Privacy Policy

Last Updated: January 1, 2024  |  Effective Date: January 1, 2024

Welcome to MySmartBus ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications (MySmartBus Parent App and MySmartBus Driver App) and our website at www.mysmartbus.in (collectively, the "Services").

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our Services immediately.

1. Information We Collect

1.1 Information You Provide to Us

• Account Registration: Name, email address, phone number, school name, and password when you register an account.
• Child Information: Child's name, class, bus route number, and pickup/drop-off stop details provided by parents/guardians.
• Driver Information: Driver's name, vehicle registration number, driving license number, and contact details.
• School Information: School name, address, transport coordinator contact, and fleet details provided by school administrators.
• Communications: Messages, support tickets, and feedback you submit to us.

1.2 Information We Collect Automatically

• GPS Location Data: Real-time location of the school bus (collected from the driver app). Parents receive location updates but raw GPS data is associated with the vehicle, not the child.
• Device Information: Device type, operating system, unique device identifiers (IMEI/Android ID), and app version.
• Usage Data: Pages visited, features used, app open/close times, and crash reports.
• Network Data: IP address, mobile network carrier, and connection type.
• Push Notification Tokens: FCM/APNs tokens used to deliver notifications.

1.3 Information from Third Parties

• School administration systems that integrate with our platform.
• Payment gateways for subscription billing (we do not store card numbers).
• Analytics providers (Firebase Analytics, Google Analytics).

2. How We Use Your Information

• Provide, operate, and improve the MySmartBus Services.
• Track school bus location in real-time and send alerts to parents/guardians.
• Send push notifications, SMS alerts about bus arrival, boarding, deboarding, and delays.
• Manage user accounts, authentication, and access control.
• Process subscription payments and manage billing.
• Respond to support requests and communicate with users.
• Detect, prevent, and investigate fraud, security breaches, and abuse.
• Comply with legal obligations and enforce our Terms of Service.
• Send service-related announcements and updates.
• Analyse usage patterns to improve app performance and user experience.

We do not sell your personal information to third parties. We do not use children's data for advertising or profiling purposes.

3. Location Data

Location tracking is a core feature of MySmartBus. Here is how we handle it:

• Driver App: The driver app collects precise GPS coordinates while a trip is active. Location data is transmitted to our servers and shared with parents of students on that bus.
• Parent App: The parent app receives bus location updates and displays them on a map. The parent app itself does not collect the parent's location.
• Data Retention: Trip location history is retained for 90 days for dispute resolution and audit purposes, then deleted.
• Background Location: The driver app requires background location access to continue tracking during an active trip. This permission is only used during active school bus trips.

4. Sharing of Information

We share information only as described below:

• Within the Platform: Bus location is shared with parents of enrolled students and the school's transport coordinator.
• Service Providers: We use trusted third-party services such as AWS (cloud hosting), Firebase (notifications), Google Maps (mapping), and payment processors. These providers are bound by confidentiality agreements.
• Legal Requirements: We may disclose information if required by law, court order, or government authority.
• Business Transfers: In the event of a merger or acquisition, user data may be transferred as a business asset, subject to the same privacy protections.
• Safety: We may share information to prevent imminent harm to a child or person.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS).
• Passwords are hashed using bcrypt with a unique salt per user.
• Location data is encrypted at rest on our servers.
• Access to production systems is restricted to authorised personnel only.
• Regular security audits and vulnerability assessments are performed.
• We maintain an incident response plan and will notify affected users of any data breach within 72 hours as required by applicable law.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Children's Privacy

MySmartBus is designed to protect children's safety. We comply with applicable children's privacy laws including:

• We do not knowingly collect personal data directly from children under 13.
• Children's information (name, route) is entered by parents or school administrators on behalf of the child.
• Children's data is used solely for the purpose of tracking and ensuring safe transportation.
• We do not share children's personal data with advertisers or for any commercial profiling.
• Parents can request deletion of their child's data at any time by contacting us.

7. Your Rights & Choices

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate personal data through your account settings or by contacting us.
• Deletion: Request deletion of your account and associated personal data. Note that some data may be retained for legal or safety obligations.
• Portability: Request your data in a machine-readable format.
• Opt-out of Notifications: You can manage notification preferences in the app settings.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at privacy@mysmartbus.in. We will respond within 30 days.

8. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

• Remember your login session and preferences.
• Analyse website traffic (Google Analytics).
• Provide social media sharing features.

You can control cookies through your browser settings. Disabling cookies may affect certain features of our website.

9. Data Retention

• Account data: Retained while your account is active and for 2 years after account closure.
• Trip location history: 90 days from the date of the trip.
• Support communications: 3 years from the date of resolution.
• Payment records: 7 years as required by financial regulations.

10. Third-Party Links

Our website and app may contain links to third-party websites (e.g., Google Play Store, Apple App Store). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

11. International Data Transfers

Our servers are located in India (AWS Mumbai Region). If you access our Services from outside India, your information may be transferred to and processed in India. By using our Services, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting a prominent notice on our website or app.
• Sending an email or push notification to registered users.
• Updating the "Last Updated" date at the top of this policy.

Continued use of our Services after changes become effective constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer: