CarePickup Privacy Policy

Welcome to CarePickup ("CarePickup", "Platform", "We", "Our", or "Us"), operated by Enrich Arcane (Pvt) Ltd. CarePickup provides an enterprise-grade school and daycare transit safety management system accessible via https://carepickup.us and our native mobile applications:

• CarePickup Parent App (iOS & Android) — Designed for parents and legal guardians to register children, toggle daily transit preferences, receive real-time pickup/drop-off alerts, and view live vehicle transit when their child is onboard.
• CarePickup Driver App (iOS & Android) — Designed for authorized transport drivers and school escorts to receive daily manifests, verify student handovers, record transit exceptions, and provide live vehicle telemetry.
• CarePickup Admin Dispatch Portal (Web) — Accessible to verified school and daycare administrators for route planning, driver management, student safety verification, and live fleet dispatch.

This Privacy Policy explains how we collect, process, store, and protect your information when you access or use any CarePickup application or service. It has been formulated in strict accordance with the Apple App Store Review Guidelines (Guideline 5.1 - Privacy), the Google Play Developer Distribution Agreement & Families Policy, the Children's Online Privacy Protection Act (COPPA), and applicable global data protection regulations (including GDPR and CCPA/CPRA).

To fulfill our core mission of keeping children safe during daily school and daycare commutes, we collect specific categories of information based on user roles:

In compliance with the United States Children's Online Privacy Protection Act (COPPA), GDPR-K, and Google Play's Families Policy:

• Verifiable Adult Consent: Child profile registration requires an authenticated adult parent account. Every newly registered child profile enters a PENDING_VERIFICATION status until verified by daycare administration staff against physical school enrollment documents.
• Strict Purpose Limitation: Information concerning children (names, photos, medical notes) is collected strictly and solely for vehicle seat allocation, student attendance verification, door-side physical identification, and emergency medical precautions.
• Zero Commercial Exploitation: Child data is never used for behavioral advertising, marketing, profiling, monetization, or shared with third-party advertising networks.
• Parental Right to Review & Erase: Parents retain the unconditional right at any time to inspect their child's profile data, update medical or pickup notes, or permanently delete child records from within the Parent App or by notifying support.

A. Driver App Location Tracking (Background & Foreground)

The CarePickup Driver App requests ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION, and ACCESS_BACKGROUND_LOCATION on Android, and "Always Allow" / "While Using App" on iOS. Here is exactly how and when location data is gathered:

• Active Trip Gating: GPS telemetry is transmitted only after the driver presses "Start Trip" on an assigned manifest. When a trip is paused or completed, or when the driver signs out of their shift, location tracking immediately and automatically terminates.
• Sampling Rate: GPS coordinates are pinged at 10-second or 15-meter intervals over encrypted HTTPS channels (POST /tracking/telemetry).
• Foreground Service Notification: While tracking is active, the driver's device displays an unavoidable, persistent system notification indicating: "CarePickup Driver Service is actively broadcasting route safety coordinates."
• No Off-Duty Tracking: We never track a driver's personal whereabouts outside of scheduled school transit operations.

B. Parent App Location

The CarePickup Parent App does NOT collect background location. Foreground location is requested on an optional basis only if the parent chooses to center the map on their current location or request turn-by-turn navigation to the daycare center.

In traditional school bus tracking apps, all parents on a route can see the entire vehicle itinerary, exposing other children's home addresses and daily routines. CarePickup eliminates this vulnerability:

• Locked Tracking Prior to Pickup: While the vehicle is en route collecting other students, a parent only sees an estimated arrival countdown (e.g. "Vehicle approaching in 8 minutes"). The live GPS dot and other students' drop-off stops remain completely hidden.
• Unlocked Only During Transit: Live vehicle position tracking is strictly unlocked only after the driver scans or confirms that the parent's specific child has safely boarded the vehicle (PICKED_UP status).
• Immediate Termination at Drop-off: The moment the child is handed over at the school or daycare center (DROPPED_OFF status), the live map stream closes immediately.

CarePickup requests camera and photo library access under clear, limited circumstances:

• Child Gate Identification: Parents may optionally capture or upload a clear portrait of their child. This photo is displayed exclusively on the driver's manifest at the school gate to ensure the correct child is boarded.
• Parent & Driver Avatars: Users may upload an account avatar for identification within their daycare organization.
• No Biometric Surveillance: Photos are stored securely in protected cloud object storage. We do not perform automated facial recognition, biometric profiling, or cross-platform matching.

