1. Data Collection and Usage

We collect the following personal data when you use the SchoolRunTracker application:

* Parent/Guardian Name and Surname

* Student Name and Surname

* Pickup and Drop-off Addresses of the Student

* School Name

This data is necessary to provide our core service: connecting parents and guardians with school runners (drivers) and enabling route tracking for safety and convenience. All personal data is securely stored and encrypted using Amazon Web Services (AWS) infrastructure.

2. Lawful Basis for Processing (UK GDPR Article 6)

In accordance with Article 6 of the UK General Data Protection Regulation (UK GDPR), our lawful bases for processing personal data are:

* Performance of a Contract (Article 6(1)(b))

We process your data to provide the services you request when using the app — such as coordinating school runs and sending tracking notifications.

* Legitimate Interests (Article 6(1)(f))

We have a legitimate interest in ensuring the safety and operational efficiency of school run coordination, including communication between parents and drivers.

* Consent (Article 6(1)(a))

We request explicit consent when processing children’s personal data, given by a parent or legal guardian during registration. Consent can be withdrawn at any time by contacting us.

3. Consent for Children’s Data

Parents or legal guardians provide explicit consent for the collection and use of their child’s personal data through the app’s registration process. The consent statement is:

“By continuing, I confirm that I am the parent or legal guardian of the student and that I give my explicit consent for SchoolRunTracker to collect, store, and process my child’s personal data for the purposes of enabling school transportation and route tracking features in accordance with the Privacy Policy.”

This consent may be withdrawn at any time by contacting us.

4. Data Sharing and Visibility

Your data is only shared with other app users directly involved in your school run activity (e.g., other parents or designated drivers). The only data shared includes:

* Parent/Guardian and Student Names

* Pickup and Drop-off Addresses

* School Name

No sensitive data is made publicly available or accessible outside of these interactions.

5. Tracking and Notifications

When a school runner accepts a transport request, real-time tracking becomes available. You’ll receive alerts when:

* The journey begins

* The student is picked up

* The student is dropped off

These alerts are designed to enhance safety and peace of mind.

6. Data Storage and Security

All personal data is encrypted and securely stored in Amazon Web Services (AWS) infrastructure. A Data Processing Agreement (DPA) is in place with AWS to ensure compliance with UK GDPR obligations. We maintain appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or loss.

7. Data Retention

We retain your personal data only for as long as necessary to provide our services or comply with legal obligations. You may request deletion of your data at any time by contacting us directly.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

* Right of access – to obtain a copy of your personal data

* Right to rectification – to correct inaccuracies

* Right to erasure – to request deletion of your data

* Right to object – to certain processing activities

* Right to data portability – to move your data to another service

* Right to withdraw consent – where processing is based on consent

To exercise any of these rights, please contact us using the details below.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

* Website: https://ico.org.uk

* Phone: 0303 123 1113

9. Data Protection Officer (DPO)

Although not legally required, we have appointed a Data Protection Officer to ensure ongoing compliance with data protection laws and to handle any privacy-related concerns or queries.

10. Contact Information

If you have any questions or would like to exercise your rights under this policy, please contact us:

Email: info@schoolruntracker.com

11. Location Data

Our app collects and uses location data to enable core functionality, such as tracking the SchoolRunner's route and providing real-time updates to parents during the school commute. This data is collected:

* In the foreground, when the app is open and actively used by SchoolRunners or parents.

* In the background, when the SchoolRunner starts a route and the app continues to collect location data to ensure accurate tracking, even if the app is not actively in use.

We may collect but do not share your location history. Location data is only collected with your explicit consent and is used solely for the purpose of enabling secure and transparent school route tracking between connected users (parents and SchoolRunners). The app does not share location data with third parties for advertising or analytics purposes.

Users can disable location permissions at any time through their device settings; however, doing so will limit the functionality of the app, particularly real-time tracking features.