Privacy Policy — EasyKids2Go

1. Introduction

EasyKids2Go ("Company," "we," "us," or "our") operates the EasyKids2Go platform, which includes our website at easykids2go.com, mobile applications (iOS and Android), and related services (collectively, the "Platform"). The Platform provides child transportation management services, including GPS tracking, route management, parent-driver communication, and pickup verification.

This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Platform. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of the Platform immediately.

Important: Because our Platform involves the transportation of children, we take additional precautions to protect the privacy and safety of minors. Please review Section 7 (Children's Privacy) carefully.

2. Information We Collect

We collect information in several ways depending on your role within the Platform (parent/guardian, driver, or administrator). The types of information we collect include:

2.1 Information Provided Directly by Users

Data Category	Examples	Who Provides It
Account Information	Full name, email address, phone number, password (hashed)	All users
Parent/Guardian Details	Home address, relationship to child, emergency contacts	Parents/Guardians
Child Information	Child's full name, school or daycare name, pickup/drop-off addresses, student codes	Administrators, Parents
Driver Information	Full name, phone number, vehicle details, license information	Drivers, Administrators
Digital Signatures	Electronic signatures captured at pickup and drop-off for verification	Parents/Guardians, Authorized persons
Profile Photos	Avatar images uploaded by users	All users
Communications	Messages exchanged between parents, drivers, and administrators via the Platform	All users

2.2 Information Collected Automatically

GPS Location Data: Real-time location of drivers' devices during active transportation trips. This data is used to provide live tracking to parents and administrators and is collected only while drivers are actively conducting routes.
Device Information: Device type, operating system, app version, unique device identifiers, and push notification tokens (Firebase Cloud Messaging).
Usage Data: Features accessed, actions taken within the app, timestamps, and interaction patterns.
Log Data: IP addresses, browser type, access times, and referring URLs when using our website.

2.3 Information from Third Parties

Transportation Companies: Administrators may provide child and parent information when setting up accounts and routes.
Payment Processors: When payment processing is enabled (via Stripe), we may receive limited transaction confirmation details. We do not store full credit card numbers on our servers.

2.4 QR Codes

The Platform generates unique QR codes associated with each child for verification purposes during pickup and drop-off. These QR codes encode a reference identifier and do not contain any personal information directly.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To operate and provide the core transportation management features, including route management, real-time GPS tracking, pickup/drop-off verification, and parent notifications.
Account Management: To create, maintain, and authenticate user accounts.
Communication: To send push notifications about trip status (pickup, en route, drop-off), facilitate in-app messaging between parents and drivers/administrators, and send service-related announcements.
Safety and Verification: To verify authorized pickups via digital signatures and QR codes, and to maintain an audit trail of transportation events.
Payment Processing: To process subscription payments and manage billing through our payment processor (Stripe), when available.
Platform Improvement: To analyze usage patterns, diagnose technical issues, and improve the functionality and user experience of the Platform.
Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to enforce our Terms of Service.
Security: To detect, prevent, and respond to fraud, abuse, security incidents, or other harmful activity.

We do not use children's personal information for marketing, advertising, or profiling purposes. We do not sell personal information of any user, including children.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

4.1 Within the Platform Ecosystem

Parents/Guardians can view their child's assigned driver, real-time trip location, and pickup/drop-off status.
Drivers can view the names and pickup/drop-off locations of children on their assigned routes.
Administrators of transportation companies can view all information related to their organization's drivers, children, parents, and routes.

4.2 Third-Party Service Providers

We share information with third-party vendors who assist in operating the Platform, subject to contractual obligations to protect your data:

Firebase (Google): Push notification delivery and cloud messaging.
Stripe: Payment processing (coming soon). Stripe's privacy policy governs their handling of payment data.
Cloud Hosting Providers: Server infrastructure and data storage located in the United States.
Map Services: For GPS tracking display and route visualization.

4.3 Legal and Safety Disclosures

We may disclose information if we believe in good faith that disclosure is necessary to:

Comply with a legal obligation, subpoena, court order, or government request.
Protect the safety of a child or any person.
Protect the rights, property, or safety of EasyKids2Go, our users, or the public.
Investigate or prevent fraud, security issues, or technical problems.

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify affected users of any change in ownership or control of personal information.

5. Data Security

We implement industry-standard technical and organizational measures to protect the confidentiality, integrity, and availability of your personal information:

Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS).
Encryption at Rest: Sensitive data stored on our servers is encrypted.
Password Security: User passwords are hashed using industry-standard algorithms and are never stored in plaintext.
Access Controls: Role-based access controls ensure that users can only access information relevant to their role (parent, driver, or administrator).
Secure Infrastructure: Our servers are hosted in the United States with reputable cloud providers that maintain SOC 2 and ISO 27001 certifications.
Regular Monitoring: We monitor our systems for unauthorized access, vulnerabilities, and security incidents.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data. If you suspect unauthorized access to your account, please contact us immediately.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Type	Retention Period
Active account information	Duration of account activity plus 12 months after account deletion request
GPS location data	90 days after trip completion
Trip history and digital signatures	3 years (for liability and compliance purposes)
In-app messages	12 months
Server logs	90 days
Payment records	As required by applicable tax and financial regulations

When data is no longer needed, it is securely deleted or anonymized. Transportation companies (administrators) may request export or deletion of their organization's data at any time by contacting us.

