Privacy Policy
Effective August 27, 2026
BUSRUN LLC (“BusRun,” “we,” “us”) operates the BusRun admin console, attendant app, and parent app (together, the “Service”), which camps and schools use to coordinate and communicate bus transportation. This policy describes what data the Service actually collects, why, and who it's shared with.
This is a good-faith, plain-language description of BusRun's real data practices as of the effective date above. It has not yet been reviewed by an attorney and should not be treated as a final legal document.
Who provides your information
A camp or school signs up for BusRun and designates its own administrators. Those administrators — not BusRun, and not children — enter the roster of campers or students who ride the bus, along with attendant and parent contact information. If you are a parent or camper, your camp or school is the one that decided to use BusRun and provided your information to us on your behalf, under whatever agreement or consent process your camp or school has with you. BusRun does not knowingly collect information directly from children, and no child interacts with the Service directly — camper accounts don't exist; only administrators, attendants, and parents log in.
What we collect
Administrators, attendants, and parents (adult accounts)
- Name and email address
- Phone number, if provided — used as an alternate delivery channel for a one-time account-security code at login, in addition to your password
- For attendants only: a home address, used solely to place you as the first/last stop on your assigned route, and a photo so a fellow attendant can confirm identity
- A password (managed by our identity provider, Auth0) and, optionally, a multi-factor authentication credential
Campers / students (provided by your camp or school)
- Name and date of birth
- Home address, used to plan and optimize the bus route
- A photo, so the attendant can confirm the right child is boarding or being dropped off
- Medical or custody notes, only if your camp or school chooses to record them, and only to the extent needed to safely transport the camper
Street addresses, dates of birth, photos, and medical/custody notes are encrypted at rest in our database. Photos are also stripped of all embedded metadata (including GPS location tags cameras often add automatically) before we store them.
What we don't collect
We don't track anyone's live GPS location. “Real-time” status in BusRun means the attendant marks each stop as reached, skipped, boarded, etc. as the run happens, and that status is pushed live to admins and parents — it is not continuous location tracking of a phone or vehicle. We also don't run any advertising, analytics, or crash-reporting software in the Service, and we don't use camper information for marketing of any kind.
How we use it
- Operating the transportation service: building and optimizing bus routes, running the live pickup/dropoff workflow, and letting parents see run and skip status
- Notifying parents of pickup, dropoff, and skip events via push notification (iOS only, today)
- Verifying identity at pickup/dropoff via camper and attendant photos
- Securing accounts: password authentication, optional multi-factor authentication, and optional SMS/email one-time codes
- Responding to support requests you send us
Who we share it with
We don't sell personal information. We use the following service providers to operate BusRun, each of which only sees the data needed to perform its function:
- Auth0 (Okta) — authentication: verifies your password and, where enabled, your multi-factor code
- Amazon Web Services — hosts our database and API (RDS Postgres, ElastiCache Redis, App Runner); sensitive fields are encrypted before they reach it
- Vercel — hosts this website and the admin console
- Apple Push Notification service — delivers status alerts to the parent iOS app
- Twilio — delivers one-time security codes by SMS, if you have a phone number on file
- Zoho — delivers one-time security codes and other account email
- U.S. Census Bureau geocoding service — a free federal service we use to convert street addresses into map coordinates for route planning; it is not a commercial vendor and receives only the address being geocoded
We may also disclose information if required by law, or to protect the safety of campers, attendants, or the public.
Your camp or school's role
For camper data, your camp or school administrator controls what is entered, corrected, or removed — BusRun acts on their instructions as their service provider. For your own administrator, attendant, or parent account, you can update your information directly in the app, or contact us.
Data retention
We retain data for as long as your camp or school's account is active, or as needed to provide the Service. Administrators can archive a camper record when a child no longer rides the bus. If your camp or school's account is closed, contact us about deletion of remaining data.
Your rights
To access, correct, or request deletion of your information, contact your camp or school administrator (for camper data) or email us directly at support@busrunapp.com.
Changes to this policy
If we make material changes to this policy, we'll update the effective date above and notify camp and school administrators.
Contact us
BUSRUN LLC (New Jersey) — support@busrunapp.com