Privacy Policy - FloodWay

Privacy Policy — FloodWay (หนีน้ำ)

Last updated: October 1, 2026

This Privacy Policy describes how FloodWay ("the App") collects, uses, and protects information on Android. FloodWay does not require an account or login for most features, and we never ask for your name, email address, phone number, or any other directly identifying information beyond what's described in Section 3 below.

1. Location Data

FloodWay uses your device's location (fine and coarse) for two purposes only:

• "Locate me" button — centers the map on your current position and can set it as your route's starting point. This happens entirely on your device.
• Route calculation — when you tap two points on the map (or use "locate me" as one of them) to find a flood-safe route, the origin and destination coordinates are sent to our server at floodway-api.teeyai.in.th so it can compute a route that avoids known flooded areas.

Route requests are processed to compute the result and returned to you. They are not stored in a database and are not linked to any user identifier for users who don't sign in. Standard web server access logs (IP address, timestamp, requested endpoint) may be recorded briefly for security and abuse prevention, as is standard for any web server, and are not used to build a profile of you.

Location permission is optional — you can use FloodWay by manually tapping points on the map without ever granting location access.

2. Map and Flood Data We Display

The app fetches and displays the following public data from our server. Viewing this data does not require or transmit any personal information:

• Flood scenario overlays — modeled flood extents for different water levels, computed from elevation (DEM) data.
• Live flood reports — aggregated from public sources, Longdo Traffic and Traffy Fondue (a public-service platform operated by Thailand's National Science and Technology Development Agency, NSTDA, in partnership with the Bangkok Metropolitan Administration), by our server; not submitted by FloodWay users unless noted below.
• Official flood sensor readings — from the Bangkok Metropolitan Administration's Drainage and Sewerage Department public road-flood sensor network, floodbangkok.bangkok.go.th.
• Satellite imagery (optional layer) — proxied from the Geo-Informatics and Space Technology Development Agency (GISTDA), a Thai government agency, via sphere.gistda.or.th.
• Rain radar overlay (optional layer) — weather radar tiles showing real-time rain intensity, loaded directly by your device from RainViewer's public Weather Maps API. This is a third-party public API intended for personal/educational/small-scale use. Weather data by RainViewer.

To avoid re-downloading this data every time you open the app, FloodWay caches these responses locally on your device (using Android's app storage) for a short period (a few minutes to about an hour, depending on the data). This cache is only ever read by your own device and is cleared when you uninstall the app.

FloodWay is not an official app of, and is not affiliated with, the Bangkok Metropolitan Administration, NSTDA, GISTDA, Longdo, RainViewer, or any government agency. It aggregates and displays their public data for convenience; always defer to the linked official sources for authoritative information.

2a. Traffic CCTV Viewer (Optional)

FloodWay includes an optional in-app page that displays the Bangkok Metropolitan Administration's own BMA Traffic CCTV website inside an embedded browser view, so you can check live traffic camera conditions without leaving the app. We do not operate this website, do not access or store any camera footage ourselves, and your device loads BMA's site directly over the internet exactly as it would in a regular mobile browser. BMA Traffic's own privacy practices and cookies apply to that page; FloodWay has no visibility into or control over them.

3. User-Submitted Flood Photo Reports (Optional)

If you choose to report flooding with a photo, FloodWay asks you to sign in with Google (via Firebase Authentication) first. We use this sign-in only to attribute the report and prevent abuse — we do not access your Google contacts, files, or other Google data.

• The photo, its location, and an optional text description are uploaded to our server and stored in Cloudflare R2 object storage.
• Depending on the moderation mode we have configured, your photo may be automatically checked with Google Cloud Vision's SafeSearch feature, or manually reviewed by an administrator, before it is approved to appear on the map.
• Your Google account's unique ID (not your email or name) is stored alongside the report to identify who submitted it.

You may decline to use this feature entirely and use the rest of the app without signing in.

4. Third-Party Services

• OpenStreetMap (map tiles) — the app loads map tile images directly from tile.openstreetmap.org to display the base map. Standard HTTP requests (including your device's IP address) are made to their servers to fetch tiles. Privacy: https://osmfoundation.org/wiki/Privacy_Policy
• Nominatim / OpenStreetMap (optional, destination search) — when you use the "ค้นหาเส้นทางหลบน้ำ" (search) feature, the place name you type is sent to our server, which queries OpenStreetMap's Nominatim geocoding service on your behalf. We do not store your search queries. https://nominatim.org/
• RainViewer (optional rain radar layer) — your device loads radar tile images directly from RainViewer's own servers (tilecache.rainviewer.com), described in Section 2. https://www.rainviewer.com/
• BMA Traffic (bmatraffic.com) (optional, in-app CCTV viewer) — if you open the CCTV page described in Section 2a, your device connects directly to the Bangkok Metropolitan Administration's traffic CCTV website inside the app.
• Google Sign-In / Firebase (optional, only for photo reports) — Google's privacy policy applies: https://policies.google.com/privacy
• Google Maps (optional) — if you tap "Open in Google Maps" after computing a route, the app opens the Google Maps app (or website) with your route pre-filled. This only happens if you tap that button. Google's own privacy policy applies to that app: https://policies.google.com/privacy
• Google Play — the platform that distributes the app. Google's standard privacy policy applies to data they collect as the distribution platform: https://policies.google.com/privacy

We do not integrate any advertising networks, analytics SDKs, or behavioral tracking. We do not sell or share your data with third parties for advertising purposes.

5. Permissions

• Internet — required to load map tiles and flood data, and to compute routes
• Location (fine and coarse) — optional; used only for the "locate me" feature and to set your route's starting point, as described in Section 1
• Camera — optional; used only if you choose to submit a flood photo report, as described in Section 3
• Notifications — optional; used to alert you about flood conditions

The app does not request access to your microphone, contacts, calendar, files/photo library, biometrics, or motion sensors.

6. Data Security

All data transmitted between the app and our server, and between the app and third-party services listed above, is encrypted in transit using HTTPS/TLS.

7. Data Deletion

If you have never used the photo-report / sign-in feature, FloodWay has no account or stored personal data tied to you to delete. If you have signed in and submitted a report, see our Delete Account — FloodWay page for how to request removal.

8. Children's Privacy

This application is intended for general audiences and does not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time as features change. Material changes will be reflected by updating the date at the top of this page. Continued use of the app after a policy update constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact:
Email: deviotauto@gmail.com