1. Introduction

GoDropMe (referred to as "we," "us," "our," or "GoDropMe") is a school transport platform that enables parents to subscribe to verified drivers for safe, reliable student transportation with real-time tracking. We are committed to protecting your privacy and ensuring transparent communication about how we collect, use, and protect your personal information.

This Privacy Policy applies to:

  • Parent Mobile Application - for managing children, tracking trips, and receiving notifications
  • Driver Mobile Application - for accepting ride requests, managing daily routes, and sharing location
  • Admin Portal - for administrative oversight and KYC verification
  • GoDropMe Website - all online services and platforms

By using GoDropMe, you agree to this Privacy Policy. If you disagree with our practices, please do not use our services.

2. Information We Collect

2.1 Personal Information You Provide

Parent Account Information:

  • Full name, email address, phone number
  • Date of birth or age
  • Home address (optional)
  • Emergency contact information
  • Payment information
  • School preferences and pickup locations

Driver Account Information:

  • Full name, email address, phone number
  • Government ID details
  • Vehicle registration and insurance information
  • Bank account details (for payments)
  • KYC documents and photos

Child Information:

  • Full name and date of birth
  • School name and address
  • Pickup location and address
  • Medical information (optional)
  • Special needs or accessibility requirements

2.2 Location Data

  • Real-time GPS location (latitude, longitude) - every 10 seconds during active trips
  • School and pickup/dropoff addresses
  • Driver's preferred service areas
  • Historical trip endpoints and paths

2.3 Device Information

  • Device type and operating system
  • App version and build number
  • Device identifier
  • IP address

2.4 Usage Data & Analytics

  • Timestamps of actions (login, ride acceptance, trip completion)
  • Features used within the app
  • Session duration and frequency
  • Errors and crash logs

3. How We Use Your Information

3.1 Core Service Delivery

  • Trip assignment and driver matching
  • Real-time location tracking during trips
  • Route optimization and ETA calculation
  • Notification delivery (arriving, picked up, dropped off)
  • Payment processing and invoicing

3.2 Safety & Verification

  • KYC verification and identity confirmation
  • Background checks
  • Capacity enforcement
  • Emergency response

3.3 What We Don't Do

  • We do NOT sell your personal data to third parties
  • We do NOT use location data for behavioral advertising
  • We do NOT share payment details with external services
  • We do NOT use children's data for marketing
  • We do NOT profile users for discrimination

4. Children's Privacy

GoDropMe takes special care to protect children's privacy in compliance with laws like COPPA (Children's Online Privacy Protection Act) and GDPR.

4.1 Parental Consent

  • Parental/guardian consent required for children under 13
  • Parents retain visibility and control for all children
  • Parent or guardian account required to manage any child

4.2 Limited Data Collection

  • Only essential transportation information collected
  • No behavioral tracking or profiling of children
  • No targeted advertising to children
  • Minimal usage analytics

4.3 Parental Controls

  • Parents can view trip history
  • Parents can mark children absent
  • Parents can opt out of notifications
  • Parents can delete accounts anytime

5. Data Security & Encryption

5.1 Encryption Standards

Data in Transit: All data uses TLS 1.2+ (HTTPS/WSS) encryption with no plain text transmission.

Data at Rest: AES-256 encryption for databases and sensitive documents.

5.2 Authentication & Access Control

  • OTP (One-Time Password) verification
  • Password hashing using bcrypt
  • Session tokens with 15-minute idle timeout
  • Role-based access control
  • Document-level permissions

5.3 Infrastructure Security

  • Cloud infrastructure with SOC 2 and ISO 27001 compliance
  • Regular security audits and penetration testing
  • DDoS protection and WAF
  • Automated backup and disaster recovery

5.4 Staff Security

  • Background checks for all employees with data access
  • Confidentiality agreements and NDAs
  • Limited access on need-to-know basis
  • Regular security training

6. Location Data & Real-Time Tracking

6.1 How Location Tracking Works

For Drivers: GPS collected every 10 seconds during active trips, starting when driver clicks "Start Trip" and stopping at "End Trip".

For Parents: View only their child's current driver location, not outside assigned trips or driver's home location.

For Admins: Monitor active trips, see aggregated routes, cannot zoom into private driver information.

6.2 Privacy Controls

What We Guarantee:
  • Parents CANNOT see driver's home location
  • Admin CANNOT track off-duty movements
  • Other drivers CANNOT see your location
  • Location deleted automatically after 30 days

6.3 User Controls

  • Drivers can disable location sharing (but limits trip acceptance)
  • Choose 10s, 30s, or 60s update intervals
  • Can pause tracking while waiting
  • Reduce accuracy for battery saving

7. User Permissions (Device Access)

7.1 Location Permissions

Why: Real-time GPS tracking, ETA calculation, route optimization.

Driver: Background + foreground access required. Can be disabled in settings but limits functionality.

Parent: Optional foreground location only (for showing their location on map).

7.2 Notification Permissions

Why: Critical alerts (arriving, picked up, dropped off), trip updates, emergency notifications.

Control: Can deny (misses alerts) or toggle in app settings and device settings.

7.3 Camera & Photo Library

Why: KYC document upload, vehicle photos, profile pictures.

