Privacy Policy

1. Introduction

ArrivTrack ("we," "our," or "us") is committed to protecting the privacy of students, parents, and school personnel who use our school bus tracking service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

          Our Commitment to Student Privacy: We are committed
          to complying with the Family Educational Rights and Privacy Act
          (FERPA), the Children's Online Privacy Protection Act (COPPA), and
          applicable state student privacy laws.
        

2. Information We Collect

2.1 Information You Provide

Data Type	Examples	Purpose
Account Information	Name, email address, phone number, password	Account creation and authentication
Student Information	Student name, school ID, grade level, school	Link students to bus routes and parents
Payment Information	Credit card details (processed by Stripe)	Subscription billing
Attendance Reports	Absence reasons, excuse letters, dates	School attendance records
Communications	Messages between parents and schools	Facilitate communication

2.2 Information Collected Automatically

Location Data: GPS coordinates of school buses (not individual users) for real-time tracking
Device Information: Device type, operating system, app version
Usage Data: Features accessed, time spent, interaction patterns
Log Data: IP addresses, browser type, access times

2.3 Information from Third Parties

School district student records (with authorization)
GPS tracking device data from bus equipment
Authentication data from Google Sign-In (if used)

3. How We Use Your Information

We use the collected information for the following purposes:

Provide Services: Real-time bus tracking, arrival notifications, attendance management
Safety: Emergency alerts, route optimization, driver communication
Communication: Send notifications about bus arrivals, delays, or schedule changes
Account Management: Process subscriptions, provide customer support
Improvement: Analyze usage patterns to improve our Service
Compliance: Meet legal obligations and school district requirements

4. How We Share Your Information

4.1 With School Districts

We share student and parent information with the relevant school district as necessary to provide transportation services. School districts may have access to attendance records, emergency alerts, and route information.

4.2 Service Providers

We may share information with third-party service providers who perform services on our behalf:

Stripe: Payment processing
Cloud hosting providers: Data storage and infrastructure
GPS tracking providers: Bus location services
Email services: Transactional and notification emails

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of ArrivTrack, our users, or the public.

          We Never Sell Personal Data: ArrivTrack does not
          sell, rent, or trade personal information of students, parents, or
          school personnel to third parties for marketing purposes.
        

5. Data Security

We implement industry-standard security measures to protect your information:

Encryption of data in transit (TLS/SSL) and at rest
Secure authentication and password hashing
Regular security audits and vulnerability testing
Access controls limiting employee access to personal data
Secure data centers with physical security measures

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as necessary to provide our services and fulfill the purposes described in this policy:

Active accounts: Data is retained while your account is active
Attendance records: Retained for the school year plus 3 years
Location history: Bus location data is retained for 30 days
Deleted accounts: Data is deleted within 90 days of account deletion request

Some data may be retained longer if required by law or for legitimate business purposes.

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information
Portability: Request a copy of your data in a portable format
Opt-out: Unsubscribe from marketing communications
Notification Preferences: Adjust which notifications you receive

To exercise these rights, please contact us using the information below or access your account settings.

8. Children's Privacy

ArrivTrack is designed for use by parents, guardians, and school personnel. We do not knowingly collect personal information directly from children under 13 without parental or school consent.

Student information is provided by parents or schools, and we act as a service provider to educational institutions. Parents have the right to review their child's information and request deletion.

9. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected and how it's used
Right to delete personal information
Right to opt-out of the sale of personal information (we do not sell data)
Right to non-discrimination for exercising privacy rights

10. International Users

ArrivTrack is operated in the United States. If you access our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice via email or through the Service.