========================================
1. INTRODUCTION
========================================
Welcome to Wosool (وصول), a school and kindergarten management system with a focus on bus tracking and safety.
This privacy policy explains how we collect, use, store, and protect your personal information when you use our mobile application ("App") and web dashboard ("Service").
By using Wosool, you agree to the collection and use of information in accordance with this policy.
OPERATOR INFORMATION:
Operated by: Ateyyah Salah, Iyas Salah, and Ashraf Mohtasib (operating as a team)
Primary Contact: ateyyahs@gmail.com
Location: Palestine, West Bank
Team Roles:
- Ateyyah Salah: Full-Stack Development & App Management
- Iyas Salah: Full-Stack Development & Infrastructure
- Ashraf Mohtasib: Accounting & Financial Management
If you have any questions about this privacy policy, please contact us at ateyyahs@gmail.com.
========================================
2. WHO USES WOSOOL
========================================
Wosool is designed for use by:
- School and kindergarten administrators
- Teachers and staff
- Bus drivers
- Parents and guardians
- System administrators
IMPORTANT: Children do not directly use this application. All interactions are performed by adults (parents, guardians, school staff, or drivers) on behalf of children.
========================================
3. INFORMATION WE COLLECT
========================================
3.1 PERSONAL INFORMATION
We collect the following personal information depending on your role:
FOR ALL USERS:
- Full name
- Phone number (used for login)
- Password (encrypted and securely stored)
- Role/user type
- Profile information
- Device information (model, platform, operating system)
- App version
- Device unique identifier (for push notifications)
FOR DRIVERS:
- Real-time GPS location during active bus journeys
- Journey start/end times
- Bus assignment information
- Driver license information
FOR PARENTS/GUARDIANS:
- Children associations
- Contact information
- Optional: Home location coordinates (if you choose to set home location on map)
- Communication preferences
FOR SCHOOL/KINDERGARTEN ADMINISTRATORS:
- School/kindergarten name and information
- School location coordinates
- Staff assignments
- Billing records (amounts owed, payment status - NO actual payment processing)
3.2 CHILDREN'S INFORMATION
While children do not use the app directly, we store information about children for school management purposes:
- Full name
- Age/date of birth
- Address
- Photos (added by school administrators)
- Parent/guardian associations
- Attendance records
- Bus journey participation
- Absence records
- Billing information (fees owed, not actual payment data)
IMPORTANT: School administrators are responsible for obtaining necessary permissions from parents/guardians before adding children to the system. We rely on schools to have appropriate consent mechanisms in place.
3.3 LOCATION INFORMATION
We collect location data for the following purposes:
REAL-TIME LOCATION (DURING ACTIVE JOURNEYS ONLY):
- Driver location is tracked in real-time while a bus journey is active
- This allows parents to see where the school bus is in real-time
- Location tracking stops automatically when the journey ends
- We use both foreground and BACKGROUND location tracking to ensure continuous tracking even when the driver's phone screen is off or the app is in the background
STATIC LOCATION (OPTIONAL):
- Parents can optionally set their home location on the map
- School administrators can set their school/kindergarten location coordinates
- These are used for mapping and weather information purposes
LOCATION DATA RETENTION:
- Real-time location data during journeys is shared via real-time connections
- The most recent location is stored temporarily in our database
- Historical location data is automatically deleted within hours after journey completion
- We do NOT maintain long-term location history
PARENTS AND STUDENTS ARE NEVER TRACKED. Only drivers during active bus journeys.
3.4 DEVICE AND TECHNICAL INFORMATION
- Device model and manufacturer
- Operating system and version
- App version
- Device unique identifier (persistent UUID for notifications)
- Firebase Cloud Messaging (FCM) token for push notifications
- IP address
- Language preference
- Timezone
- Screen resolution
- Internet connectivity status
3.5 USAGE AND ANALYTICS INFORMATION
We use Mixpanel for analytics to improve our service:
- App usage patterns (which features you use)
- Session duration and frequency
- Crash reports and error logs
- Feature interactions
- Performance metrics
Analytics data is anonymized where possible and used solely to improve the app experience.
