Vainu Conductor privacy policy

Vainu Conductor is the app a school bus conductor uses to record children on and off the bus. It runs on phones that a school provides and registers, and only people the school has given a sign-in can use it.

The school decides which children, routes and staff are in Vainu and why. Vainu processes this data for the school, to run its bus service. If you are a parent or a conductor and want to know what is held about you or your child, you can ask the school or us.

Only what a trip needs:

• The conductor’s mobile number and password, to sign in
• A key created on the phone when the school registers it, so the server knows which phone is sending records
• Each record the conductor makes: which child, what happened (boarded, received at school, dropped off, handed to a guardian, absent or excused), when, and how it was confirmed
• Problem reports the conductor sends, such as a delay, a missed child or an emergency, with any note they add
• The phone’s location during a trip
• A live photo of a child, only when the child is recorded without the face check
• Face templates, only for children whose school has recorded a parent’s consent

The conductor’s phone is the bus tracker. While a trip is running, the app collects the phone’s precise location, including when the app is closed or not in use, so the school and the parents of children on that trip can see where the bus is. A notification shows the whole time.

Location collection starts when the conductor starts a trip and stops when the trip ends or the conductor signs out. It is not collected at any other time. Location tracks the bus, not a child, and is never used for advertising.

The face check is optional and only suggests a name. The conductor always confirms, or picks the child from the list instead.

The check runs on the phone. Camera frames used for it are analysed in memory and never saved or sent. A face template is a short list of numbers made from three photos of a child taken when the child is enrolled; it is not a photo, and the photos themselves are not kept. Templates are made only for children whose school has recorded consent, are stored encrypted, are sent only to the phone running that child’s trip, and are deleted when consent is withdrawn, the child leaves the school, or the school removes them. They are never used to train models or shared outside the school’s Vainu service.

When a child is recorded without the face check, the conductor takes a new photo of the child. The photo is stripped of location and camera details, encrypted on the phone and sent to the school. It is shown to the child’s guardians in the Vainu parent app so they can confirm it is their child, and to school staff who need it. The copy on the phone is deleted once the school has received it.

Today’s list of children is stored encrypted and can only be opened on the phone the school registered. Records wait on the phone, encrypted, until there is a connection, and are then sent to the school. The app turns off Android’s backup, so nothing from it is copied to a cloud backup.

Data is used only to run the school’s bus service. It is never sold, used for advertising or shared for anyone else’s purposes.

• The school’s transport staff see records, reports, bus locations and problem reports for their own school
• A guardian sees records, the bus location and photos only for their own children, and only during or about that child’s trips
• Other schools see nothing
• Hosting and storage providers store the data for us and may not use it for anything else
• We may disclose data where Indian law requires it

Trip records are kept for as long as the school’s agreement with Vainu sets out, because the school needs a history of every trip. Records are corrected, never edited in place, so the history stays complete. Location points are kept with the trip they belong to. A photo that never finished uploading is deleted after three days. Face templates are deleted as described above. When a school leaves Vainu, its data is deleted or returned to it under that agreement.

Data is encrypted in transit. Face templates, photos, the data on the phone and backups are stored encrypted, and photos are kept in private storage. Each school’s data is kept apart from every other school’s. Each phone signs in with a key that never leaves it, and the school can disable a lost phone at once from its dashboard. Every view of a photo and every export is logged.

Children do not use Vainu Conductor; it is used by adult school staff. It does handle children’s data, which is why the school records a parent’s consent before any face template is made, and why each child’s data is visible only to their school and their own guardians.

You can ask to see, correct or delete data about you or your child, or withdraw consent for the face check, through the school or by writing to us at krisgarg.work@gmail.com. We will work with the school to answer. If the school must keep a record by law or under its agreement with us, we will tell you which and why.

If this policy changes, we will update this page and its date and tell the schools that use Vainu. Questions: krisgarg.work@gmail.com.

Last updated 3 November 2026.