Privacy Policy

Zomfe ("we," "us," or "our") respects your privacy and is committed to protecting personal information processed through our school transport management platform (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

This Policy applies to organization administrators, drivers, parents, and other users who interact with Zomfe products and websites.

We collect information in the following categories:

• Account information: name, email address, phone number, role, and authentication credentials • Organization data: school or fleet details, subscription plan, and configuration settings • Operational data: routes, stops, bus assignments, attendance records, and trip history • Location data: GPS coordinates from driver devices during active trips, when enabled • Student and family data: names, pickup assignments, and contact details provided by your organization • Usage data: log files, device type, IP address, pages viewed, and feature interactions • Support communications: messages you send to our team and related metadata

We use collected information to:

• Provide, operate, and maintain the Service • Display live fleet tracking, ETAs, and operational dashboards • Send notifications to authorized users and families • Authenticate users and enforce role-based access • Process billing and manage subscriptions • Monitor performance, troubleshoot issues, and improve the Service • Comply with legal obligations and respond to lawful requests • Detect, prevent, and address fraud, abuse, or security incidents

Where applicable, we process personal information based on:

• Contract performance: to deliver the Service under our agreement with your organization • Legitimate interests: to secure, improve, and analyze the Service in ways that do not override your rights • Consent: where required for optional features or marketing communications • Legal obligation: where processing is necessary to comply with applicable law

We do not sell personal information. We may share information with:

• Your organization: administrators within your account according to role permissions • Service providers: hosting, mapping, analytics, payment, and notification vendors under contractual safeguards • Legal and safety recipients: when required by law, court order, or to protect rights, safety, and security • Business transfers: in connection with a merger, acquisition, or asset sale, with notice where required

Organization administrators control which users and families can access student-related information within the platform.

Location data is collected from driver devices during active trips to support live tracking, route compliance, and ETA calculations. Location collection is intended to occur only when transport operations are active and in accordance with your organization's policies.

Administrators can configure operational workflows; however, disabling location features may limit core tracking functionality.

We retain personal information for as long as necessary to provide the Service, fulfill contractual obligations, resolve disputes, and comply with legal requirements. Retention periods may vary by data type and organization settings.

When data is no longer needed, we take reasonable steps to delete or anonymize it, subject to backup and archival cycles.

We implement administrative, technical, and organizational measures designed to protect personal information, including access controls, encrypted transport, and monitoring practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Users should protect account credentials and report suspected unauthorized access promptly.

If personal information is processed or stored in countries other than your own, we take steps designed to ensure appropriate safeguards consistent with applicable data protection laws.

Depending on your location and role, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing activities.

Parents and students should contact their school or transport operator to exercise rights related to student data. Organization administrators may submit data requests on behalf of their users by contacting us at privacy@zomfe.com.

The Service is used by schools and transport operators to manage student transport. Student information is provided and controlled by the organization, not directly by children. Organizations are responsible for obtaining appropriate consents and using student data lawfully.

If you believe we have collected personal information from a child in violation of applicable law, contact us and we will take appropriate steps.

Our websites and admin applications use cookies and similar technologies for authentication, session management, preferences (such as theme settings), and analytics. You can control cookies through browser settings, though some features may not function properly if cookies are disabled.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. We encourage you to review this Policy periodically.

For privacy questions or requests, contact:

Zomfe Privacy Team Email: privacy@zomfe.com Address: Dehradun, Uttarakhand, India