Privacy Policy

Who We Are

Baladi Map is an independent, free civic platform for reporting local problems that Lebanon's municipalities are responsible for. It is not a government service and is not affiliated with any government body, municipality, or political party. We show no ads, we sell no data, and we make no money from users. This policy explains, in plain language, what data we collect, why we collect it, and what happens to it.

Information We Collect

We collect only what the platform needs to work:

• Account details: your email address and, optionally, a display name and username. You can browse, report, and vote without an account.
• Report content: the title, description, category, and severity you write, and any photo you choose to attach.
• Location: the spot you place on the map for a report. Sharing your device's GPS location is optional — you can always place the pin manually or simply pick your municipality from a list.
• Your activity: the reports you file, comments you post, "I'm affected" votes you cast, and issues you follow.
• Municipality claims: if you submit the claim form as a town official, the name, role, email address, and optional phone number you provide.
• Anonymous participation: if you use the platform without an account, a random token stored in a browser cookie lets you report and vote without telling us who you are.
• Technical data: anonymous usage analytics, page-performance measurements, and error diagnostics.

How We Use Your Information

We use this data to:

• publish approved civic reports on the public map and issue pages
• show how many people each problem affects and build the municipality scoreboard statistics
• send you notifications about issues you reported or follow
• review reports before publication and keep the platform safe (moderation, rate limits, abuse prevention)
• diagnose errors and improve how the platform works

We never use your data for advertising, and we never sell it to anyone.

What Is Public

Baladi Map is a public accountability platform, so parts of it are public by design. Once a report is approved, its title, description, category, photo (with faces and license plates blurred), map location, and the reporter's display name are visible to everyone on the internet. Your email address and phone number are never shown publicly. If you would rather not be named, you can report without an account, or choose a display name that does not identify you.

Service Providers We Work With

We do not run our own servers. A small number of service providers process data on our behalf, each receiving only what it needs for its job:

• Supabase — hosts our database, sign-in system, and file storage. It holds account data, reports, photos, votes, comments, and follows.
• Vercel — hosts the website and app. It receives standard technical logs (such as IP addresses) and collects anonymous, aggregated visit and page-speed statistics (Vercel Analytics and Speed Insights).
• Sentry — receives crash and error reports when diagnostics are enabled. These can include device and browser details and what the app was doing when the error happened.
• Google — if you choose "Sign in with Google", Google confirms your email address to us. This is optional; email sign-in works without it.
• Google Gemini (AI) — report photos are processed to blur faces and vehicle license plates before publication, and a report's title and category may be used to generate an illustration when no photo is attached.
• Pollinations.ai — a fallback service for generating report illustrations. It receives only a report's title and category, never photos or personal data.

These providers process data under their own privacy policies and only in order to provide their services to us.

AI Processing

We use AI in two narrow, disclosed ways. First, to protect privacy: every photo attached to a report is automatically processed (currently by Google Gemini) to blur faces and vehicle license plates before it is published. Second, for illustrations: if a report has no photo, its title and category may be used to generate a neutral illustration. We tell you about photo processing before you upload, and attaching a photo is always your choice. AI is never used to profile you, score you, or make decisions about you.

Voting and Anonymous Participation

When you press "I'm affected too" on an issue, we store which issue was voted on, when, and either your account ID (if you are signed in) or your anonymous browser token (if you are not). This is what limits everyone to one vote per issue. We use these votes to show how many people each problem affects and to build aggregate statistics for the municipality scoreboard.

Individual votes are never shown publicly — only totals, such as "47 people affected".

Cookies and Analytics

We use essential cookies to keep you signed in, plus the cookie that holds the anonymous participation token described above. Our analytics are anonymous and aggregated, and do not track you across other websites. We do not use advertising or cross-site tracking cookies.

How Long We Keep Data

Published reports, their photos, and comments remain on the platform as part of the public record — until they are deleted or anonymized. Account data is kept for as long as your account exists. Error and analytics data is kept only for our providers' standard, limited retention periods. If you want something specific removed, contact us at admin@baladimap.com.

Deleting Your Account and Data

You can delete your account inside the app (Dashboard → Settings), or request deletion at any time through the request page at baladimap.com/account/delete — no app required. When your account is deleted, your private data (email address, name, phone number, watchlist, notifications) is deleted. Published civic reports and comments are anonymized rather than erased: they remain on the map as part of the public record, but your name is removed and they can no longer be linked to you. If you also want specific reports or photos taken down, email admin@baladimap.com and we will review the request.

Your Rights and Controls

You stay in control of your data. You can:

• browse, report, and vote without creating an account
• report without attaching a photo and without sharing your GPS location
• view and edit your display name in your dashboard settings
• unfollow issues and stop notifications at any time
• delete your account and request removal of your data (see the section above)
• ask us what data we hold about you, or ask us to correct it, at admin@baladimap.com

Data Security

Data is encrypted in transit and at rest by our hosting providers. Access to private data is restricted by database-level security rules, and moderation actions are limited to authorized administrators. No online service can promise perfect security, but we deliberately keep the amount of personal data we hold small.

International Data Transfers

Our service providers (listed above) store and process data on servers outside Lebanon, mainly in the United States and the European Union. By using Baladi Map, you understand that your data is transferred to and processed in those countries, where data-protection laws may differ from those of Lebanon.

Changes to This Policy

We may update this policy as the platform evolves. The date at the top always shows the current version. For significant changes we will post a notice on the platform and, where appropriate, email registered users.

Contact Us

Baladi Map is run as a public-good project. For any privacy question, request, or complaint, email us at admin@baladimap.com and we will respond as soon as we can.