Privacy Policy for NavKids Africa
At NavKids Africa, operated out of Nairobi, Kenya, we consider the privacy and safety of children, parents, educators, and transport teams to be our highest priority. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you interact with our website, mobile applications, transport dashboards, and digital child tracking services (collectively, the "Platform").
NavKids Africa is fully committed to operating in strict compliance with the Data Protection Act (2019) of the Republic of Kenya, as well as globally recognized child safety and data safeguarding principles.
1. Information We Collect
To deliver a secure, reliable, and real-time school transit ecosystem, we must collect specific data from our various user groups:
A. Information Provided by Schools & Transport Teams
- Institutional Data: School name, physical address, administrative contact information, and operating hours.
- Personnel Data: Names, mobile phone numbers, verified government-issued identification (National IDs or driving licenses), and photos of transport administrators, bus drivers, and chaperones.
- Fleet Information: Vehicle registration plates, bus capacity, ownership records, and specific transit route configurations.
B. Information Provided by Parents & Legal Guardians
- Account Profiles: Full name, phone number, email address, and home or office delivery coordinates.
- Student Data: Student name, assigned school, assigned bus route, and digital identifiers (such as QR code IDs or digital tokens).
C. Information Collected Automatically During Transit
- Real-Time Geolocation Data: Continuous GPS coordinates of the school bus during operational transit loops to calculate arrival estimates and monitor route compliance.
- Attendance Logs: Timestamps and location stamps recording exactly when a student checks into or out of a school vehicle via digital verification or QR codes.
- Device and Usage Logs: IP addresses, push notification tokens, mobile device operating systems, and application crash reports to optimize software performance and monitor system security.
2. How We Use Your Information
NavKids Africa processes your data strictly for legitimate operational purposes tied to child transit safety and account maintenance. We use this information to:
- Facilitate Tracking: Render real-time bus locations and accurate estimated arrival times (ETAs) to authorized parents and school administrators.
- Deliver Smart Alerts: Send automated notifications (via App Push, SMS, or Email) when a student safely boards, exits, or experiences an unexpected transit delay.
- Maintain Manifest Logs: Generate accurate digital school transport manifests and historical safety attendance records.
- Enhance Platform Security: Authenticate users, verify credentials during onboarding, protect against unauthorized tracking, and detect technical anomalies.
- Provide Support: Resolve system bugs, address user inquiries, and manage system updates.
3. Sharing and Disclosure of Data
We enforce a strict policy against selling, leasing, or trading personal data to third-party advertisers. Data is exclusively shared under the following limited conditions:
- With the Onboarding School: All tracking data, driver histories, and student manifests are fully visible to the respective school administrators to ensure compliance and institutional transport management.
- With Authorized Parents: Parents or legal guardians have access strictly to the data points connected to their own child and that child’s designated transit bus.
- With Core Technology Providers: We share necessary tracking metrics with secure third-party infrastructure partners (such as cloud hosting environments, SMS gateways, and mapping API engines) solely to execute core platform features. These vendors are bound by strict confidentiality agreements.
- Under Legal Mandate: We may disclose data if required to do so under Kenyan law, or in a good-faith belief that such action is necessary to comply with an active judicial proceeding, regulatory investigation, or to protect the vital physical safety of minors or the general public.
4. Data Security and Safeguards
NavKids Africa utilizes institutional-grade security architecture designed to prevent unauthorized data access, altering, disclosure, or destruction. Our core security protocols include:
- Encryption protocols: End-to-end encryption for all personal data transmitted between mobile devices, dashboards, and our cloud databases.
- Access Control: Multi-tier authentication models ensuring that tracking data can only be viewed by verified parents and validated school coordinators.
- Anonymization: Student records are processed using unique internal digital tokens, limiting the exposure of full physical identities across global networks.
- Routine Auditing: Regular internal security reviews to test, assess, and strengthen the resilience of our technical systems.
5. Data Retention Policies
We retain personal data for as long as an active institutional contract exists with the child’s school, or as long as a parent maintains a validated account.
- Historical transit logs (such as past route tracking paths and daily timestamp loops) are routinely archived, anonymized, or permanently purged after an appropriate operational period, unless a school requests long-term logs for safety reporting and accountability purposes.
- Upon deletion of an account or termination of a school agreement, all associated personal identifiers are permanently erased from our active production systems, subject to legal record-retention requirements under Kenyan law.
6. Your Legal Data Rights
Under the Data Protection Act of Kenya, parents (acting as legal guardians) and platform users hold enforceable data rights, including:
- The Right to Access: You can request a clear breakdown of the personal data we hold regarding you or your child.
- The Right to Rectification: You have the right to update or correct inaccurate or incomplete biographical profiles.
- The Right to Erasure: You can request the deletion of your account and personal history, provided the child is no longer actively enrolled in a school tracking program that requires monitoring for daily safety manifest compliance.
- The Right to Restrict Processing: You may object to or limit specific methods of data processing under clear administrative grounds.
7. Third-Party Links
Our website or blog may occasionally feature references or links to relevant industry checklists, traffic regulatory bodies (such as the National Transport and Safety Authority – NTSA), or educational resources. NavKids Africa does not own or operate these external domains and is not responsible for their respective privacy architectures. We advise users to review the privacy documentation of any external sites they visit.
8. Amendments to This Privacy Policy
NavKids Africa reserves the operational right to update this Privacy Policy to reflect evolving technical updates, statutory shifts in child protection regulations, or service adjustments. When material updates are made, we will adjust the “Effective Date” at the top of this policy and deliver a notice through our application interfaces or administrative school emails. Continued use of the platform after updates are posted implies direct acknowledgment of the modified policy.
9. Data Protection Contact
For formal compliance inquiries, privacy concerns, or to exercise your rights under the Data Protection Act, please reach out to our dedicated data privacy coordinator:
- Email: privacy@navkidsafrica.com (or info@navkidsafrica.com)
- Phone: +254 141436934
- Address: NavKids Africa Data Privacy Desk, Nairobi, Kenya
Disclaimer: This draft establishes a robust, highly professional data protection baseline that directly signals compliance to international and regional funders. Prior to embedding this policy into your mobile applications or deploying it on your website, it should be formally audited by a certified legal practitioner specializing in Kenyan data privacy laws.