We utilize Google Firebase Cloud Messaging (FCM) and OneSignal to send vital transit safety alerts. These include:

• Route Commenced: Notice that the school van has started today's morning or afternoon run.
• Approaching Alert: 5-minute proximity alert when the vehicle approaches the designated school or pickup point.
• Pickup Confirmation: Instant notification when your child is safely boarded onto the vehicle.
• Safe Arrival / Drop-off: Confirmation when your child is handed over to daycare staff or school teachers.
• Safety & Delay Exceptions: Immediate alerts regarding road delays, vehicle breakdowns, or route adjustments.

Parents can customize notification preferences directly within the Parent App Profile settings. However, critical safety alerts (such as vehicle breakdowns) cannot be disabled while a child is onboard transit.

We process information strictly on lawful grounds, including the performance of our contract with your daycare or school, legitimate safety interests, and explicit parental consent:

• Facilitating safe, coordinated transportation of children between homes, schools, and daycare centers.
• Providing verified dispatch tools, seat occupancy counts, and route planning for school transport operators.
• Alerting staff to critical child health conditions (e.g. food allergies, medication needs) during transport.
• Maintaining an immutable, timestamped audit log of student handovers for institutional accountability.
• Enabling offline synchronization for transit zones with intermittent mobile network coverage.

We share data only with verified sub-processors necessary to operate the platform:

• Google Maps Platform: For rendering road maps, calculating geocoded addresses, and computing real-time ETAs. Coordinate data is sent anonymously over secure APIs.
• Google Firebase / Apple Push Notification Service (APNs): For transmitting encrypted push notification payloads to user devices.
• Secure Cloud Infrastructure: For hosting databases, application logic, and encrypted backups under enterprise-grade physical and digital security.
• Legal & Regulatory Authorities: We disclose records only when strictly compelled by valid court orders, law enforcement subpoenas, or to prevent imminent physical harm to a child.

We employ industry-standard technical, administrative, and physical safeguards to protect student and parent records:

• Encryption in Transit: All communications between mobile apps, web portals, and backend servers require Transport Layer Security (TLS 1.3) encryption.
• Encryption at Rest: Database records, authentication tokens, and user credentials are encrypted using AES-256 and bcrypt hashing algorithms.
• Immutable Security Audit Trail: Every handover confirmation, schedule change, route exception, and driver login is logged in an immutable database audit trail (PICKUP_DROPOFF, EXCEPTION, SYSTEM_SECURITY) for child welfare accountability.
• Role-Based Access Control (RBAC): Drivers only see assigned manifests for today's trip. Daycare center staff only access children enrolled in their specific center. Super admin controls are strictly compartmentalized.

How to Request Account & Data Deletion

You may request the deletion of your account and associated personal data through any of the following methods:

• Option 1 — In-App Request (Parent App): Navigate to Profile > Security & Policies > Delete Account. Confirm your request by entering your password. Your account will be queued for immediate deactivation and erasure.
• Option 2 — Direct Email Request: Send an email from your registered account address to privacy@carepickup.us with the subject "Account Deletion Request". Please include your registered name, phone number, and school/daycare center name.
• Option 3 — Contact Your Daycare Administrator: Daycare administrators can de-register parent and student records directly via the Admin Web Panel.

What Happens When You Request Deletion

• Your parent profile, credentials, mobile session tokens, and contact numbers are permanently deleted from active production databases within 30 days.
• All uploaded profile photos and student photos are permanently deleted from cloud object storage.
• Child profiles associated with your account are purged from active transport rosters.
• Regulatory Audit Retention Notice: Historical transit event logs (e.g., student pickup confirmation timestamps on past dates) are retained in anonymized format solely to satisfy mandatory legal child transport safety and insurance compliance obligations, after which they are permanently expunged.

We retain personal data only for as long as is necessary to accomplish the safety and transit coordination purposes outlined in this policy:

• Active Accounts: Retained for the duration of the family's enrollment with the participating daycare center or school.
• High-Frequency GPS Telemetry: Raw second-by-second driver breadcrumb coordinates are aggregated into route summaries and purged from active hot storage after 90 days.
• Transit Attendance Logs: Retained for the academic school year to comply with state child welfare and transport inspection mandates.

We may periodically update this Privacy Policy to reflect enhancements in our safety architecture, mobile features, or regulatory standards. If we introduce material changes to how we collect or handle child data, parent information, or driver location tracking, we will notify users through a prominent in-app notification prior to the change taking effect.

If you have any questions, concerns, or requests regarding this Privacy Policy, student data protection, or account deletion, our dedicated safety and privacy team is available: