Privacy Policy
Rumo is a school transportation service used by schools, the families they serve, and their bus drivers. This policy explains, in plain language, what information Rumo handles and how. It applies to the Rumo mobile app, the Rumo admin dashboard, and this website.
The short version: Rumo works for your school. Children never have accounts. We collect the minimum needed to run school transportation, we never sell data or show ads, bus location history is deleted after 7 days, and student data can be deleted at your school's request.
Who Rumo works for
Rumo provides its service to schools. Your school decides what student information goes into Rumo and remains in control of it — legally, Rumo acts as a service provider (a "school official" under FERPA) processing education records on the school's behalf and under its direction, governed by a signed data privacy agreement. Rumo uses this information only to operate school transportation and never for any other purpose.
Children are never users
Students do not sign up, log in, or interact with Rumo, and Rumo never collects information directly from children. Accounts exist only for adults — parents/guardians, drivers, and school staff — and only by invitation from the school. There is no self-serve signup.
What we store
- About adult account holders: name, email address, optional phone number, and account credentials managed by our authentication provider.
- About students (entered by the school or guardians): name, grade, weekly ride schedule and assigned route, daily ride/boarding status, and which guardians are linked to them.
- We deliberately do not store: student birthdates, student photos, or student home addresses in ride records. Rumo's optional carpool feature stores only a neighborhood-level area — never an exact address — and shows children only as a count, grade, and first initial.
Location
Location is collected from driver devices only, and only while the driver is running an active bus route — so families can see the bus approach and the school can respond to delays. Collection stops automatically when the route ends. Parents' and guardians' devices are never location-tracked. Bus location history is automatically and permanently deleted after 7 days.
What we never do
- No advertising of any kind, and no advertising technology in our apps.
- No selling of data — student or otherwise — and no disclosure to third parties beyond the service providers below.
- No behavioral profiling of students.
Service providers
Rumo runs on a small set of infrastructure providers that process data solely on our instructions under data processing agreements: Supabase (database and authentication), Expo (push notification delivery), Resend (email delivery), Vercel (web hosting), and Sentry (crash reporting, scrubbed of personal information before sending). Push notifications are content-minimized: they never contain student names or addresses.
Security
Every school's data is isolated from every other school's at the database level. Data is encrypted in transit and at rest. School administrator accounts require multi-factor authentication. Access to student records is logged in a tamper-evident audit trail.
Deletion and access
Schools can request deletion of a student's data, or export and deletion of all their data, at any time; erasures are honored and recorded. Parents and guardians can see their child's information in the app, and can direct corrections or deletion requests through their school. When a school stops using Rumo, its data is returned and then deleted.
Changes and contact
If this policy changes materially, we will notify schools before the change takes effect. Questions or requests: support@hellorumo.com.