Privacy Policy

1. Who we are

Sefti is a privacy-first school transport platform. This policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights available to you.

In this policy, "Sefti", "we", "us" and "our" refer to the operator of the Sefti platform. "You" refers to any user of our website, apps or services — including parents/guardians, school and provider administrators, and drivers.

2. Data we collect

We practise data minimization — we collect only what is needed to operate a safe, verified school transport service:

• •Account & contact data: name, mobile number, email, and role (parent, driver, school/provider admin).
• •Child data (provided by schools/providers/guardians): the child’s name, school, pickup/drop location and assigned route. Access is strictly role-based.
• •Trip & location data: vehicle location during an active trip, and boarding/drop events, used to provide live tracking and verified alerts.
• •Device data for notifications: a push-notification token, so we can deliver alerts to your device.
• •Usage & technical data: app/website interactions and basic device/log information used to keep the service secure and reliable.

3. How we use data

• •To operate the service — trip scheduling, live tracking, and boarding/drop notifications to authorised recipients only.
• •To keep children safe — verified events instead of information shared in open chat groups.
• •To communicate with you — service messages, alerts, and support responses.
• •To secure and improve the platform — prevent misuse, debug issues, and maintain reliability.
• •To meet legal and regulatory obligations.

4. Children’s data

Protecting children’s information is central to Sefti. A child’s personal data is shared only with the people responsible for that child’s trip, on a need-to-know basis, and every access is logged. We do not sell children’s data, and we do not use it for advertising or profiling.

Where required, children’s data is processed on the basis of consent obtained from a parent or lawful guardian, or under the direction of the school/provider acting as the data controller.

5. How we share data

We do not sell your personal data. We share it only as needed to run the service:

• •With authorised users within your school/provider, limited to what their role requires.
• •With service providers who process data on our behalf (for example, hosting, messaging and payment processing) under appropriate confidentiality and security obligations.
• •Where required by law, or to protect the safety, rights or property of users and the public.

6. Data security

• •Role-based access control across driver, parent, school and admin roles.
• •Encryption of data in transit and at rest.
• •Audit logs recording who accessed what, and when.
• •Instant access revocation when a driver or user leaves.

7. Data retention

We retain personal data only for as long as necessary to provide the service and to meet legal, accounting or reporting requirements. When data is no longer needed, we delete or anonymise it.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing is based on consent. To exercise these rights, contact us at the address below. Requests concerning a child’s data may need to be routed through the child’s school/provider, who may be the controller of that data.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date, and where appropriate, through the service.

10. Contact us

For any privacy question or request, contact us at support@sefti.in.