1. Who we are and what this policy covers

Beeline is a school dismissal (pickup) service provided by Startup Tech Partners LLC ("Beeline", "we", "us"). This policy covers:

our website;
MyBeeline, the app school staff use on iPhone and Android;
the web admin at web.mybeeline.io, which schools use to set up and run Beeline;
the Beeline parent apps, which parents and other authorized adults use at pickup.

Together we call these the "Service". The Service is offered to schools and families in the United States.

2. The short version

We do not sell personal information, and we do not use it for advertising. Our apps and website show no advertising.
Beeline holds two kinds of information: your Beeline account, which Beeline is responsible for, and your school's records, which your school controls.
Children do not use Beeline. Information about students comes from their school.
You can delete your Beeline account at any time, in the app or at web.mybeeline.io/delete-account. Some records are kept, and section 10 says which and why.

3. Your Beeline account and your school's records

Your Beeline account

Anyone who signs in to a Beeline app or the web admin is a Beeline user with a Beeline account. This is true whether a school added you as a member of staff or as a parent, or a parent added you as an adult who may collect a child. Your account holds your mobile number, your name, any email address or other details you add, your sign-in details, your devices and settings, and information about how you use the Service.

Beeline is responsible for your account information and decides how it is used, as this policy describes. You keep every right the law gives you over information about you, including the right to see it, correct it and ask for it to be deleted (see section 11).

Your account stays open until you delete it. A school does not own your account. A school only gives you a role at that school (for example administrator, teacher, dispatcher, traffic controller or parent), changes it or removes it, and decides which of its students a parent is linked to. If a school removes your role, your Beeline account is not deleted; you simply no longer see that school's information.

Your school's records

Each school owns and controls the information it puts into Beeline or creates by using it: its students and classes, student numbers and tags, the roles it gives its staff, which adults may collect which child, its lanes and settings, and its records of each check-in, release and pickup.

We hold and use a school's records only to provide the Service to that school, on its instructions, as its service provider. For schools covered by the Family Educational Rights and Privacy Act (FERPA), we act as a "school official" under the school's direct control, and we do not disclose its records except as the school allows or the law requires. We never sell school records, never use them for advertising, and never use them to build a profile of a student except to run that school's dismissal.

Requests to see, correct or delete a student's information go to the school, because the school controls it. If you send one to us, we will pass it to the school and help the school answer. When a school asks us to delete its records, or stops using Beeline, we delete or return its records as our agreement with that school provides, subject to the backups and legal reasons described in section 9.

4. Children's information

Beeline's apps are for adults aged 18 or over. Children do not use Beeline, do not have accounts, and we do not collect information from them. Schools provide their students' information to Beeline under their own authority, to run dismissal. That information includes students' names, classes, student numbers or tag identifiers, the adults linked to each student, and pickup records.

If we learn that an account belongs to someone under 18, we will close it.

5. What we collect

From everyone who signs in

Your mobile number, which is how you sign in. We send a one-time code to it by text message.
Your name, and your email address, postal address and other profile details if you or your school add them. A school may enter your name, mobile number and email address when it adds you.
Sign-in and device details: your sign-ins, the devices you use (such as the phone model, operating system and app version), and your settings.
Feedback you choose to send us.

School staff: the MyBeeline app and the web admin

What you do for your school: the check-ins, releases and pickups you record, and the changes you make to the school's students, classes, staff, lanes and settings. These become part of your school's records.
Information you upload for your school, such as spreadsheets of students and parents. This is your school's information.
Signing in on Android: if you allow it in Google's own prompt, the Android app reads the one text message that holds your code to fill it in for you. It reads no other message. The code is then sent to our server to be checked. On iPhone, your keyboard offers the code; the app does not read your messages.
Android crash reports and usage counts, sent to Google Firebase (Crashlytics and Analytics). They record which screen or control was used, whether an action worked and how long it took, the app version and phone model. They are built so that they contain no names, phone numbers or children's details. Google also receives the operating system, a random identifier for the app installation, and a region estimated from your phone's internet address.
Android device check: on the store version of the Android app, the app asks Google Play to check the device and sends the result to our server, to help protect children's information from tampered devices. If the check cannot run, you can still sign in.
iPhone: the iPhone app has no crash-reporting or analytics tool.
Reading a pickup code: on Android, Google's own scanner reads the code, so the app does not open your camera. On iPhone, the app uses the camera only to read the pickup QR code. It does not save or send pictures or video.
Children's information on your phone: so the app works on a weak signal, it keeps a copy of your school's list on the phone, protected by encryption (on iPhone, the phone's built-in file encryption). On Android the copy is kept for at most 14 days. It is erased when you sign out or when the app learns your access has ended. On the store version of the Android app, the pickup board and kerb screens block screenshots. iPhone does not let apps block screenshots, so please do not take or share screenshots of children's information.
The web admin keeps your sign-in in your browser's storage so you stay signed in, until you sign out or your session ends.

