Brent Bus — Privacy Policy

Effective August 26, 2026

What Brent Bus Does

Brent Bus is a school bus tracking app for parents. It shows journey states (At School, En Route, Arrived) and sends push notifications when buses depart.

Data We Collect

• Email and password — used to authenticate with FleetPaths (the bus tracking data provider). Your email and password are stored in encrypted storage on your device so Brent Bus can sign you in automatically and open the FleetPaths map. Your password is not stored in our database or backend logs. Your email is stored with schedule preferences, notification tokens, and limited operational logs.
• Device and notification identifiers — a random installation identifier and Expo, Apple, or Google push tokens are stored in our database (Supabase) so we can deliver notifications to the correct device and sign out one device without affecting another.
• Student names and schedule preferences — entered by parents and stored in our database so we know which days to send notifications for each student.
• Session tokens — short-lived tokens are stored in encrypted storage on your device and used to authenticate app requests. Session tokens are not stored in Live Activity database records.
• Operational and security logs — may include your email, IP address, request time and metadata, app version, authentication outcome, bus route, and iOS Live Activity diagnostic identifiers so we can protect and troubleshoot the service.

Data We Do Not Collect

• We do not collect your location. Bus locations come from FleetPaths, not from your device.
• We do not use analytics, tracking pixels, or advertising SDKs.
• We do not sell personal information, use it for advertising, or allow service providers to use it for their own marketing. The providers listed below process limited information only as needed to operate Brent Bus.

Third-Party Services

• FleetPaths and AWS Cognito — authenticate your FleetPaths credentials and provide bus tracking data.
• Supabase — our database provider. Stores email-linked notification tokens, student schedules, temporary Live Activity records, and operational logs.
• Expo, Apple, and Google — deliver app updates, ordinary push notifications, and iOS Live Activity updates to your device.
• Google Maps — calculates routes and travel times using bus and school locations. Brent Bus does not send your device location to Google Maps.
• Railway — hosts our backend server and may process standard request metadata such as IP address and request time.

Data Retention

Signing out removes notification and Live Activity tokens for that device. Stale Live Activity records become eligible for automatic deletion after 24 hours. Student names and schedule preferences remain available for your next sign-in until you edit them, delete your account, or request deletion. Operational and security logs stored in the Brent Bus database are retained for up to 30 days; service providers may retain their own infrastructure records under their policies.

Data Deletion

Signing out removes notification-related tokens for that device but preserves student names and schedule preferences for your next sign-in. Deleting your account removes stored student schedules and all registered device tokens after the server confirms the deletion. Limited operational and security logs are not removed immediately and expire within the 30-day retention period. You may also contact us to request deletion.

Children's Privacy

Brent Bus is designed for parents, not children. A parent may enter a child's name or family label and bus schedule preferences to organize notifications. We do not ask children to provide information directly. Contact us if you want this information deleted.

Changes to This Policy

If we make material changes, we will update this page and revise the effective date above.

Contact

Questions or concerns? Email us at sharewithscatter@gmail.com.