QRide Legal Center

1. Information We Collect

We collect information necessary to provide and improve the QRide Parent service. This may include:

• Personal information: name, email address, phone number, and other contact details you provide when registering or updating your account.
• Student information: name, admission number, class, and school name provided by or through your child's school.
• Authentication credentials: login credentials and related data used to verify your identity and secure your account.
• Device information: device type, operating system version, unique device identifiers, and mobile network information.
• Notification tokens: push notification tokens used to deliver boarding, drop-off, and transport-related alerts.
• Usage information: features you use, activity dates and times, and general in-app behaviour.
• Crash reports and diagnostics: data used to identify and fix technical problems and improve performance.
• Optional location information: only when you grant permission and where it is needed for specific features. You may decline or revoke location access through your device settings.

2. Why We Collect Information

We use the information we collect to:

• Provide and operate school transport monitoring services.
• Send boarding and drop-off notifications.
• Improve the App's functionality, performance, and reliability.
• Authenticate users and protect account security.
• Provide customer support and respond to enquiries.
• Maintain platform security and integrity.
• Comply with applicable legal and regulatory obligations.

3. Legal Basis for Processing

Where GDPR or Kenya's Data Protection Act, 2019 applies, Tamnet Systems relies on the following legal bases to process personal information:

• Performance of a contract: to provide the QRide Parent services you have signed up for.
• Legitimate interests: to secure the platform, prevent fraud, improve reliability, and support the safe operation of school transport.
• Consent: for optional features such as location access, camera access, and marketing communications, which you can withdraw at any time.
• Legal obligation: to comply with applicable laws, court orders, and regulatory requirements.
• Vital interests: to protect the safety of students in emergency situations such as accidents or urgent transport incidents.

4. How Information Is Shared

Tamnet Systems does not sell, rent, or trade your personal information. We only share information in the following limited and clearly defined circumstances:

• With your child's school: parent contact details and boarding/drop-off events are shared with authorised transport administrators to coordinate safe daily transport.
• With trusted service providers (data processors): cloud hosting, database, authentication, push messaging, analytics, and crash reporting providers who are contractually required to process information only on our instructions and to maintain appropriate security safeguards.
• Legal and regulatory disclosures: we may disclose information to government authorities, courts, or law enforcement when compelled by law, court order, or other valid legal process.
• Safety and emergencies: information may be shared with emergency responders or medical personnel where necessary to protect a student's life or physical safety.
• Business transfers: in the event of a merger, acquisition, or reorganisation, information may be transferred to the successor entity subject to the protections of this Privacy Policy.

5. Push Notifications

If you enable push notifications, QRide Parent may send alerts for student boarding, student drop-off, bus updates or delays, transport-related announcements, emergency alerts, and important account notifications. Notification delivery relies on Google Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS). You can manage or disable notifications at any time through your device settings or within the app where available.

6. Permissions

QRide Parent requests only the permissions needed to deliver its features:

• Internet access (required): to communicate with QRide servers and receive real-time transport updates.
• Notifications (recommended): to deliver boarding, drop-off, and emergency alerts.
• Location (optional): used only where a specific feature requires it and only when you grant permission. Location data is not shared with advertisers.
• Camera (optional): requested only for features such as QR code scanning or profile photo capture; images are not shared with third parties for advertising.

Optional permissions can be declined or revoked in your device settings at any time. Some features may be limited without the relevant permissions.

7. Data Security

Tamnet Systems implements industry-standard administrative, technical, and organisational safeguards to protect personal information, including encryption of data in transit using HTTPS/TLS, encryption of authentication credentials at rest, strict access controls limited to authorised personnel, role-based permissions, secure server infrastructure, and regular security reviews. Despite these measures, no method of electronic transmission or storage is completely secure, and users are responsible for protecting their account credentials.

8. Data Retention

We retain personal information only for as long as necessary to provide the QRide Parent services, meet our contractual obligations to schools and users, comply with legal and regulatory requirements, and resolve disputes. Typical retention periods are:

• Account data: retained for the life of the account and deleted after a verified deletion request.
• Transport event logs: retained for the current academic year plus a reasonable period thereafter, or as required by the participating school.
• Diagnostic and crash data: retained for up to 90 days before automatic deletion.
• Legal and audit records: retained for the period required by applicable law.

9. Children's Privacy

QRide Parent is designed for use by parents and legal guardians, not by children. Student information is provided by the participating school and linked to the parent account; children do not register or interact with the app directly. Tamnet Systems does not knowingly collect data directly from children. If we become aware that a child has created an account without proper authorisation, we will take reasonable steps to delete the account and associated information.

