved reports are visible in the App in redacted form, including location, type of violation and the blurred media. Your username may appear next to your reports; your email never does. We may publish redacted report content on Viatic's official social media channels for education and awareness, never with your contact information. We do not sell or rent personal information. If you register your plate and it appears in a published report, you receive a notice with the redacted, published version; the reporter never learns your identity and you never learn theirs. Partner brands see only what is needed to validate a redemption (code, item and time); they do not receive your name or email. Fleet accounts receive notices only about their own units. Municipal authorities receive the original media and plate as described in section 3; they do not receive the reporter's identity.

5. Anonymized data

ViaTechLabs may produce aggregated and anonymized datasets from reports to provide analytics to municipalities and other third parties. Before any sharing, every identifier is removed, including usernames, emails, plates and faces. Anonymized data may include locations, violation types, dates, times and statistical patterns. By using the App you agree that your reports contribute to these datasets.

6. Storage, security and Canadian residency

Your data is stored with Supabase Inc. in the Canada Central region (Montreal). Media is encrypted in transit (TLS 1.2 or higher) and at rest. Passwords are hashed with bcrypt and never stored in plain text. Original media lives in a private bucket served only through a role-gated function. Some processing providers, such as the email delivery service and the payment processor, may process limited data outside Canada under their own agreements; we name them in sections 8 and 10.

7. Your rights

Under PIPEDA you have the right to access the personal information we hold about you, to challenge its accuracy and have it corrected, to withdraw consent subject to legal or contractual restrictions, and to complain to the Office of the Privacy Commissioner of Canada. You can view your data in your profile, delete your account and all associated data from the profile section of the App, and request a portable copy by writing to info@viatechlabs.com. We respond within 30 days.

8. Push notifications and email

If you authorize push notifications, we send updates about the status of your reports and comments, notices when a registered plate appears in a published report, expiration reminders and, only if you turn them on, promotions from partner brands (off by default). You can turn notifications off at any time from your device settings or from the profile section of the App. Email alerts for plates and reminders are sent to Pro subscribers and fleet accounts through Resend, our email delivery provider, from the viatic.org domain.

9. Legal chatbot and AI processing

The App includes a chatbot that uses artificial intelligence to answer questions about the Ontario Highway Traffic Act and municipal by-laws. Your questions are processed by an external language model provider under industry-standard data processing agreements. The content of your questions is kept on our servers to calculate your query quota, to provide a conversation history (Pro) and to improve accuracy through aggregated analysis and manual review of problematic answers. Questions are not associated publicly with your identity; only our internal team can link a question to a user, and only for support or to fix a reported error. If you delete your account, your chatbot history is deleted within 30 days. Chatbot answers are informational and are not legal advice.

10. Payment processing

If you subscribe to Pro or contract a fleet or partner brand plan, your card details are processed directly by Stripe Inc., a PCI-DSS Level 1 certified processor. ViaTechLabs does not store and cannot access your full card number, CVV or expiry date. We receive from Stripe the last four digits of your card, the card brand, your billing email, your billing province for tax purposes and an opaque customer identifier to link payments to your account. Stripe's privacy policy is at stripe.com/privacy.

11. Plate registration and ownership verification

As a Pro subscriber you may register up to three plates of vehicles you own to be notified when they appear in a published report. To verify ownership we ask for your name as it appears on the vehicle permit and a photo of the permit. The photo is used only for verification, is processed automatically and, if it needs review, is seen only by the Viatic team; it is deleted once verification concludes. Your name and plates are stored privately and are never shown to other users. Verification expires after one year and you can remove your plates at any time. Notices are issued only for reports that have been reviewed and published, show the redacted version, and never reveal the reporter. If you respond to a report as the owner, the evidence you attach (for example a police report or a photo of your vehicle) is seen only by the moderation team and is not published.

12. Expiration reminders

The expiration dates you save are used solely to send you alerts 30, 7 and 1 day in advance. They are private, are not shared with third parties or used for marketing, and you can edit or delete them at any time from the App.

13. Partner brand, fleet and authority accounts

Company accounts (partner brands and fleets) are identified by their trade name and business number, not by a person. Their contact details are used to administer the plan, approve artwork and send notices and summaries. A fleet's plates are stored privately and generate notices only to the company itself. Municipal authority accounts belong to the organization that requested them; actions taken with them are logged and may be reviewed by the organization's administrator and by ViaTechLabs.

14. Minimum age

Viatic is intended exclusively for persons aged 18 and over. We do not knowingly collect information from minors. If we learn that we have collected data from a minor, we delete it immediately. Parents or guardians who believe a minor has provided us with personal information can write to info@viatechlabs.com.

15. Data retention

We keep your information while your account is active. If you delete your account, your personal data (email, username, reports, comments, points and notification token) is permanently deleted within 30 days. Aggregated and anonymized data may be kept indefinitely. Vehicle permit photos are deleted once verification concludes. Evidence attached to an owner response is kept as long as the report it answers exists. Audit log entries for moderation and authority actions are kept for the period required to demonstrate accountability to municipalities and may outlive the account that produced them, with the account identifier replaced by a system marker.

16. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes through the App. Continued use after a change constitutes acceptance of the updated policy.

17. Contact

Questions about this policy or about your data: info@viatechlabs.com. You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.