Privacy Policy

1. Introduction & Compliance

TripOnTip ("we," "our," or "us") is committed to protecting your privacy in strict accordance with the Digital Personal Data Protection (DPDP) Act, 2023 of India. This policy outlines how we act as a Data Processor for schools (the Data Fiduciaries) and how we handle the personal data of students and parents (Data Principals).

2. Parental Consent & Minors

We process children's data solely for the purpose of "Safety and Transport Management" which allows us to track school buses. We explicitly DO NOT use children's data for:

• Targeted advertising or behavioral profiling
• Selling data to third parties
• Any purpose detrimental to the child's well-being

3. Data Categories & Purpose

We practice Data Minimization. We only collect:

• Identity Data: Name, Parent's Contact (for notifications)
• Transport & Attendance Data: Live location during active trips and offline QR boarding logs (queued securely on driver devices).
• Vehicle Compliance Data: Driver details and RTO Compliance Documents (Insurance, Permits, PUC) for automated tracking.

Purpose Limitation: This data is processed STRICTLY to provide live tracking, seamless offline attendance validation, safety alerts, and regulatory compliance monitoring.

4. Data Localization, Offline Features & Security

All personal data is stored on secure servers located within India. For our Offline-First features (like QR validation in low-network areas), data is temporarily encrypted and cached locally on the driver's device. It is immediately synced to our servers and purged from local storage once a reliable internet connection is restored. We employ AES-256 encryption for data at rest and TLS 1.3 for data in transit.

5. Your Rights (Data Principals)

Under the DPDP Act 2023, you have the right to:

• Right to Access: Request a summary of your personal data processed.
• Right to Correction: update inaccurate or misleading personal data.
• Right to Erasure: Request deletion of data once the purpose is served.
• Right to Grievance Redressal: Contact our Grievance Officer (details below).

6. Grievance Redressal Mechanism

In compliance with the DPDP Act, we have appointed a Grievance Officer to address any privacy concerns.