Last updated: 25 May 2026
MaltaMoto is a mobile application that helps motorcyclists find and navigate to motorcycle parking locations across Malta and Gozo, and report issues with those locations. The app is operated by Invariant Ltd, a company registered in Malta.
Invariant Ltd
The Strand, Fawwara Building
Triq l-Imsida
Gzira GZR 1401, Malta
For privacy inquiries you may contact us at: privacy@maltamoto.com
Accounts are created exclusively through third-party identity providers: Sign in with Apple and Sign in with Google. We do not store passwords. When you sign in, we receive from the identity provider:
Account creation is optional. You can browse parking spots and use navigation without an account. An account is required to save favourite spots, create private spots, submit visit confirmations, or file issue reports.
The app requests access to your device location for the following purposes:
Your precise location is processed on-device only. It is not transmitted to our servers and is not stored anywhere outside your device. We do not track your location in the background and we do not build movement profiles.
When you confirm that you parked at a spot, we record:
This data is used in aggregate to power the busy hours feature and spot rankings. Individual visit records are accessible only to you and to MaltaMoto. Aggregated, anonymised statistics derived from visit data may also form part of our data services, as described in Section 4.
When you file an issue report, we collect:
Photos you attach are uploaded to and stored in our cloud storage (Supabase Storage). Please do not include images that contain your face, licence plate, or other personal identifiers unless you are comfortable sharing that information with MaltaMoto.
If you create private parking spots (personal locations visible only to your account), we store:
Private spots are visible only to you and are never shared with other users. We may use aggregated, fully anonymised data derived from private spot locations (such as which areas have high demand) for statistical purposes and to improve the public spot database, and as part of our data services as described in Section 4. No information that could identify you or your exact private location is shared or published.
We store a list of public spot IDs that you have saved as favourites, linked to your user ID.
If premium features are available, purchase transactions are handled by RevenueCat, a third-party subscription management platform. When you make a purchase, RevenueCat receives your app store receipt and assigns you an anonymous customer identifier. We receive only your RevenueCat customer ID and entitlement status, not your payment card details. See RevenueCat's Privacy Policy for full details.
To reduce loading times, the app caches parking spot data and your visit history locally on your device using encrypted device storage (AsyncStorage). This data remains on your device and is cleared when you uninstall the app or sign out.
When you first open the app, we generate a random installation identifier and record it together with basic device information. Specifically, we store:
This record is created once per installation. Reinstalling the app generates a new installation ID and a new record; any prior record remains but is no longer associated with your device.
If you sign in to MaltaMoto, your user ID is linked to the device record so that we can associate your account with your installation. A device record is linked to at most one user account.
This data is used for statistical purposes: understanding which device models and OS versions our users run so that we can prioritise compatibility testing and ensure broad device support. It is not used for advertising, cross-app tracking, or any form of profiling.
The legal basis for this processing is our legitimate interest in maintaining a compatible and stable application (Article 6(1)(f) GDPR). The data collected is limited to what is necessary for that purpose. The installation ID is a random value with no meaning outside MaltaMoto and cannot independently identify you.
We use PostHog, a product analytics service, to understand how users interact with the app. PostHog is hosted in the European Union and operates in compliance with the GDPR.
Analytics events are associated with a pseudonymous identifier derived from your installation ID (the random UUID described in Section 2.9). When you sign in, PostHog links your installation ID to your MaltaMoto user ID, allowing prior anonymous activity to be associated with your account profile. This is to prevent fragmentation of your usage history across multiple anonymous profiles and to allow us to understand how users engage with features both before and after account creation.
The types of in-app interactions we track include (but not limited to): opening the app, viewing and interacting with parking spots on the map, using navigation features, confirming parking arrivals, saving or removing favourite spots, filing issue reports, signing in or out, and interacting with premium subscription features. The specific interactions we collect may change as the app evolves. Events record the type of interaction and relevant contextual identifiers (for example, which parking spot was involved, or which sign-in provider was used), but do not record your precise location, any free-text content you enter, or any information that could personally identify you.
This data is used solely to understand how the app is used, identify issues, and guide product improvements. It is not used for advertising, cross-app tracking, or behavioural profiling. The legal basis for this processing is our legitimate interest in understanding and improving the app (Article 6(1)(f) GDPR).
We do not sell your personal data. We do not use your data for advertising purposes or cross-app tracking. We do not share your personal data with third parties except as described in Section 5. Anonymised, aggregated data that does not constitute personal data under the GDPR may be shared with or licensed to third parties as described in Section 4.
In addition to operating the MaltaMoto app, we build and maintain anonymised statistical datasets derived from the aggregated activity of all app users. These datasets do not contain personal data: they consist of aggregate metrics, patterns, and indicators compiled across the user base in a form that cannot be traced back to any individual user.
Examples of the kinds of insights that may form part of these datasets include:
These datasets, and access to derived products and services such as data dashboards or analytical reports, may be licensed to organisations including government bodies, public authorities, research institutions, transport planners, and commercial entities, for purposes such as urban planning, infrastructure improvement, statistical analysis, and service development. Licensing arrangements may be one-time or ongoing, and are subject to written agreement with the relevant licensee.
Because these datasets are fully anonymised at the point of compilation, they do not constitute personal data and fall outside the scope of the GDPR. No information that could identify you, your account, your device, or your exact locations is included in or derivable from any licensed dataset. The legal basis for the underlying processing of your data to produce these anonymised outputs is our legitimate interest in building a sustainable data service (Article 6(1)(f) GDPR).
If you have questions about the types of data products we produce or our licensing arrangements, you may contact us at privacy@maltamoto.com.
The following third-party services process data on our behalf:
When you delete your account, we delete the following data within 30 days:
The following data is retained after account deletion, as it forms part of the shared community dataset and has been anonymised:
Retained records contain only anonymous user IDs and spot references. They cannot be linked back to your identity after your account is deleted.
Analytics events held by PostHog are associated with your installation ID and, while you have an active account, with your user ID. When you delete your account, we remove the link between your user ID and installation ID in our systems. Analytics events recorded prior to deletion remain in PostHog associated with your installation ID.
Anonymised, aggregated datasets compiled for data services purposes (as described in Section 4) do not reference individual user records and may be retained and licensed indefinitely.
Depending on your jurisdiction, you may have the right to:
Note that these rights apply to personal data. Properly anonymised, aggregated data (including data that has already been compiled into statistical datasets) does not constitute personal data and is therefore not subject to individual rights requests.
To exercise any of these rights, contact us at privacy@maltamoto.com. We will do our best to respond within 30 days.
We implement reasonable technical and organisational measures to protect your data, including TLS encryption in transit, database row-level security policies, and access controls. However, no system is completely secure and we cannot guarantee the absolute security of data transmitted over the internet.
MaltaMoto is intended for use in Malta by licensed motorcyclists and moped riders. The minimum age to use the app is 16, in line with Malta's minimum legal riding age and Malta's digital consent age under the GDPR. We do not knowingly collect personal data from anyone under 16. If you believe a person under 16 has created an account, please contact us and we will delete it.
We may update this policy from time to time. Material changes will be communicated via an in-app notice or by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the revised policy.
For any privacy-related questions or requests, contact us at privacy@maltamoto.com.