7. Children's Privacy (COPPA Compliance)

EasyKids2Go is committed to complying with the Children's Online Privacy Protection Act (COPPA) and protecting the privacy of children under the age of 13.

7.1 How We Handle Children's Data

The Platform does not allow children to create accounts or directly interact with the service. All accounts are held by adults (parents/guardians, drivers, or administrators).
Children's personal information (name, school/daycare, pickup/drop-off addresses) is provided by their parent/guardian or the transportation company administrator, not by the children themselves.
We collect only the minimum information about children necessary to provide safe transportation services.

7.2 Parental Consent

By registering on the Platform and linking their child's student code, a parent or guardian provides verifiable consent for the collection and use of their child's information in connection with the transportation service.
Transportation company administrators who input child data represent that they have obtained appropriate authorization from parents or guardians to do so.

7.3 Parental Rights

Parents and guardians have the right to:

Review the personal information we have collected about their child.
Request correction of inaccurate information.
Request deletion of their child's personal information.
Refuse further collection or use of their child's information (which may require discontinuing the transportation service).

To exercise any of these rights, please contact us at easykids2go@gmail.com.

7.4 No Marketing to Children

We do not use children's information for any commercial purpose unrelated to the transportation service. We do not serve advertisements to children, create profiles of children for marketing, or disclose children's information to third parties for marketing purposes.

8. Your California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

8.1 Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we share it.

8.2 Right to Delete

You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions (e.g., data required for legal compliance or to complete a transaction).

8.3 Right to Opt Out of Sale

We do not sell personal information. As such, there is no need to opt out. However, if our practices change in the future, we will provide a clear "Do Not Sell My Personal Information" mechanism.

8.4 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you services, charge you different prices, or provide a different quality of service because you exercised your privacy rights.

8.5 How to Submit a Request

California residents may submit a verifiable consumer request by emailing easykids2go@gmail.com with the subject line "CCPA Request." We will verify your identity before processing the request and respond within 45 days.

9. Your Rights and Choices

Regardless of your location, we provide the following rights to all users:

Access: You may request a copy of the personal information we hold about you.
Correction: You may update or correct inaccurate information through your account settings or by contacting us.
Deletion: You may request deletion of your account and associated data. Certain data may be retained as required by law or for legitimate business purposes.
Data Portability: You may request an export of your data in a machine-readable format.
Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
Opt Out of Communications: You may manage your notification preferences within the app. Note that certain service-related notifications (e.g., trip status for your child's active route) are essential and cannot be fully disabled while using the service.

To exercise any of these rights, please contact us at easykids2go@gmail.com. We will respond to requests within 30 days.

10. Cookies and Tracking Technologies

Our website (easykids2go.com) may use the following technologies:

Essential Cookies: Required for basic website functionality, such as session management and security. These cannot be disabled.
Analytics Cookies: We may use analytics tools to understand how visitors interact with our website. This data is aggregated and anonymized.
Local Storage: Our mobile applications may use device local storage to save preferences, authentication tokens, and cached data for offline functionality.

We do not use third-party advertising cookies or tracking pixels on our Platform. We do not engage in cross-site behavioral tracking.

You can control cookie settings through your browser preferences. Disabling essential cookies may impair the functionality of our website.

11. Push Notifications

We use Firebase Cloud Messaging (FCM) to send push notifications to your device. These notifications may include:

Trip status updates (driver en route, child picked up, child dropped off).
Messages from drivers or administrators.
Service announcements and important alerts.

You may manage your push notification preferences through your device's operating system settings or within the app. Disabling push notifications may affect your ability to receive time-sensitive transportation updates about your child.

Firebase Cloud Messaging processes a device token to deliver notifications. This token does not contain personal information and is managed in accordance with Google's Firebase Privacy Policy.

12. Third-Party Services

The Platform integrates with the following third-party services. Each service operates under its own privacy policy:

Firebase / Google Cloud Platform: Push notifications, analytics. Firebase Privacy Policy
Stripe: Payment processing (coming soon). Stripe Privacy Policy
Apple App Store / Google Play Store: App distribution. Subject to Apple and Google's respective privacy policies.
Map Providers: For GPS visualization and route display.

We encourage you to review the privacy policies of these third-party services. We are not responsible for the privacy practices of third-party providers.

13. International Data Transfers

Our servers are located in the United States. If you access the Platform from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country of residence.

By using the Platform, you consent to the transfer of your information to the United States. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

We will update the "Last Updated" date at the top of this page.
We will provide notice through the Platform (e.g., in-app notification or push notification) for significant changes.
For changes that affect children's data or require renewed parental consent, we will provide direct notice to affected parents/guardians.

Your continued use of the Platform after any changes to this Privacy Policy constitutes acceptance of those changes. We encourage you to periodically review this page for the latest information on our privacy practices.

15. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

Company: EasyKids2Go
Email: easykids2go@gmail.com
Website: https://easykids2go.com

For COPPA-related inquiries or to exercise parental rights regarding your child's data, please include "Children's Privacy" in the subject line of your email. We will respond to all privacy-related inquiries within 30 days.