The MyBeeline app does not collect your location, photos, contacts, microphone, files, calendar or advertising identifier.

Parents and other authorized adults: the parent apps

Your profile: your mobile number, name, and the email address, postal address and gender you choose to add.
Your vehicles: plate, make, model and color, so staff can find your car.
Other adults you authorize to collect your child: their mobile number. On Android you can choose them from your phone's contacts: the app shows your contacts on your phone so you can pick one, and only the number you choose is sent to Beeline. If you add another adult, tell them, and only add people who agree.
The children you are collecting, chosen from your school's records, and your check-ins.
Location, if your school uses arrival by location. Section 8 explains exactly when.
Your phone and connection when you check in: the phone's model, name and system version, and your connection. On Android this includes whether you are on Wi-Fi or mobile data and the name of the Wi-Fi network. On iPhone it includes your mobile carrier and your internet provider; to find your internet provider, the iPhone app asks the service ipinfo.io, which receives your phone's internet (IP) address.
Crash reports, usage and diagnostic logs, sent to Google Firebase and Datadog so we can find and fix problems. The logs sent to Datadog may include your account identifier, first name and email address, the identifiers of the children being checked in, and details from your requests, such as your profile, vehicle and the adults you add, and on iPhone your location.
Google Firebase sign-in and storage: the parent apps also use Google Firebase services to sign in to parts of the app and to store app data. Google receives your email address, or your mobile number if you have no email address, as the name of that Firebase account. When you use the Explore tab, the app records the tap with your name and school.
On your phone: the parent app keeps your profile, school and check-in details on the phone until you sign out. On Android this may be included in your phone's own backup.

Automatically, from all our apps and servers

Server logs: each request to our servers is logged with its time, result and the identifiers involved, so we can run, secure and fix the Service. Our apps tell the server which screen and action a request came from and the app version, and we keep this in our records of changes.
Internet address: we use your internet (IP) address to deliver the Service and to limit abuse, such as repeated sign-in attempts.

6. How we use information

We use information only to:

sign you in and keep your account working;
run each school's dismissal: show staff who is arriving, who is collecting which child, and when a child has been released;
keep each school's records for that school;
keep the Service secure, prevent misuse, and find and fix problems;
answer your questions and feedback, and tell you about your account and changes to the Service;
meet our legal duties and protect the safety of children and others.

We do not sell personal information, we do not use it for advertising or targeted advertising, and we do not build profiles of students except to run a school's dismissal.

7. Who can see information, and who we share it with

Your school

Your school's authorized staff see the information their role needs: for staff, the school's students and pickup records; for parents, your arrival, lane, vehicle and the children you are collecting. What you record for a school is part of its records.

Beeline staff

A small number of Beeline staff have support roles. Some can reach every school's records, including children's information; others only the schools they are assigned to. They may use that access only to run, secure and support the Service and to help schools, and access to schools' information is logged.

Service providers

We use these companies to run the Service, and give each only what it needs for its job:

Hosting, database, backups, logs and email: Amazon Web Services, including Amazon Simple Email Service.
Text messages: Twilio, which sends our sign-in codes.
App crash reports, usage and app services: Google, through Firebase Crashlytics, Firebase Analytics and, in the parent apps, Firebase sign-in and databases; and through Google Play services on Android (the sign-in message prompt, the device check, app updates and the code scanner).
Diagnostic logs for the parent apps: Datadog.
Internet provider lookup in the iPhone parent app: ipinfo.io.
Website fonts: Google Fonts (see section 13).

When the law requires it, or to protect safety

We may disclose information when the law requires it, such as in response to a valid court order, or when we believe in good faith that it is needed to protect a child's or anyone's safety. Where we may lawfully do so, we will tell the school concerned about a request for its records.

If Beeline changes hands

If Beeline is sold or merged, information may pass to the new owner, who must keep the promises in this policy for information already collected.

8. Location in the parent apps

Only the parent apps use location, and only if your school uses arrival by location. The MyBeeline staff app and the web admin do not collect your location.