10. Your Rights

Depending on your location and applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information.
• Restrict or object to certain processing.
• Request a portable copy of your data.
• Withdraw consent for optional processing at any time.
• Lodge a complaint with a supervisory authority, including the Office of the Data Protection Commissioner (ODPC) in Kenya.

To exercise your rights, contact us using the details at the end of this page. We will respond within the timeframes required by applicable law.

11. Third-Party Services and International Transfers

QRide Parent relies on trusted third-party services such as Firebase Authentication and Firebase Cloud Messaging for secure login and notifications, Google Play Services on Android, Apple Push Notification service on iOS, cloud hosting for storage and processing, and analytics and crash reporting services to monitor reliability. Each provider is responsible for its own data practices. Personal information may be processed and stored on secure servers located outside Kenya, including within the European Union and other jurisdictions. When information is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses and vendor certifications to ensure it receives adequate protection.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the App's features. When we make material changes, we will notify you through the app, by email, or through other appropriate channels and update the "Last Updated" date above. We encourage you to review this policy periodically.

1. Information We Collect

To provide and secure the coordinator experience, QRide Coordinator may collect:

• Personal identifiers: coordinator name, work email address, and phone number.
• School information: school name, role, and associated transport administration details.
• Authentication credentials: login credentials and security tokens used to verify identity and authorise access.
• Device information: device type, operating system, unique device identifiers, and mobile network information.
• Activity logs: actions performed within the platform for auditing, security, and support purposes.
• Notification tokens: push notification tokens used to deliver transport alerts and account-related messages.
• Optional location data: only when permission is granted and required for specific features.
• Usage analytics: information about how the app is used to help us improve performance, reliability, and user experience.

2. How We Use Information

Information collected through QRide Coordinator is used solely to operate and secure the school transport management platform. Typical uses include:

• Authenticating coordinators and enforcing role-based access.
• Managing buses, drivers, routes, and student assignments.
• Recording boarding, drop-off, and other transport events.
• Generating operational, safety, and audit reports.
• Sending transport announcements and updates to parents.
• Providing technical support and responding to enquiries.
• Monitoring platform security and preventing misuse.
• Complying with the school's policies and applicable law.

3. Legal Basis for Processing

Where GDPR or Kenya's Data Protection Act, 2019 applies, Tamnet Systems processes coordinator information on the following legal bases: performance of the service agreement with the participating school; the legitimate interests of the school and Tamnet Systems in operating a secure transport platform; consent for optional features such as location access; compliance with legal obligations; and, where relevant, protection of the vital interests of students during safety-critical events.

4. How Information Is Shared

Tamnet Systems does not sell, rent, or trade coordinator information. We share it only:

• With the participating school and its authorised administrators for transport operations and internal oversight.
• With trusted service providers such as cloud hosting, database, authentication, push messaging, analytics, and crash reporting vendors that process information on our behalf under written contracts.
• When required by law, including in response to court orders, regulatory requests, and lawful investigations.
• To protect rights and safety, including preventing fraud, misuse of the platform, or harm to students, staff, or the public.

5. Data Security

QRide Coordinator applies industry-standard safeguards, including HTTPS/TLS encryption in transit, encryption of credentials at rest, strict role-based access controls, detailed activity logging, session controls, and periodic security reviews. Access to production systems is limited to authorised Tamnet Systems personnel bound by confidentiality obligations.

6. Data Retention

Coordinator information is retained for the duration of the coordinator's active role at the participating school and for any additional period required to support the school's transport operations, satisfy contractual obligations, and comply with legal, auditing, and regulatory requirements. Activity and audit logs are typically retained for the current academic year plus the period required by law. When information is no longer needed, it is deleted or anonymised.

7. Coordinator Rights

Depending on applicable law, coordinators may have the right to access, correct, delete, restrict, or object to the processing of their personal information, to receive a portable copy of their data, and to lodge a complaint with a supervisory authority such as Kenya's Office of the Data Protection Commissioner. Because coordinator accounts are provisioned by the participating school, many requests must be coordinated through the school administrator.

8. International Transfers and Changes

Coordinator information may be processed and stored on secure servers located outside Kenya. When information is transferred across borders, Tamnet Systems relies on appropriate safeguards such as Standard Contractual Clauses and vendor certifications. We may update this Privacy Policy from time to time; material changes will be communicated through the app, by email, or through the participating school.