Privacy

Introduction

1.1 Overview of Privacy Policy

This Privacy Policy describes the practices of Bus Buddy LLC ("Bus Buddy" or "We") regarding the collection, use, disclosure, and protection of information that we receive through our web application, BusBuddy (the “App” or the "Service").

We recognize the importance of protecting the information we receive from schools and users of the Service. This Privacy Policy is designed to assist you in understanding what information we collect, how we use and share that information, and the steps we take to protect such information.

1.2 Contact Information

If you have any questions about this Privacy Policy or use of the Service, please contact us here.

Please note that electronic communications may not be secure, so please do not include any sensitive information when contacting us electronically.

Information We Collect and Store

2.1 Categories of Collected Information

Through the Service, we collect and store the following categories of information:

(a) Bus route data - Including bus stop locations, route paths, and route schedules;

(b) School location data - Including school names, addresses, and geolocation;

(c) Bus company data - Including company names and contact information;

(d) Authorized school administrator user data - Including names, school affiliation, usernames, encrypted passwords, and contact information;

The information we collect is provided directly by school administrators through their use of the Service. We do not and will not collect any information directly or indirectly from students or parents through the Service.

2.2 Use of Information

The information we collect is used solely for the purposes of:

(a) Operating, maintaining, and improving the Service;

(b) Providing customer support to authorized school administrator users;

(c) Debugging and troubleshooting the Service;

(d) Analyzing aggregated usage data to improve the Service;

We do not use the information collected for marketing or promotional purposes. We only use and process personal information in ways that are compatible and consistent with the purposes outlined in this Privacy Policy.

2.3 No Collection of Student, Parent, or Sensitive Information

We do not and will not, without limitation, collect any personal or sensitive information from students, parents, or other persons through the use of the Service. Only general information provided by authorized school administrators to maintain the expected functionality of the Service is collected and stored. For the purposes of this Privacy Policy, Sensitive Information is defined as that data or information that would be deemed personal, protected, nonpublic, and/or confidential whatsoever.

Access to Information

3.1 Access Limited to Authorized School Administrators

Only authorized school administrators who create accounts in the Service can access, view, or modify information stored in the Service. Access is controlled through use of unique user credentials and permission levels.

3.2 Administrator Consent

School administrators wishing to use the Service must first consent to our Terms of Service and Service Agreement, each providing clear notice of our data practices. School administrators may only enter information into the Service pertaining to their own organizations and users. They may not access or enter information for other organizations or users.

3.3 Accessing, Editing, and Deleting Information

School administrators may access, edit, or delete their organization's information in the Service at any time. Administrators may also request to review, edit, export, or delete user information by contacting us at tekomics@gmail.com. Where and when appropriate, we will attempt to comply with reasonable requests in accordance with applicable law.

Data Security

4.1 Use of Encryption and Access Controls

We take extensive and reasonable measures to protect all information collected through the Service. All data in transit and at rest is encrypted using industry-standard methods and best practices. Access controls, like unique user credentials, are used to limit access to authorized users only.

4.2 Data Retention Policy

We retain all information collected through the Service unless deletion is specifically requested by a school administrator for their organization's data. Data is stored in an encrypted format for the duration of use of the Service. Following the lapse of a Service Agreement and/or data dormancy beyond the period of five (5) years, we will notify the primary contact associated with the lapsed Service Agreement and be available to provide a copy of the organization’s data profile prior to deletion.

4.3 Response to Data Breaches

While we make every effort to protect data, no security measures can be considered wholly effective and preventative in nature. In the event of a data breach, we will notify affected users and the proper regulatory authorities within 72 hours. We will also take immediate steps to investigate the breach, mitigate damage, and take action to prevent future incidents.

Please notify us immediately at tekomics@gmail.com if you suspect any unauthorized access to or use of information.

Information Sharing and Disclosure

5.1 No Sharing of Information with Third Parties

We do not share, sell, rent, or trade any personal or public information collected through the Service with any third parties, except as required to operate and improve the Service as outlined below.

5.2 Anonymous/Aggregated Activity Data Use

We may analyze aggregated, anonymized data about general usage patterns and traffic flows in order to analyze, improve, and troubleshoot issues with the Service. No identifiable information is included in this anonymous data.

We may also use third-party analytics tools to collect and analyze anonymous technical information as described above. The analytics providers we work with only collect and process such generic information based on our instructions.

5.3 Required Disclosures

We may be required to disclose data or information if mandated by law, rule, regulation, legal process, or other means. In the event disclosure is required, we will do our best to provide advance notice to the affected users, unless prohibited by law.

Additional Policies

6.1 Posting of Terms of Service and Privacy Policy

Our Service Agreement and this Privacy Policy are publicly posted on our website and within the Service. Users must consent to these agreements during the account creation process.

6.2 Use of Cookies and Tracking

We do not use cookies, web beacons, or other tracking technologies through the Service to collect or store personal information. Non-identifying technical information may be collected as described above.

6.3 Modifications to Privacy Policy

We may occasionally update this Privacy Policy to reflect changes in our practices, services, or applicable law. We will notify users by email of any significant changes. Previous versions of our Privacy Policy will be archived.