Privacy Policy

Last updated: 25 October 2026

This policy explains what School Bus collects, why, and the choices you have. BrightPen OPC runs School Bus.

1. Information We Collect

We collect only what the service needs. This depends on your role.

• Account details: your phone number, your name, and a PIN that you set.
• School records: student names, schools, routes, stops, buses and drivers. Schools enter these records.
• Parent details: the children you link with the phone number the school has on file. You may also add a home pickup address with a map pin.
• Trip records: the position of the bus, taken from the driver's phone while a trip runs, and the time a student boards or gets off. We save the GPS points and the speed of each trip. We save the driver's name and phone number too. We save the bus number and plate. Staff can replay a trip from these points. Section 6 says how long we keep them.
• Phone position on a map: the app does not follow the position of a parent. When you tap the location button on a map, the app reads your phone position once. It uses this to place a pin. This needs your permission.
• Pickup people and photos: a parent may name people who can collect a child, and add a photo of each person. A parent may set a 4-digit pickup code. Staff may add a photo of a driver. Section 4 has the details.
• Pickup checks: when a school uses pickup checks, we record which pickup person took a child off the bus. We record if the driver checked the photo or the code. We record the time. We also record when the driver keeps a child on the bus or returns a child to the school.
• Safety reports and alerts: an SOS, a breakdown or a delay that the driver reports. The report holds the bus position and an optional note of up to 200 characters. The service also makes an alert with the bus position. It does so when the bus goes over a set speed limit, leaves its route or halts too long. It also does so when the driver phone battery is low.
• Driver phone battery: while a trip runs, the driver's phone sends its battery level and whether it is charging. A low battery makes an alert, which keeps the level. Section 3 says who sees this.
• Absences and stop requests: a parent may mark a child absent for a day, up to 30 days ahead. A parent may ask to move a child to another stop, with an optional note of up to 200 characters. Staff may also mark an absence.
• Reports: a parent may send a report to the school or to us. It holds a category and an optional note of up to 500 characters.
• School notices: the title and the text of each notice that school staff send to parents. We also count the parents who get it.
• Notification data: your notification settings, your alert inbox, and a device token for push alerts.
• Signed-in devices: for each phone signed in to your account, the phone model, the system version, the app version, the time of the last sign-in or refresh, and the city and country of the sign-in request. We take the city and country from the network. We do not read your exact position, and this list does not keep your IP address. You see the list in the app and can sign out any phone.
• Billing records: school pass invoices, amounts, periods and payment status. An invoice PDF shows our name and address as the supplier. When GST applies, it shows our GSTIN too. A school bill shows the name, address and city of the school. It also shows the state and the GSTIN of the school, if the school entered them. A parent invoice shows the phone number of the parent with some digits hidden. A paid invoice keeps a copy of these details.
• Technical data: request logs and crash reports, which can include your device type and app version.

2. How We Use Your Information

We use your information to run the service:

• To sign you in and keep your account safe.
• To show parents the bus, the stop times and the boarding records of their children.
• To let drivers and school staff run trips and manage routes, buses and students.
• To let a driver check who may collect a child, when the school asks for it.
• To warn school staff of an SOS, a breakdown or a delay. We also warn them when a bus goes too fast, leaves its route or halts. We warn them when a phone battery is low.
• To let a parent mark an absence, ask for a stop change, and get notices from the school.
• To send codes by SMS and alerts by push notice.
• To issue school pass invoices and record their status.
• To find and fix errors.

We do not sell your information. We do not use it for advertising.

3. How We Share Your Information

We share information only as follows:

• The school: staff of a school see the records of that school. A school owns its student records. Staff also see the safety reports and alerts of that school. They see the driver phone battery level and the trip replay too.
• Parents: a parent sees only the children linked to their account. A parent gets an alert when the driver reports a breakdown or a delay on the trip of a child. A parent does not see the battery level of the driver phone.
• Drivers: a driver sees the children of the trips that the driver runs. When the school turns it on, the driver's phone shows the phone numbers of the linked parents of those children. The driver can call them.
• Driver card: when the school turns it on for a route, a parent sees the name and photo of the driver. The parent sees the bus number and plate too. A parent does not see the phone number of the driver.
• Service providers: we use these providers. Each gets only the data it needs for its task.
  • Cloudflare hosts the service and stores its data and photos.
  • Fast2SMS sends SMS codes and invoice messages. It gets the phone number and the message.
  • OneSignal sends push alerts. It gets a device token, an account ID, the alert text and its data. The OneSignal part of the app also collects some device details, under its own policy.
  • Mapbox shows maps. Your phone asks Mapbox for map tiles. The Mapbox part of the app may send usage data to Mapbox. Our server also sends Mapbox the pins of the stops and the school, to draw the road of a route. It sends the words you type in a place search, with a nearby map point.
  • Sentry receives error reports. We turn off personal data in these reports.
  • PhonePe takes payments. You pay on a PhonePe page. PhonePe handles your payment details. We get the order and its status only.
• Legal duty: we may share information when the law requires it.

