Privacy · गोपनीयता
Privacy policy
What Khaldo collects, what other people can see, and how to have your data removed.
01Who we are
Khaldo is a road-safety service of the Road Safety Foundation. People use it to report road hazards in Nepal, verify them and follow repairs. Questions about your data: privacy@khaldo.com.
02What we collect
- Your account: name, email address and password. We store the password only in scrambled (hashed) form, so nobody at Khaldo can read it.
- Sign-in sessions: the IP address and browser or device type of each sign-in, to keep you signed in and to let you see and end your sessions.
- Reports: the exact spot you pin on the map, road name, description, severity and up to three photos.
- Photos: we re-save every photo, which removes the hidden camera details (location, device and time) from the file. The picture itself may still show people, vehicles or number plates, so please avoid them.
- Inspections (inspectors only): your location at the site, its accuracy, compass direction, time, and the dash-cam still frames you choose. We never upload the video itself.
- Volunteer applications: name, phone number (if you give it), area, why you want to help, availability and interests.
- Activity: comments, confirmations, flags, points, badges and notifications.
- Security records: counts of sign-in attempts and other requests per email address or IP address, to stop abuse.
03What is public
Public: a report's location, road name, description, severity and status, its approved photos, and public status updates. Your name is shown next to comments you post publicly, and on the contributor leaderboard once you earn points.
Never public: your email address, phone number, and which reports you submitted. Reports appear as "community reported". Photos stay private until our staff approve them.
04How we use it
To run the map, check reports, pass verified hazards to the people who can fix them, prevent abuse, and email you about your account and your reports. We do not sell your data or use it for advertising.
05Who we share it with
- Road authorities and repair organisations working with Khaldo see reports and approved evidence so they can act on them.
- Service providers that run Khaldo for us: Cloudflare (hosting, photo storage and bot checks), Neon (database), and Resend (email). We send a report's coordinates to OpenStreetMap (Nominatim) to look up the place name. Map images come from OpenFreeMap and OpenStreetMap, so your browser contacts them when you view the map.
These providers may store data outside Nepal. Our database is in the United States.
06How long we keep it
- Account details: for as long as you have an account.
- Reports and approved photos: kept as part of the public road record.
- Rejected photos are deleted. Photos never attached to a report are deleted after 24 hours.
- Sign-in sessions expire. Security counters are overwritten as they run.
07Your choices
On your account page you can change your profile and password, sign out other devices, withdraw a report that is still pending review, and withdraw a volunteer application.
To get a copy of your data or have your account deleted, email privacy@khaldo.com from the address you signed up with. Deleting your account also deletes the reports and photos you submitted.
08Keeping it safe
All traffic is encrypted (HTTPS), passwords are hashed, photos are private until reviewed, and only Khaldo staff can open the review tools.
09Changes
If we change this policy we will update this page and the date below, and email account holders about important changes. Last updated 14 October 2026.