Privacy Policy

1. Introduction

Welcome to SchoolCab ("we," "our," or "us"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our school bus ride-sharing mobile applications (the "Apps") in Bangladesh. By using our Apps, you agree to the terms outlined in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect different types of information to provide and improve our services:

For Owners:

• Name, phone number, address, National ID (NID) number, photo
• Car details: car model, photo, registration number, BRTA fitness certificate number, tax token number, route permit number
• Earnings and payment-related data
• Business registration with RJSC (if applicable)

For Drivers:

• Name, phone number, NID number, professional driving license number, license expiry date, date of birth, address, photo
• Real-time GPS location while on a trip

For Parents:

• Name, phone number, address, NID number, photo
• Payment information for processing service fees
• Children's details: name, photo, date of birth, institute, grade, section, roll number, emergency contact, pick-up location, drop-off location, pick-up time, drop-off time, school days
• Birth certificate number of children (if required)
• Live tracking of their child's location when on the bus

2.2 Device and Technical Information

We automatically collect:

• Device information (device ID, model, operating system)
• IP address and browser type
• App usage statistics and analytics
• Network information
• Location data (when permitted)

2.3 Payment Information

We support:

• bKash
• Nagad
• Rocket
• Bank transfers
• Cash payments

All digital payments are processed through authorized payment gateways approved by Bangladesh Bank.

3. Legal Compliance

We comply with:

• Digital Security Act 2018 (Bangladesh)
• Bangladesh Road Transport Authority (BRTA) regulations
• Bangladesh Mobile Financial Services regulations
• Bangladesh Bank guidelines for digital payments
• Local transportation safety regulations
• Data privacy guidelines from Bangladesh Telecommunication Regulatory Commission (BTRC)

4. Data Security

We implement industry-standard security measures including:

• End-to-end encryption for sensitive data transmission
• Multi-factor authentication for user accounts
• Regular security audits
• Secure data centers with physical access controls
• Employee access controls and training
• Automated threat detection systems

In case of a data breach, we will:

• Notify affected users within 72 hours
• Notify relevant authorities including BTRC if required
• Investigate and remediate the incident
• Implement additional security measures as needed

5. Children's Privacy & Protection

5.1 Age Requirements

• Our service is designed for school children
• Children under 13 cannot create their own accounts
• All child data is managed through parent accounts

5.2 Special Protections

• Limited data collection for children (only essential information)
• Strict access controls for employee access to child data
• Regular data minimization reviews
• Automated deletion of inactive child accounts after 12 months

5.3 Parental Controls

• Verified parental consent required before collecting child data
• Parents can review and delete their child's data at any time
• Parents can access child location data

6. Data Storage and Processing

• Primary data storage in Bangladesh
• Backup servers in secure locations within Bangladesh
• Data processing complies with local regulations
• Regular data backups and disaster recovery procedures

8. Data Retention

We retain data according to these timeframes:

• Active accounts: Duration of service
• Inactive accounts: 12 months after last activity
• Financial records: As per Bangladesh Bank requirements
• Trip logs: Duration of service

9. Your Rights and Choices

You have the right to:

• Access, update, or delete your personal information
• Opt-out of marketing communications
• Restrict or object to data processing
• Request data portability
• Lodge a complaint with relevant authorities
• Withdraw consent at any time

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through:

• In-app notifications
• SMS notifications
• Email notifications
• Website announcements

Changes will be effective 30 days after notification unless otherwise stated.