Privacy Policy

Schooliy — School Transport
Effective date: March 18, 2026

This Privacy Policy describes how Schooliy (“we”, “us”) collects, uses, and shares information when you use our School Transport services, including the Android application (package name com.schoolapp.parentmobile), our web applications at schooliy.com, and related APIs operated for schools and their authorized users (drivers, escorts, parents, and school administrators).

By using the app or services, you agree to this policy. If you do not agree, please do not use the services. Schools that subscribe to Schooliy are responsible for informing their users (e.g. parents) as required by local law.

1. Information we collect

Depending on your role and how your school configured the system, we may process:

Account and profile data: name, phone number, email address, role (e.g. driver, escort, parent, admin), school association, and authentication credentials (passwords are stored using industry-standard hashing; we do not store plain-text passwords).
Student and transport data: student names and related routing/assignment data managed by the school (e.g. bus assignments, tour stops, attendance or stop status where the product records it).
Location data: when you grant permission, we collect device location (including approximate and precise location, and where enabled, background location) to support live bus tracking, route execution, student pickup/drop-off workflows, and safety features such as SOS. You can revoke location permission in your device settings; some features will not work without it.
Technical and device data: device type, operating system, app version, push notification tokens, IP address, and diagnostic logs needed to operate and secure the service.
Communications: messages you send through in-app forms (e.g. contact requests) or support channels.

2. How we use information

We use the information above to:

Provide, maintain, and improve transport planning, routing, live tracking, and school administration features;
Authenticate users and enforce access controls per school;
Send service-related notifications (e.g. tour or safety alerts) via push notifications where enabled;
Ensure safety and security, including fraud prevention and incident response;
Comply with legal obligations and respond to lawful requests.

3. Legal bases (where applicable)

If the EU/UK GDPR applies, we rely on contract (providing the service to the school and users), legitimate interests (security, product improvement), and where required consent (e.g. optional marketing or non-essential cookies on the website). Schools may act as independent controllers for certain student data; we process such data on documented instructions where we act as a processor.

4. Sharing of information

We do not sell your personal information. We may share data with:

Your school / tenant administrators — as authorized by the school’s use of the platform;
Service providers who help us host, secure, or operate the service (e.g. cloud hosting, push notification providers), bound by confidentiality and data-processing terms;
Maps and location services — map tiles or routing may be provided by third parties (e.g. OpenStreetMap contributors / providers used by our map libraries); those providers may receive requests that include map viewport or coordinates as needed to display maps;
Authorities — when required by law or to protect vital interests (e.g. emergency services in connection with a verified SOS event, subject to applicable law).

5. Data retention

We retain information for as long as needed to provide the service and for legitimate business and legal purposes (including dispute resolution and compliance). Retention periods may depend on school settings and applicable law. Aggregated or de-identified data may be retained longer.

6. Security

We implement technical and organizational measures designed to protect personal data, including encryption in transit (HTTPS), access controls, and least-privilege access for staff. No method of transmission over the Internet is 100% secure.

7. Children’s privacy

The service is intended for use by schools and adults (staff and parents) managing student transportation. Student information is provided by the school. If you believe we have collected information in error, contact your school administrator or us using the details below.

8. Your choices and rights

Depending on your region, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. To exercise these rights, contact your school (data controller for many categories) or email us. You may disable push notifications or location in your device settings; core features may require them.

9. International transfers

If you access the service from outside the country where our servers are located, your data may be transferred and processed in other countries. We take steps designed to ensure appropriate safeguards where required.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Effective date” above. Continued use after changes constitutes acceptance of the updated policy where permitted by law.

11. Contact

For privacy questions or requests regarding Schooliy School Transport, contact us through the Schooliy website (Contact / school channels) or your school administrator.

This page is hosted at https://schooliy.com/privacy-policy.html for use in Google Play and other app store disclosures.