How Data Works in Our App
This mobile application is designed exclusively for parents/guardians and drivers.
Users can create a basic account in the App with minimal information. All additional personal information,
student data, transportation routes, and schedules are entered and managed by authorized school district
administrators through our secure web dashboard. The app reads and displays this
pre-existing data — it does not independently collect personal or student information from users.
What the App Does NOT Do:
- Does NOT collect extensive personal information
- Does NOT collect student information or IEP details
- Does NOT collect photos, files, or documents
- Does NOT collect health or medical information
- Does NOT access your contacts or calendar
What the App ONLY Does:
- Allows basic account creation (name, email, phone, password)
- Displays existing route and schedule data from the admin dashboard
- Tracks driver GPS location during active trips (driver app only)
- Shows real-time vehicle position to parents on Google Maps
- Provides trip status updates (pickup, en route, dropped off)
Important: Users can create an account in the App with basic information.
Additional details are completed by school district administrators through the web dashboard.
All data displayed in the app beyond your account info is read-only from our secure server.
1 Introduction
Capital Student Transport ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CST App mobile application (the "App") and related services.
We believe transportation is an act of care, and that extends to how we handle your data. For students facing housing instability, special needs, or complex schedules, we ensure their personal information is treated with the same dignity and protection we provide during every ride.
Our Headquarters
5018 Marconi Ave, Carmichael, CA 95608
info@capitalstudenttransport.com
+1 (206) 290-4159
2 Information We Collect
2.1 Information You Provide During Account Creation
When you create an account in the App, you provide:
- Name: First and last name
- Email Address: Used for account identification and communication
- Phone Number: For notifications and support contact
- Password: Stored securely with encryption
Additional profile details are completed by your school district administrator through the web dashboard.
2.2 Information Collected Automatically
- Location Data (Driver Only): Real-time GPS location is collected from the driver's device during active trips using geolocator and Google Maps. This enables live vehicle tracking for parents and schools.
- Local Storage Data: Authentication tokens and session data are stored locally using Shared Preferences.
2.3 Information Managed Through the Web Dashboard
All student data and detailed transportation information is managed by authorized school district administrators:
- Student Information: Names, schools, grades, IEP accommodations
- Transportation Data: Pick-up/drop-off addresses, route schedules, driver assignments
The App displays this data via secure API (Dio HTTP client) but does not collect it independently.
3 How We Use Your Information
3.1 Core Transportation Services
- Route planning and optimization for student pick-up and drop-off
- Real-time vehicle tracking and estimated arrival times
- Matching students with appropriate vehicles and trained drivers
- Ensuring compliance with IEP requirements
3.2 Communication
- Sending in-app notifications about vehicle arrival, delays, or schedule changes
- Providing 24/7 support for families, districts, and schools
3.3 Service Improvement
- Monitoring service quality and on-time performance
- Training our drivers and support staff
3.4 Legal and Safety Compliance
- Complying with applicable laws and regulations
- Ensuring SB88 compliance and fleet safety standards
4 How We Share Your Information
We do not sell, trade, or rent your personal information to third parties.
4.1 With Educational Partners
- School districts and schools for transportation coordination
4.2 With Service Providers
- Cloud hosting and data storage providers
- Google Maps API (receives driver location data for map display)
All service providers are bound by confidentiality agreements.
5 Data Security
We implement appropriate technical and organizational security measures:
- Encryption of data in transit (SSL/TLS via Dio HTTP client)
- Secure password storage with encryption
- Regular security assessments and updates
- Compliance with student data privacy laws (COPPA, FERPA)
Important: No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6 Data Retention
- Account information: Retained while your account is active
- Transportation records: Retained as required by state and federal regulations
- Driver location data: Retained for trip duration only
- Local session data: Stored until logout or app uninstall
7 Children's Privacy
All student data is managed exclusively by authorized school district personnel with appropriate parental consent.
We comply with COPPA and FERPA. Parents have the right to review, update, or request deletion of their child's
information by contacting their school district or us directly.
8 Location Data
For Drivers
- GPS location collected via geolocator and Google Maps only during active trips
- Location data is not stored permanently after trip completion
For Parents/Guardians
- The App reads the driver's location to show vehicle position
- No location data is collected from the parent's device
9 Device Permissions
- Location (Drivers): For real-time GPS tracking during trips
- Internet Access: To communicate with our secure server
- Notifications: For trip status updates (optional)
All permissions are requested at runtime via permission_handler.
10 Your Rights and Choices
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and data
- Revoke Permissions: Disable permissions through device settings
Contact us at info@capitalstudenttransport.com. We will respond within 30 days.
Account & Data Deletion
We respect your right to control your personal data. This section explains exactly how you can request
deletion of your account and all associated data. Follow the steps below to submit your request.
How to Request Account Deletion
2
Include your full name and the email address associated with your account
so we can verify your identity.
3
Tell us if you want to delete all data (full account deletion) or only
specific data (partial deletion — e.g., phone number only).
4
We will verify your identity and process your request within 30 calendar days.
You will receive a confirmation email once completed.
Processing Time
We process all deletion requests within 30 calendar days as required by applicable privacy laws (CCPA, GDPR where applicable).
For urgent requests, please call us at +1 (206) 290-4159 — available 24/7.
What Data Is Deleted (Full Account Deletion)
When you request full account deletion, the following data is permanently removed:
- Your account credentials (username/email and password)
- Your name and phone number
- Your profile information and preferences
- Your message and communication history
- Your local session data (cleared upon next app launch)
What Data May Be Retained
Certain data may be retained as required by law or for legitimate business purposes:
- Transportation records — Retained as required by state and federal regulations (typically 1-7 years)
- Anonymized trip data — Used for service improvement; cannot be linked back to you
- Legal compliance records — Retained as required by law enforcement or court orders
Partial Data Deletion
You can request deletion of specific data (e.g., phone number, communication history)
without deleting your entire account. Mention this clearly in your email
and we will accommodate your request where possible, subject to legal and operational requirements.
What Happens After Deletion
- You will receive a confirmation email within 30 days
- Your app access will be immediately revoked
- Any locally stored data on your device will be cleared on next app launch
- If you are a driver, your location history will be permanently deleted
Note for Parents/Guardians: Student transportation data is managed by your school district.
Deleting your parent account does not automatically delete student records.
Please contact your school district directly for student data requests.
11 California Privacy Rights
Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information. As a California-based company headquartered in Carmichael, CA, we fully comply with CCPA requirements.
- Disclosure of categories and specific pieces of personal information collected
- Deletion of personal information (with exceptions)
- Opt-out of the sale of personal information (we do not sell personal information)
- Non-discrimination for exercising privacy rights
12 International Data Transfers
Our services are provided within the United States. If you access our App from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ.
13 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy within the App
- Sending an in-app notification
- Updating the "Last Updated" date at the top of this page
Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.
14 Third-Party Services
- Google Maps SDK: For displaying maps and route information. Google's Privacy Policy applies.
- Our Secure API Server: All data is stored on our secure servers at capitalstudenttransport.com.
15 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us. We are available 24/7.