Control: Only requested when explicitly needed. Can select specific photos or deny.

7.4 Other Permissions

  • Contacts: Optional emergency contact sync (entirely optional)
  • Calendar: Optional trip reminder auto-add (user approves each entry)
  • Storage: App-specific folders only (limited to app cache and photos)

8. Data Retention Policy

Data Type Retention Period Reason
Real-time location logs 30 days Service improvement, incident investigation
Trip summaries & history 12 months User reference, dispute resolution
Payment/billing records 7 years Tax and legal compliance
KYC documents 5 years Regulatory requirement
User profiles & settings Until deletion Account management

Data Deletion

  • User Requests: 30-day processing period
  • Automatic Deletion: Location logs after 30 days, inactive accounts reviewed after 2 years
  • Legal Exceptions: Court orders, government requests, fraud investigations

9. Your Privacy Rights & Choices

9.1 Right to Access (GDPR Art. 15)

Request a copy of all personal data we hold about you in a structured, machine-readable format.

How: Email info@rayonixsolutions.com | Response: 30 days

9.2 Right to Rectification (GDPR Art. 16)

Correct inaccurate or incomplete information.

How: Update in app settings or email info@rayonixsolutions.com | Response: 7 days

9.3 Right to Erasure (GDPR Art. 17)

Request deletion of personal data (with legal exceptions).

How: Email info@rayonixsolutions.com with subject "Data Deletion Request" | Response: 30 days

Exceptions: Active disputes, tax records (7 years), KYC documents (5 years), court orders

9.4 Right to Data Portability (GDPR Art. 20)

Export your data in standard format (JSON/CSV) for use with other services.

How: Email info@rayonixsolutions.com | Response: 30 days

9.5 Right to Object (GDPR Art. 21)

Object to certain data processing, especially marketing and profiling.

How: Settings → Privacy Preferences → uncheck options | Effective: 7 days

9.6 Right to Withdraw Consent

Withdraw consent for optional data processing anytime.

What You Can Withdraw: Push notifications, analytics, marketing emails, location sharing

How: Settings → toggle off | Effective: immediately

9.7 Opt-Out of Marketing Communications

  • In-app: Settings → Communication Preferences
  • Email: Unsubscribe link in every marketing email
  • SMS: Reply "STOP" to SMS messages
  • Effective within 24 hours (transactional emails still sent)

9.8 No Discrimination

We will NOT discriminate against you for exercising privacy rights:
  • Same service and pricing
  • No reduced quality of service
  • No punitive actions
  • No retaliation

10. Third-Party Services

GoDropMe integrates with third-party services. You should review their privacy policies.

10.1 Mapping & Location Services

  • Google Maps API: Route optimization, geocoding - Data: coordinates, routes
  • Mapbox: Alternative mapping - Data: coordinates, map behavior

10.2 Push Notifications

  • Firebase Cloud Messaging (FCM): Push notifications, real-time updates

10.3 Backend Infrastructure

  • Appwrite: Database, authentication, file storage

10.4 Payment Processing

  • PCI Level 1 compliant (we don't store full card details)
  • Data shared: payment method, billing address, transaction ID

10.5 Analytics & Monitoring

  • Sentry: Error tracking, performance monitoring (anonymized)
Data Processing Agreements: All third-party services are bound by Data Processing Agreements (DPA) and must comply with GDPR and applicable privacy laws.

11. Background Location Services (Driver App)

11.1 Transparency

Driver must understand that:

  • App collects location even when not actively using it (during trips)
  • Location collected every 10 seconds during active trips
  • Continuous collection consumes battery (5-15% per hour)
  • Can disable at any time in app settings
  • Disabling limits ability to start new trips

11.2 Initial Consent

During first trip setup:

  • App prompts for location permission
  • Explains: "We need background location for real-time tracking"
  • Shows battery impact warning
  • Requires explicit "Allow" to proceed

11.3 Ongoing Controls

Driver Controls:
  • Start/stop tracking button
  • Toggle background location in device settings
  • Choose update interval (10s, 30s, or 60s)
  • Pause tracking while waiting
  • Clear location history
  • Disable entirely (affects functionality)

12. Contact & Support

For privacy questions, concerns, or to exercise your rights:

Privacy Email

Email: info@rayonixsolutions.com

Response Time: 48 business hours

In-App Support

Settings → Help & Support → Privacy Question

Response Time: 24-48 hours

What to Include in Your Request

  • Full name
  • Email address associated with account
  • Account ID (found in Settings → Account)
  • Type of request (access, deletion, portability, etc.)
  • Proof of identity if applicable

13. Policy Updates

13.1 How We Notify You

Material Changes (affecting your rights):

  • Email notification to account address
  • In-app notification on login
  • Prominent notice on website
  • 30 days before changes take effect

Minor Changes (clarifications):

  • Updated timestamp on this policy
  • Changes effective immediately upon posting

13.2 Your Acceptance

Continued use of GoDropMe after policy changes = acceptance. If you disagree, you may delete your account. This policy was last updated in February 2026.

Thank You

Thank you for trusting GoDropMe with your child's safety and your privacy. We are committed to transparent, responsible data handling practices.

Questions? Contact us anytime: info@rayonixsolutions.com