Privacy Policy

1. Who we are

SkolBuzz ("we", "our", "us") is a school bus tracking platform that connects parents, drivers, and school administrators in real time. Our app is published on the Google Play Store under the package name com.skolbuzz.

For any privacy questions, contact us at info@skolbuzz.com.

2. What data we collect

Phone number

We collect your phone number at sign-up. It is used exclusively for OTP-based authentication via Firebase Authentication. We do not use it for marketing or share it with third parties outside of the Firebase service.

Precise location (drivers only)

The app requests foreground and background location permission exclusively on the driver's device while a trip is active. Location is recorded approximately every 3 seconds and written to our Firebase database so parents on the same route can see the bus position in real time. Location data is:

• Stored only as the most recent GPS coordinate — previous coordinates are overwritten, not accumulated.
• Deleted automatically when the trip ends.
• Shared only with parents and the school administrator assigned to that bus route.

Parents and administrators do not share location with the app.

Student information

School administrators enter basic student details (name, class, section, home stop area) to set up the routing. This information is visible only to the school's administrators and the assigned driver.

Absence records

Parents can mark their child absent for a trip. These records contain the date, trip type (morning/evening), and an optional reason. They are used solely for trip planning and are accessible only to the school's administrators and the assigned driver.

Push notification tokens

We store a Firebase Cloud Messaging (FCM) token on your device to deliver trip alerts (boarding confirmation, bus approaching, dropoff confirmation). Tokens are rotated automatically by the Android system and are not used for any purpose other than delivering in-app notifications.

Crash and diagnostic data

We use Firebase Crashlytics to collect anonymous crash reports. These reports include device model, OS version, app version, and a stack trace. We do not log personally identifiable information (names, phone numbers, location) in crash reports.

3. How we use your data

• Authentication — phone number is used to verify your identity via OTP.
• Real-time bus tracking — driver GPS coordinates are shared live with parents and administrators on the same route.
• Push notifications — FCM tokens are used to send boarding confirmations, proximity alerts, and school broadcast messages.
• Trip management — absence records and student data are used to plan and execute each school bus trip.
• App stability — crash data helps us identify and fix bugs quickly.

We do not use your data for advertising, profiling, or any purpose beyond operating the SkolBuzz service.

4. Data sharing

We do not sell your personal data. We share data only with the following service providers, who process it on our behalf under their own privacy terms:

• Google Firebase (Authentication, Firestore, Cloud Messaging, Crashlytics) — Firebase Privacy
• Google Play Services — for in-app location services on Android.

Driver location during an active trip is visible to parents and administrators of the same school route — this is the core function of the service.

5. Data retention

• Live location — deleted immediately when a trip ends.
• Absence records — retained for the current academic year and deleted annually.
• Account data (phone number, FCM token) — retained while your account is active. Deleted within 30 days of an account deletion request.
• Crash logs — retained for 90 days by Crashlytics, then automatically deleted.

6. Data security

All data is transmitted over HTTPS/TLS. Access to Firestore data is governed by security rules that restrict each user to only the data they are authorised to see — a parent can only see their own child's trip, a driver can only write location for their assigned route, and school administrators can only access their own school's data.

7. Children's privacy

SkolBuzz is designed for use by adults — parents, drivers, and school administrators (18 years and older). We collect limited information about children (name, class, home stop area) entered by school administrators for routing purposes only. We do not knowingly collect data directly from children, and children do not use the app.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Withdraw consent for location access at any time by revoking the permission in Android Settings → Apps → SkolBuzz → Permissions.

To exercise any of these rights, email us at info@skolbuzz.com. We will respond within 30 days.

9. Changes to this policy

We may update this policy as the app evolves. When we make material changes, we will update the "Last updated" date at the top of this page and, where required, notify users via the app. Continued use of SkolBuzz after a change constitutes acceptance of the updated policy.