3.6 COMMUNICATION DATA
- In-app notifications you send and receive
- Messages between drivers and parents
- Messages between drivers and administrators
- Emergency notifications
- System notifications (journey started, child entered bus, etc.)
- Notification delivery status and read receipts
3.7 CALENDAR AND EVENT INFORMATION
- School holidays and closures
- Schedule changes
- Special events
- Field trips
- Parent meetings
- Weather alerts
3.8 BILLING INFORMATION (RECORD-KEEPING ONLY)
- Payment campaigns and fee schedules
- Amounts owed by parents
- Payment status and history
- Transaction records
- Billing adjustments
IMPORTANT: We DO NOT process actual payments. We only record billing information for school record-keeping. No credit card or banking information is collected or stored by us.
========================================
4. HOW WE USE YOUR INFORMATION
========================================
We use your information for the following purposes:
4.1 CORE SERVICE FUNCTIONALITY:
- User authentication and account management
- Managing school/kindergarten operations
- Scheduling and managing bus journeys
- Real-time bus tracking for safety
- Recording attendance and absences
- Managing student information
- Facilitating communication between parents, drivers, and schools
- Sending notifications about bus status, arrivals, and important updates
4.2 SAFETY AND SECURITY:
- Ensuring children's safety during bus transportation
- Emergency contact capabilities
- Monitoring journey completion
- Detecting unusual patterns or issues
4.3 BILLING AND ADMINISTRATION:
- Recording fee information
- Tracking payment status
- Generating billing reports
- Financial record-keeping (required by law for 7+ years)
4.4 SERVICE IMPROVEMENT:
- Understanding how users interact with the app
- Identifying and fixing bugs
- Improving app performance
- Developing new features
- Customer support
4.5 COMMUNICATION:
- Sending important service updates
- Push notifications about bus arrivals and journey status
- Emergency alerts
- System announcements
- Responding to your inquiries
4.6 LEGAL AND COMPLIANCE:
- Complying with applicable laws and regulations
- Enforcing our terms of service
- Protecting our rights and property
- Resolving disputes
- Maintaining audit trails
========================================
5. HOW WE SHARE YOUR INFORMATION
========================================
We do NOT sell your personal information to anyone.
We share your information only in the following limited circumstances:
5.1 WITHIN YOUR SCHOOL/KINDERGARTEN:
- School administrators can see all data within their institution
- Teachers can see relevant student information
- Drivers can see information about children on their routes
- Parents can ONLY see information about their own children (strict access control)
5.2 WITH SERVICE PROVIDERS:
We use trusted third-party services to operate Wosool:
FIREBASE (by Google):
- Purpose: Push notifications
- Data Shared: Device tokens, notification messages
- Privacy Policy: https://firebase.google.com/support/privacy
GOOGLE MAPS:
- Purpose: Map display and route visualization
- Data Shared: Location coordinates (no personal identification)
- Privacy Policy: https://policies.google.com/privacy
MIXPANEL:
- Purpose: Analytics and app improvement
- Data Shared: Usage patterns, device info (anonymized where possible)
- Privacy Policy: https://mixpanel.com/legal/privacy-policy/
OPEN-METEO:
- Purpose: Weather information
- Data Shared: School location coordinates only (public API, no authentication)
- Privacy Policy: https://open-meteo.com/en/terms
RAILWAY:
- Purpose: Cloud hosting and database
- Data Shared: All data stored in our system
- Privacy Policy: https://railway.app/legal/privacy
- Note: We follow Railway's security practices for data storage and transmission
5.3 FOR LEGAL REASONS:
We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights or property
- Prevent fraud or illegal activity
- Protect the safety of users or the public
5.4 BUSINESS TRANSFERS:
If Wosool is acquired or merged with another entity, user information may be transferred as part of that transaction. You will be notified of any such change.
