Skip to main content

Privacy Policy

Last updated: March 12, 2026

MadraSafe is committed to protecting the privacy of students, parents, drivers, and school administrators who use our platform. This privacy policy describes how we collect, use, and protect your personal data.

Data We Collect

We collect the following types of data to provide our services:

  • Identity information: name, email address, phone number
  • Student data: name, grade, school, NFC tag ID, home address
  • Location data: real-time GPS position of buses during active routes
  • Usage data: login logs, NFC check-in timestamps, notification history
  • Technical data: device type, operating system version, push notification tokens

How We Use Your Data

Your data is used exclusively to:

  • Provide real-time school bus tracking to parents and administrators
  • Send push notifications about boarding, arrival, and delays
  • Generate optimized routes and analytics reports for schools
  • Improve the security and reliability of our service

Data Sharing

We never sell your personal data. Bus location data is only shared with authorized parents and administrators of the relevant school. We may share data with technical service providers (hosting, push notifications) only to the extent necessary to operate the service.

Data Security

We implement technical and organizational security measures to protect your data, including encryption of data in transit (HTTPS/TLS) and at rest, secure JWT-based authentication, and role-based access control.

Children's Privacy

Protecting children's data is our top priority. Student data is only accessible to authorized parents and school administrators. We only collect information strictly necessary for the school transport service. Parental consent is required through the school before any student data is collected.

Data Retention

Real-time location data is retained for the duration of the current school year. Account data is retained as long as the account is active. After account deletion or end of the school's contract, personal data is deleted within 90 days.

Your Rights

In accordance with applicable regulations, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right of rectification: correct inaccurate or incomplete data
  • Right of erasure: request deletion of your personal data
  • Right of portability: receive your data in a structured, readable format

Contact Us

For any questions about this privacy policy or to exercise your rights, please contact us at: privacy@madrasafe.com