Privacy

Who holds this data

This installation is operated by the organisation named at the foot of this page, on behalf of the schools using it. They decide who is given access and they are who to contact about anything on this page.

What is collected

Your account

An email address, a name if you gave one, and a password that is stored only as a one-way hash — it cannot be read back, by us or by anyone who obtained a copy of the database.

Your stop

The address on the route that is yours, so the app knows which arrival to tell you about. Your school puts this in; it is the address they already hold for you.

Bus positions

Location reports from a device on the bus, sent while the bus is running its route. These are about a vehicle, not about a person.

Sign-in records

When each of your devices last used the app, its browser description and its network address, so you can see your own active sign-ins and end them.

An administrative record

A log of who granted or removed access to a route, so that the question "who gave that person access to my child's bus" always has an answer.

Not collected, at all: your own phone's location, your contacts, anything about your child beyond the address the school supplied, and any behavioural or advertising profile.

No third-party tracking

There is no advertising network, no analytics script, no pixel and no social media button anywhere in this app. Nothing about you is sold or shared for marketing, and there is no cookie banner because the only cookie is the one that keeps you signed in.

The map itself is drawn by a mapping provider, which means your browser fetches map images from them while a map is on screen. They are told which part of the world you are looking at, as any map on the web would. They are not told who you are, and the app does not send them your account or your stop.

Who can see what

• You see the routes your own stop is on, and nothing else. You cannot see other families, their addresses, or which stop is theirs.
• Your school's administrators see their own school: its routes, addresses and the families with access to them. They cannot see another school.
• Drivers see the route they are assigned to drive.
• The bus is visible to families only while it is running its route. Outside its service hours there is no position to see — this is enforced by the server, not hidden in the app.

How long it is kept

• Detailed position reports: — days.
• Reduced route history, used to estimate arrival times: — days.
• The administrative access log: — days.
• A sign-in on a device, unless you sign out sooner: — days.
• Your account and your stop: until you or your school delete them.

These are not aspirations. A job on the server deletes anything past these windows every hour.

Your choices

• Download everything held about your account, as a file, at any time, without asking anyone.
• Delete your account from the same page. That removes your account, your route access, your stop preference and your notification devices.
• Turn notifications off at any time from the tracker, or in your browser's settings.
• Correct anything that is wrong by contacting your school, who hold the address book.

Depending on where you live you may have further rights over this data — to object to its use, or to complain to a regulator. Write to the contact above and those requests will be handled.

Children

Accounts here belong to adults — parents, guardians and school staff. Children do not sign up and are not asked for anything. What is held that relates to a child is the home address their school already has, used only to say which stop on a route is yours.

Security

Traffic is encrypted in transit. Passwords are stored as salted one-way hashes. Access to every route is checked on the server on every request, not hidden in the interface. If you believe you have found a security problem, please report it to the address in security.txt.