========================================
6. DATA SECURITY
========================================
We take security seriously and implement industry-standard measures to protect your information:
6.1 TECHNICAL SECURITY MEASURES:
- Passwords are encrypted using bcrypt (industry-standard hashing)
- All API communications use HTTPS/TLS encryption
- JWT (JSON Web Token) authentication for secure session management
- Role-based access control (users can only access data relevant to their role)
- Regular security updates and patches
6.2 ACCESS CONTROLS:
- Parents can ONLY access their own children's information
- Drivers can only access information for their assigned routes
- School administrators can only access their own school's data
- System administrators have limited access based on operational needs
6.3 DATA ISOLATION:
- Each school/kindergarten's data is isolated in separate database spaces
- Multi-tenant architecture prevents cross-contamination of data
6.4 IMPORTANT SECURITY NOTE:
While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security but commit to using industry best practices and responding promptly to any security incidents.
If you believe your account has been compromised, contact us immediately at ateyyahs@gmail.com.
========================================
7. DATA RETENTION
========================================
We retain your information for different periods depending on the type of data and legal requirements:
7.1 ACTIVE ACCOUNTS:
- Your account information is retained as long as your account is active
- School data is retained as long as the school uses our service
7.2 FINANCIAL RECORDS (LEGAL REQUIREMENT):
- Billing and payment records: Minimum 7 years (required by financial regulations)
- Transaction history: Minimum 7 years
- These records are archived but not deleted to comply with audit requirements
7.3 OPERATIONAL DATA:
- User information: Retained while account is active, plus legal retention period
- Children's information: Retained while enrolled, plus legal retention period
- Journey history: Retained for historical reporting purposes
- Attendance records: Retained permanently for school records
7.4 LOCATION DATA:
- Real-time location during journeys: Deleted within hours after journey completion
- Static locations (home, school): Retained until manually removed by user
7.5 DELETED ACCOUNTS:
- When you request account deletion, we use "soft delete" methods
- Data is marked as inactive but preserved for legal compliance (audit trails, financial records)
- Personal identifiers may be removed while preserving necessary records
- Some data must be retained for legal reasons (billing, audit trails)
7.6 REQUESTING DATA DELETION:
- School administrators can request data deletion by contacting us directly
- We will work with you to delete data while preserving legally required records
- Some data cannot be fully deleted due to legal retention requirements
========================================
8. YOUR RIGHTS AND CHOICES
========================================
You have the following rights regarding your personal information:
8.1 ACCESS:
- You can request a copy of the personal information we hold about you
- Contact us at ateyyahs@gmail.com to request your data
8.2 CORRECTION:
- You can update your profile information directly in the app
- Contact school administrators to correct children's information
- Contact us if you need help correcting information
8.3 DELETION:
- You can request deletion of your account by contacting your school administrator or us directly
- Note: Some data must be retained for legal compliance (billing records, audit trails)
- Children's data can be deleted by school administrators
8.4 RESTRICTION:
- You can request restrictions on how we process your data
- You can disable certain features (e.g., home location)
8.5 LOCATION TRACKING:
- You can disable location permissions in your device settings
- Note: Drivers must have location enabled to use the tracking features
- Parents and admins can use the app without location permissions
8.6 PUSH NOTIFICATIONS:
- You can disable push notifications in device settings
- You can manage notification preferences in the app settings
8.7 OBJECTION:
- You can object to certain data processing activities
- Contact us to discuss your concerns
To exercise any of these rights, contact us at ateyyahs@gmail.com.
========================================
9. CHILDREN'S PRIVACY
========================================
IMPORTANT INFORMATION FOR SCHOOLS AND PARENTS:
9.1 AGE RANGE:
Wosool manages information for children typically aged 3-12+ years (kindergarten through school age).
