Privacy Policy

The short version: Mr.Road is an independent vehicle companion app by Citizen Apps. We help you check traffic challans from official government portals. We never sell your data. We collect the minimum needed to provide the service. You can delete your data anytime.

This policy is written under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

Who we are
What we collect
How we use your data
Where our data comes from
Who we share data with
Ads (AdMob disclosure)
How long we keep data
Your rights
How we protect your data
Children's privacy
Changes to this policy
Grievance officer & contact

1.Who we are

Mr.Road (formerly known as e-Challan / Traffic e-Challan) is owned and operated by Citizen Apps, a proprietorship based in India. We are an independent third-party application. We are not affiliated with the Government of India, the Ministry of Road Transport and Highways, any state Regional Transport Office (RTO), the Parivahan portal, or any other government entity.

For privacy questions, contact privacy@mrroad.in.

2.What we collect

We collect the smallest amount of data needed to make the app work. Here is the complete list:

Data	When	Why
Phone number	When you sign in (optional)	To identify your account and send notifications you've opted into.
Vehicle plate numbers	When you save vehicles to your garage	To remember your vehicles so you don't have to retype them.
Payment history (transaction IDs only)	When you pay a challan through the app	To show your past payment receipts. We never see your card number, UPI ID, or banking credentials.
App usage analytics (anonymous)	While you use the app	To understand which features work well and which need improvement. Aggregated, not tied to your identity.
Crash reports (anonymous)	If the app crashes	To diagnose and fix bugs.
Device identifier (for ads only)	While the app is running	Used by Google AdMob to show relevant ads. See section 6.
Notification token (FCM)	If you allow notifications	To send you reminders about renewals or new challans.

What we do NOT collect:

Your card number, UPI ID, or banking credentials. Payments are routed to the official RTO portal — we never see your payment details.
Your contacts, photos, location, microphone, or any data unrelated to the app's stated purpose.
Vehicle records of other people. We do not maintain a database of vehicles.

3.How we use your data

We use your data only for the purposes you've agreed to. Specifically:

To provide the service — show your saved vehicles, run your challan queries, redirect you to official payment portals.
To improve the app — anonymous analytics tell us which features work. We never analyse individual users.
To send notifications you've opted into — renewal reminders, important app announcements.
To show ads via Google AdMob — see section 6.
To comply with law — if a court or government authority lawfully requires data, we will provide it.

4.Where our data comes from

When you check a traffic challan, the data shown to you comes from official government sources: the Parivahan portal (parivahan.gov.in), the relevant state e-Challan / RTO websites, or licensed B2B data resellers (such as Surepass or Karza) where applicable.

Every such lookup is initiated by you. We do not pre-fetch vehicle records. We do not maintain a vehicle database. We do not scrape government portals in bulk. We pass your query through, return the response, and cache it briefly so you don't burn a query if you re-open the screen.

We share data only with the following parties, only for the purposes listed:

Official government portals (Parivahan, state RTOs) — when you make a challan query, your vehicle number is sent to them so they can return the response.
Licensed B2B data providers (e.g. Surepass, Karza) — if/when integrated for RC and similar lookups. They are bound by their own DPDP contracts with us.
Google Firebase — for crash reports and anonymous analytics, governed by Google's privacy policy.
Google AdMob — for ad delivery. See section 6.
Insurance / loan partners — only if you explicitly opt into requesting a quote (planned for a future version). Each share requires your specific consent.

We do not sell your data to anyone, for any purpose, ever.

6.Ads (AdMob disclosure)

We use Google AdMob to show ads on certain screens (Home, Notifications, Payment History). Ads fund the free version of the app.

AdMob may collect a unique device advertising identifier and basic device info (model, OS version, language) to show ads that are relevant to you. You can opt out of personalised ads in your Android device settings (Settings → Google → Ads → Reset/Delete advertising ID).

For full details, see Google's advertising privacy policy.

7.How long we keep data

Account data — for as long as your account is active. Inactive accounts (no login for 24 months) are automatically purged.
Vehicle lookup cache — 24 to 72 hours, then auto-deleted.
Payment receipts — kept until you delete them or your account.
Anonymous analytics — retained indefinitely (because there is no PII to delete).
If you request deletion — your data is permanently deleted within 30 days.

8.Your rights

Under the DPDP Act 2023, you have the following rights. Exercise any of them by emailing privacy@mrroad.in or via the app's Settings → Privacy screen.

Right to access — request a copy of the data we hold about you.
Right to correct — fix anything that's inaccurate.
Right to erase — delete your account and associated data. See our Delete Account page.
Right to withdraw consent — change your mind about any opt-in (notifications, community insights, ads personalisation, etc.).
Right to grievance — escalate to our Grievance Officer (section 12).
Right to nominate — designate someone to exercise these rights on your behalf in the event of your death or incapacity.

9.How we protect your data

All data is encrypted in transit (HTTPS).
Account data is encrypted at rest on our servers.
Access to user data inside our team is logged and limited to legitimate business needs.
We do not retain payment credentials (card / UPI / netbanking).
In case of a personal data breach, we will notify affected users and the Data Protection Board of India within 72 hours, as required by the DPDP Act.

10.Children's privacy

Mr.Road is intended for users 18 years and older (since vehicle ownership and traffic-fine matters require legal majority in India). We do not knowingly collect data from anyone under 18. If we learn that we have collected data from a child, we will delete it promptly.

11.Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top of this page. For material changes, we'll also notify you in the app. Your continued use of the app after a change means you accept the updated policy.

12.Grievance officer & contact

Under the Information Technology (Intermediary Guidelines) Rules, 2021, and the DPDP Act 2023, here are our designated contacts:

Grievance Officer / Data Protection Officer

Anil Kumar Kanneboina
Citizen Apps
Email: grievance@mrroad.in
Response SLA: within 48 hours of receipt

General privacy questions

Email: privacy@mrroad.in

Data Protection Board of India (escalation)

If you're unsatisfied with our response, you may approach the Data Protection Board of India under the DPDP Act 2023. Visit meity.gov.in for current contact details.