4. Pickup People and Photos

A parent may name up to five people who can collect a child from the bus. A parent may add a photo of each person. School staff add the photo of a driver.

• Consent. Before the app saves a pickup person, the parent must confirm that this person is an adult. The parent must also confirm that this person agrees to show the photo to the bus crew, school staff and the child's other parents. The app saves the person only after the parent confirms.
• Who sees the photos. Staff of the same school see them. When the school uses pickup checks, the driver sees the pickup people of the children on the trip. Every parent linked to a child sees all pickup people of that child, and their photos. This includes people that another parent added. A parent may change only the people that this parent added.
• Photos on the driver's phone. While a trip runs, the driver's phone keeps these photos and the data for the pickup code check. It keeps them for that trip only. The phone removes them after the trip is sent to the school, or when the driver signs out. If we delete a photo before then, the phone keeps its copy until then.
• Pickup code. A parent may set a 4-digit pickup code for a child. We store the code as plain text, so that each parent linked to the child can read it back. Staff cannot read it. The driver's phone gets only a salted hash of the code. The phone checks a typed code against that hash.
• Removal. When a parent removes a pickup person, we delete the photo file and mark the person as removed. The name and the relation stay in our records for 1 year. The same happens when a parent unlinks a child or deletes the account. Staff may also remove a pickup person. When no linked parent is left for a child, we delete the pickup code.
• Trip copy. A trip home from school may use pickup checks. When it starts, we save a copy of the pickup people for that trip. The copy holds the name, the relation, a reference to the photo, and the data for the code check. The copy stays with the trip record after a removal.
• Where we store photos. Photos are stored with Cloudflare, like the other data of the service.
• Photo of a driver. A parent sees it only when the school turns on the driver card for the route.

5. Data Storage and Security

We store data and photos with our hosting provider, Cloudflare. We limit access to staff who need it.

We use sign-in checks and access rules to keep each school's records apart. No system is fully safe, and we cannot promise absolute security.

6. Data Retention

We keep data while your account is active and while the service needs it. Each night at midnight India time, a job deletes old records. A deletion can run late. Then the data stays a little longer. The periods are:

• Trip GPS points and bus positions: 30 days. This includes the speed of each GPS point and the battery level of a bus position. We keep the driver and bus details that a kept GPS point needs. The last known position of a trip that still runs stays.
• Trip-day records: 1 year after the trip date. This covers attendance and pickup checks, and the trip copy of pickup people. It also covers safety reports and alerts, with their bus position and battery level. It also covers the driver's day record. A trip that still runs stays. A trip with a later attendance correction stays 1 year after that correction.
• Absences, stop requests, school notices and parent reports: 1 year. We count from the absence date or the notice date. For a request or a report, we count from its last change.
• Removed pickup people: 1 year after the removal. Then we delete the name and the relation too.
• Audit records: 2 years.
• Parent invoices and payment records: 8 years after the last payment or change. This covers payments, receipts, billing text messages and payment links. We count from the latest of these dates.
• Notifications in the app inbox: 30 days. An hourly job deletes them.

We do not delete these records automatically. They stay while the account or the school needs them:

• student, route and stop records, home pins and stop pins;
• pickup people that no one has removed;
• school invoices, with their bill lines, text messages and payment links;
• a parent invoice that is still open;
• pass periods, subscriptions and school plans, with their dates, price and status;
• the history of each parent link to a school, with its dates;
• reports that school staff send to us.

School records, invoices and payment records can stay after an account is deleted. Contact us if you want to know what we hold for your school.

7. Your Rights

You can ask to see, correct or delete your information.

• Export: you can request a copy of your account data from the Account page in the app.
• Correct: ask your school to fix a student record. Change your own details in the app.
• Delete: see section 9.

The export covers your own account. It does not include all records a school holds.

8. Children's Privacy

The service holds records of school children. A school adds these records. A parent links a child only with the phone number the school has on file. When a parent links a child, the app shows a consent text. The parent must accept it. We link the child only after that. We do not let children make accounts. We do not use children's data for advertising.

A parent must name adults as pickup people. The parent must have their agreement before the app saves them.

9. Data Deletion

You can delete your account from the Account page in the app. The app asks for your PIN and a final confirmation. Deletion removes your sign-in access and ends your sessions. It removes your saved home pickup address and pin, and your notification data. It also removes the pickup people that you added, and their photos.

School records, invoices and payment records can remain, because the school or the law may need them. The name and relation of a removed pickup person can remain too. A new sign-up with the same phone number makes a new account. It does not restore the old one.

If you cannot use the app, email schoolbus@brightpenopc.com and tell us the phone number of the account.

10. Third-Party Links and Fonts

This site loads a font from Google Fonts. Your browser then sends a request to Google. The site does not use cookies or analytics. Links to other sites follow the privacy rules of those sites.

11. Changes to This Privacy Policy

We may change this policy. We will change the date at the top when we do. Please read it from time to time.

12. Contact Us

Questions about privacy? Email schoolbus@brightpenopc.com. BrightPen OPC runs School Bus.

Complaints about your data: write to schoolbus@brightpenopc.com. We answer within 15 days.