Privacy policy
Last updated 24 October 2026
Archived: this version was replaced on 26 October 2026, and is kept because people accepted it. Read the current privacy policy.
MyBusTrackr lets parents and guardians see their child's school bus and get an alert before it reaches their stop. It is operated by A.H.2 SARL, Beirut, Lebanon ("we"). This policy covers the MyBusTrackr app and the services behind it.
Who decides what
Your child's school decides which children ride which bus, where their stops are and who may follow each child: it gives each guardian the code that links them to their child. When someone new links to a child, the child's other guardians get a notice that someone did (not who). For that roster we act on the school's behalf and only on its instructions. For your app account, your phone number, we are responsible.
What we process
| Data | Where it comes from | Why |
|---|---|---|
| Your phone number and a sign-in account ID | You, when you sign in | To sign you in with a one-time SMS code and link you to your child (at once, if the school listed this number for your child) |
| Your child's name, grade and usual bus stops | The school | To show you only your child's bus and alert you for your child's stop |
| The phone numbers the school lists for your child's guardians | The school | Kept with the school's roster, to recognise a guardian who signs in with a listed number |
| The bus's location, speed and ignition state | A tracker wired into the bus | To show the bus on the map and estimate arrival times |
| A push-notification token | Your phone | To send you alerts about your child's bus (trip started or ended, approaching, arriving, when the bus's location stops updating, cancellations), and a notice when someone new links to your child |
| App integrity checks | Apple App Attest (or DeviceCheck) or Google Play Integrity, through Firebase App Check | To refuse requests that don't come from the genuine app |
| Technical logs, which can include IP addresses | Our servers | Security and troubleshooting |
The app does not use your phone's location. It contains no advertising or tracking tools, and no analytics of our own. The Google libraries it uses for sign-in, notifications, app integrity checks and maps send Google the diagnostic data their own privacy declarations list; we don't use it. We never sell personal data, and we never use it for advertising.
Who can see it
- You see only the bus and stop of the children you are linked to.
- You see the bus's live position only until it passes your child's stop (the last one, if you have several children on it). After that it drives to other children's stops, so it is hidden from you for the rest of the trip. While the bus is off its route, or its position can't be placed on the route, no parent sees it.
- Before your stop, you may see the bus pause at other children's stops on the way. In the same way, parents of children whose stops come after yours can see it pause at your child's stop.
- Authorised staff of your child's school see their own school's buses, routes and roster. Staff who handle transport also see the phone number and email of each guardian linked to a child, so they can reach you; read-only staff don't. Staff see where a bus is only while it is running a trip, from its start until it ends: staff end it, or it ends itself at the school or depot its route ends at, or after 3 hours. Each school's data is kept separate from every other school's in our database.
- We access it only to run, secure and support the service.
Service providers
| Provider | What for |
|---|---|
| Hetzner Online GmbH | Our servers, in the European Union (Germany or Finland) |
| Google (Firebase Authentication, Cloud Messaging and App Check; Google Maps; Routes API) | Sign-in codes by SMS, notifications, integrity checks, the map, and travel-time estimates. The Routes API receives the bus's position and stop coordinates, never your name or phone number. |
| Apple | Delivering notifications to iPhones |
Some of these providers process data outside Lebanon, under their own security and privacy commitments.
How long we keep it
| Data | Kept for |
|---|---|
| Bus positions | 90 days |
| Raw tracker data | 30 days |
| Arrival-time estimates | 29 days |
| Technical logs | Until they rotate out (a fixed size per service) |
| Your account, your link to your child, trip and alert records | While your school uses MyBusTrackr and your access is active. Your account is deleted within 30 days of your request; a school's data is deleted as its contract with us sets out |
| Encrypted database backups | 90 days |
| Whole-server snapshots kept by our hosting provider (everything above) | 7 days |
Security
Everything between the app, the school's desk and our servers is encrypted in transit; the bus's tracker sends only the bus's position and sensor readings, never a name or phone number. Sign-in uses one-time SMS codes, and the service accepts requests only from the genuine app. Database access follows least privilege, and every school's data is walled off from the others.
Children
The app is for parents and guardians, not for children. We hold a child's name, grade and stop only because their school provides them, and only to tell the child's guardians where the bus is.
Your choices and rights
- To correct a child's details or stop, contact the school.
- To delete your account, see Delete your account.
- To ask what we hold about you, or for anything else about your data, write to support@mybustrackr.com.
- You can turn notifications off at any time in your phone's settings.
We handle personal data in line with Lebanese Law No. 81 of 2018 on electronic transactions and personal data.
Changes
We post any change on this page and update the date at the top. If a change affects how we use your data, we tell you through your school before it takes effect.