9.2 CHILDREN DO NOT USE THE APP:
- Children do not directly interact with the Wosool app
- All app usage is by adults: parents, school staff, and drivers
- Children's information is managed by authorized adults
9.3 SCHOOL RESPONSIBILITY:
- Schools and kindergartens are responsible for obtaining necessary permissions from parents/guardians before adding children to the system
- Schools must have appropriate consent forms and procedures in place
- We rely on schools to comply with local laws regarding children's data
9.4 PARENTAL CONTROL:
- Parents have full access to their own children's information
- Parents can contact school administrators to update or remove children's information
- Parents can communicate with drivers and schools through the app
9.5 DATA MINIMIZATION:
- We only collect children's information necessary for school operations and bus tracking
- We do not collect unnecessary personal information about children
- Children's data is protected with the same security measures as adult data
9.6 COMPLIANCE:
- We follow best practices for protecting children's information
- We implement strict access controls to limit who can view children's data
- We do not use children's information for marketing purposes
========================================
10. INTERNATIONAL DATA TRANSFERS
========================================
10.1 HOSTING LOCATION:
Our service is hosted on Railway, which may store data on servers in various locations.
10.2 DATA TRANSFERS:
- Your data may be transferred to and stored on servers outside Palestine
- We use cloud infrastructure that may involve international data transfers
- Railway's security and privacy measures apply to data storage
10.3 THIRD-PARTY SERVICES:
When we use third-party services (Firebase, Google Maps, Mixpanel), your data may be processed in countries where these services operate, including the United States and Europe.
10.4 PROTECTION MEASURES:
- All data transfers use encrypted connections (HTTPS/TLS)
- Third-party services are selected based on their security and privacy standards
- We follow industry best practices for international data protection
========================================
11. PERMISSIONS REQUIRED BY THE APP
========================================
The Wosool mobile app requests the following permissions:
11.1 ANDROID PERMISSIONS:
- INTERNET: Required for app functionality and communication with servers
- ACCESS_FINE_LOCATION: GPS tracking for drivers during bus journeys
- ACCESS_COARSE_LOCATION: Approximate location for drivers
- ACCESS_BACKGROUND_LOCATION: Continuous tracking when app is in background (drivers only)
- FOREGROUND_SERVICE: Enable location tracking service for drivers
- FOREGROUND_SERVICE_LOCATION: Specific location foreground service
- WAKE_LOCK: Keep device awake during tracking
- POST_NOTIFICATIONS: Send push notifications about bus status and updates
- CALL_PHONE: Direct calling of emergency contacts and driver contact
11.2 iOS PERMISSIONS:
- Location When In Use: GPS tracking during active app use
- Location Always: Background tracking for drivers during journeys
- Notifications: Push notifications for bus updates
- Photo Library: Upload photos (if school needs to add/update child photos)
11.3 WHY WE NEED THESE PERMISSIONS:
LOCATION (MOST IMPORTANT):
- Required for drivers to broadcast their location during bus journeys
- Allows parents to see real-time bus location for safety
- Background location is necessary because drivers may switch apps or lock phone during journeys
- Optional for parents/admins (home location, school location)
NOTIFICATIONS:
- Critical for safety: alerts when bus is approaching, when child boards/exits
- Important updates about schedule changes, absences, delays
- Emergency notifications
PHONE/CALL:
- Quick access to emergency contacts (police, ambulance)
- Direct calling of driver or school in urgent situations
INTERNET:
- Required for all app functionality
- Real-time data synchronization
You can manage these permissions in your device settings. Note that disabling certain permissions (especially location for drivers) may prevent core features from working.
