How PotholeScan, a product of OFO Tech, collects, uses and protects your data. Effective 18 July 2026.
PotholeScan is developed and operated by OFO Tech ("OFO Tech", "we", "us"). OFO Tech is the data controller responsible for personal data processed through the PotholeScan mobile app. PotholeScan has no dashboard of its own — scan data is exported only to destinations you configure, such as your maintenance system, geoROAD.ai, or a WhatsApp report.
Account details (name, work email, organisation). Scan records you choose to export — pothole measurements (depth, area, estimated fill volume), images, 3D models, GPS coordinates, timestamps, and road / lane tags. Device and diagnostic data (model, OS version, crash logs) used to keep the app reliable.
Pothole detection and 3D measurement run entirely on your iPhone. Standalone scans remain on the device unless you explicitly share or export them. When you accept a measurement request from an integrated system such as geoROAD.ai, PotholeScan sends the requested scan image, measurements and available 3D snapshot to the destination configured by that system so it can complete the work order.
To run the app, deliver the exports you request (to your API and webhooks, geoROAD.ai, or a WhatsApp report), generate PDF reports, secure your account, and improve model accuracy and app stability. We do not sell your data or use it for third-party advertising.
You control where records go: your own systems via REST API and webhooks, geoROAD.ai (when you enable it), or a WhatsApp report you send yourself. Any data we process is shared only within your organisation and with sub-processors (cloud hosting, error monitoring) bound by contract. We retain synced records for the life of your account and delete them within 30 days of a verified deletion request.
You can access, correct, export or delete your personal data, and object to or restrict certain processing. To exercise these rights, contact OFO Tech using the details below.
OFO Tech · Data Protection · admin@ofo.my. We will respond to privacy requests within 30 days.