Privacy Policy

Data we collect

• Account: email, password (stored encrypted, nobody can read it), name, phone number (optional), account type (driver, or parent/rider), photo (optional), and app language.

• Drivers: bus description, bio, routes, the school or workplace name and its map location, and invite codes.

• For subscribed drivers: the schools and kindergartens they registered at, and the areas they pick up from.

• Gender (optional): boy or girl for a rider, male or female for a driver. Used so texts read right and so families can look for a female driver.

• Riders: name, home description and map location, and a photo or emoji (optional). If the rider is a child, the parent adds their details and consents to them.

• Trips: when a trip started, who was absent, when the bell was rung, when each rider got on and arrived. We keep this as the ride log.

• Planned absences: the days a parent marked the rider absent, going only or coming back only. Only the parent and the route's driver see them.

• Bus location: only during a trip, the driver's phone sends its location so parents can follow the bus. We keep only the latest point, and delete it when the trip ends.

• Trip path: during a trip we keep the bus's location points so we can draw the way the bus drove once the trip ends. We keep these points for 90 days, then delete them.

• Notifications: your device's push token, the notifications you received, and the kinds you turned off.

• Messages: the messages you exchange with a driver (or, for drivers, with a parent or rider), when they were sent and read, and whether a chat was blocked.

• Reviews: the rating and comment you give a driver, and reports a driver sends about a review.

Why we use it

• To run the service: routes, trips, following the bus, notifications and the ride log.

• To plan the best route for the driver and tell when the bus is near home.

• To keep users safe, review reports and prevent misuse.

• To contact you about your account or subscription.

We don't sell your data, we don't use it for advertising, and there are no advertising trackers in the app.

Who can see your data

• A driver sees the riders on their routes: name, photo, home description and location, the parent's name, and their ride log with that driver. They see the parent's phone only while the rider is on one of their active routes.

• A parent or employee sees their driver: name, photo, bus description and rating. The driver's phone shows only to people with a rider on one of the driver's active routes. The bus location shows only during a trip.

• Only the two people in a chat can read its messages. Anyone can message a driver from the driver's page; a driver can only message the families and riders on their routes, or reply to someone who wrote first. Either side can block a chat.

• A subscribed driver who registers at schools is shown to every app user on that school's page: name, photo, bus description, bio, rating and the areas they serve. Their phone number is not shown; people can message them in the app.

• Reviews are shown without names. Neither the driver nor anyone else can see who wrote a review.

• The Masar team sees reports about reviews in order to decide on them.

Transport companies

Some routes are run by a transport company that has an agreement with Masar. The company adds its drivers, owns the routes and can change the driver on a route.

• Before you join a route run by a company, the app tells you the company's name and that it will see the rider's details, and you can choose not to join.

• For the routes it runs, and only those, the company sees: the parent's name and phone number, the rider's name, gender, home description and map location, planned absences, the daily ride statuses and their times (when the rider got on and off), how long the bus waited at the door, and an image of each trip's path.

• Path image: the company sees the whole path. A parent sees only the bus line and their own home, never other riders' homes.

• The company decides how it uses this data for its routes and is responsible for it under the law; it must use it only to organize the transport and keep riders safe. Masar provides the tool and stores the data for it.

• For any request about your data on a company route, you can contact the company directly or us at support@masarapp.net.

Companies that help us

We use trusted service providers that process data on our behalf and only for that purpose:

• Supabase: database, sign-in, photo storage, and emailing sign-in codes.

• Expo, Apple and Google: delivering notifications to your phone (a message notification includes the sender's name and the start of the message).

• Apple and Google: showing maps in the app.

• Google Maps Platform: when a driver taps "Plan the route", we send their location and the home and school locations to Google to work out the best order.

• Resend: emailing the Masar team when a review is reported.

Some of these servers may be outside Bahrain; we make sure they protect data to an appropriate level.

Security

Data is encrypted in transit. Each user can only reach their own data and the data they are allowed to see, enforced in the database itself. Photos are stored privately and shown through temporary links.

How long we keep data

We keep your data while your account exists. When a rider or route is removed, we delete the home location and photo and keep only the name in the ride log. If you ask us to delete your account, we delete your data within 30 days, except what the law requires us to keep.

Your rights

You can ask for a copy of your data, correct it, delete it, or object to how it is used. You can change most of your data yourself in the app, and turn off any kind of notification in the settings. For anything else, email support@masarapp.net. You can also complain to Bahrain's Personal Data Protection Authority.

Children

Children don't create accounts. A parent signs up and adds their child's details, and can change or delete them at any time.

Changes and contact

If we change this policy, we will tell you in the app and ask you to accept the new version. Questions: support@masarapp.net.