========================================
12. COOKIES AND TRACKING TECHNOLOGIES
========================================
12.1 IN THE MOBILE APP:
- We do not use browser cookies in the mobile app
- We store preferences and authentication tokens locally on your device
- Device identifiers are used for push notifications
12.2 IN THE WEB DASHBOARD:
- We use local storage and session storage for authentication
- No third-party advertising cookies
- Mixpanel may use tracking technologies for analytics
12.3 ANALYTICS:
- Mixpanel uses tracking technologies to understand app usage
- These help us improve the app and fix issues
- Analytics data is used only for service improvement
========================================
13. CHANGES TO THIS PRIVACY POLICY
========================================
We may update this privacy policy from time to time to reflect:
- Changes in our practices
- Changes in applicable laws
- New features or services
- Feedback from users
13.1 NOTIFICATION OF CHANGES:
- We will notify you of significant changes through the app
- The "Last Updated" date at the top will always reflect the most recent version
- Continued use of Wosool after changes constitutes acceptance
13.2 REVIEWING CHANGES:
- We encourage you to review this policy periodically
- Material changes will be prominently announced
- You can always find the current version in the app or on our website
========================================
14. CONTACT US
========================================
If you have any questions, concerns, or requests regarding this privacy policy or our privacy practices, please contact us:
Primary Contact Email: ateyyahs@gmail.com
Operating Team: Ateyyah Salah, Iyas Salah, Ashraf Mohtasib
Location: Palestine, West Bank
For specific inquiries:
- General & Privacy Questions: ateyyahs@gmail.com (Ateyyah Salah)
- Technical & Backend Issues: Contact via ateyyahs@gmail.com
- Billing & Financial Questions: Contact via ateyyahs@gmail.com
We will respond to your inquiry within a reasonable timeframe.
For school-specific issues, please also contact your school/kindergarten administrator.
========================================
15. COMPLIANCE AND LEGAL BASIS
========================================
15.1 APPLICABLE LAWS:
- We operate primarily in Palestine and Jordan
- We follow international best practices, including GDPR principles
- We comply with local data protection regulations as they apply
15.2 LEGAL BASIS FOR PROCESSING:
- Contract performance: Processing necessary to provide our service
- Legitimate interests: Safety of children, service improvement, security
- Legal obligations: Financial record retention, compliance with laws
- Consent: Where required by law (e.g., optional features like location sharing)
15.3 DATA CONTROLLER:
- Ateyyah Salah, Iyas Salah, and Ashraf Mohtasib (operating as a team) are jointly responsible as data controllers for your personal information
- Schools/kindergartens are co-controllers for their students' and staff's data
- Schools are responsible for obtaining necessary consents from parents
- Note: We currently operate as individuals without a formal corporate structure
========================================
16. SPECIFIC NOTICES FOR APP STORES
========================================
16.1 GOOGLE PLAY STORE USERS:
This app complies with Google Play's privacy and security requirements. All data collection and permissions are disclosed in this policy and in the app store listing.
16.2 APPLE APP STORE USERS:
This app complies with Apple's App Store Review Guidelines. The app's privacy nutrition label in the App Store reflects the data collection described in this policy.
16.3 DATA LINKED TO YOU:
The following data is collected and linked to your identity:
- Contact information (name, phone)
- User content (messages, photos)
- Identifiers (device ID)
- Location (for drivers during journeys, optional for others)
- Usage data (analytics)
16.4 DATA NOT LINKED TO YOU:
- Crash reports and diagnostics may be collected anonymously
========================================
17. YOUR CONSENT
========================================
By using Wosool, you acknowledge that you have read and understood this privacy policy and agree to its terms.
If you are a school administrator adding children to the system, you confirm that you have obtained necessary permissions from parents/guardians as required by applicable laws.
If you are a parent/guardian, you confirm that you understand how your children's information will be used for school operations and bus tracking.
If you do not agree with this privacy policy, please do not use Wosool.
========================================
Thank you for trusting Wosool (وصول) with your school management and bus tracking needs.
For questions or concerns: ateyyahs@gmail.com
Last Updated: January 5, 2026