While the app is open, your phone checks its location to see whether you are inside your school's pickup area. Depending on your school's settings, the app may ask to use location "all the time", so this keeps working when the app is in the background.
After you check in, and while you are inside your school's pickup area, the app sends your position (latitude, longitude, accuracy and time) to Beeline every few seconds, so staff can see you have arrived and in which lane.
Your school's staff see your arrival and lane. Your positions are kept with your school's pickup records.

You can turn location off in your phone's settings at any time. Some versions of the parent app need location to work; if you turn it off, ask your school how to check in another way.

9. How long we keep information

Your Beeline account is kept until you delete it.
School records, including pickup records and the location points sent at pickup, are kept for as long as the school needs them for its dismissal and records, and then deleted or de-identified, or as our agreement with the school provides.
Other information, including server logs, crash reports and diagnostic logs, is kept for as long as needed for the purpose we collected it for, and then deleted or de-identified.
Backups of our database are kept for up to 30 days so we can recover from a fault.
We may keep information for longer where the law requires it, or to handle a dispute or a security problem.

10. Deleting your account

You can delete your Beeline account at any time: in the app, from your profile, or at web.mybeeline.io/delete-account. You can also email us at info@mybeeline.io from the email address on your account, or tell us the mobile number on the account; we will check the request is yours before we act on it.

Removing you from a school is not the same as deleting your account: a school can remove your role at that school, but only you, or we at your request, can delete your Beeline account.

What we delete

Your name, mobile number and email address on your Beeline account, and the other details in your profile.
Your sign-in details. You are signed out on every device.
Your roles at any school.

What we keep, and why

Your school's past pickup records. They belong to the school, which must know who released each child. Your name and number are removed from them, and staff see "Deleted user". They still show pickup times and technical details of the phone that was used.
Location from the parent app. If you used the parent app, the location points it recorded are kept after you delete your account, but no longer linked to your name or number.
Backups. We keep copies of our database for up to 30 days so we can recover from a fault. Your details stay in those copies until they expire. If we ever have to restore one, we delete your account again.
Technical logs and crash reports. These may hold limited information for a limited time, and are deleted on their own schedule.
Where the law requires it. We may keep information when we must by law, or to handle a dispute or a security problem.

Deleting your account does not delete your school's information about its students; only the school can ask for that.

11. Your choices and rights

See and correct: you can see and change your profile in the app. You can also ask us for a copy of the personal information in your Beeline account, or ask us to correct it.
Delete: see section 10.
Location: you can turn location off in your phone's settings (see section 8).
Text messages: see section 14.

To make a request, email info@mybeeline.io. We will check the request is yours, and answer within 45 days. If we turn down your request, we will tell you why, and you can ask us to look at it again. Some US states give their residents further rights; where a state law applies to us, we will honor those rights. Requests about a student's records go to the school (see section 3).

12. How we protect information

We use reasonable administrative, technical and physical safeguards to protect information. Information travels between our apps and our servers over encrypted connections (HTTPS). Access to schools' information is limited to school staff the school has authorized and to Beeline staff who need it to run and support the Service, and access by Beeline staff is logged.

No method of storing or sending information can be guaranteed against every risk, and we cannot promise that information will never be accessed without permission. If a security incident affects your information, we will tell the affected schools, and tell you where the law requires.

You can help by keeping your phone locked and never sharing a sign-in code. We will never ask you for one.

13. Our website

When you visit our website, your browser sends our web host standard information such as your internet address, browser type and language, the pages you view and the page that linked to us.
The website uses cookies only as needed for it to work. We do not use advertising cookies, we do not let advertisers place cookies, and we do not record your visit (session recording).
The website loads its fonts from Google Fonts, so Google receives your internet address and browser details when a page loads. The app store badges load from Apple and Google in the same way.
Our website does not respond to browser "Do Not Track" signals, because it does not track visitors across other websites.

14. Text messages

We text your mobile number to send you one-time sign-in codes when you, or someone using your number, asks to sign in, and occasionally about your account. We do not send marketing texts. Message and data rates may apply. To stop our texts, reply STOP to one of them or email info@mybeeline.io. If you stop our texts, you will not be able to sign in by text message until you ask to receive them again.

15. Changes to this policy

We may update this policy. If we make a change that materially affects you, we will tell you in the app or by email before it takes effect, and we will tell schools in advance. We will not use information we have already collected in a materially different way without the consent the law requires. The date at the top of this page shows when this policy last changed.

16. Contact us

Questions, requests and concerns about privacy: info@mybeeline.io
Startup Tech Partners LLC