PRIVACY POLICY

1. Scope and Roles

This Privacy Policy explains how Dargan collects, uses, discloses, safeguards, retains, and otherwise processes personal information in connection with the Services used by Parents/Guardians and Drivers.

Where a School enables the Services, the School may control certain student records and administrative records, and Dargan may act as a service provider for operational processing. For School-controlled records, you may be directed to the School’s process.

2. Legal Framework (Canada)

Dargan is a Canadian company. Our privacy practices are designed to align with applicable Canadian privacy laws, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) for commercial activities, and applicable provincial requirements where relevant.

3. What We Collect

Communications data. Contact details you provide (phone number, email), push notification tokens, and messaging metadata (such as delivery status, timestamps, and message routing identifiers). Where enabled, we may use SMS/text, WhatsApp, email, and push notifications to send service messages related to attendance and pickup. Message content may be stored as part of delivery logs for troubleshooting and audit purposes.

Depending on features enabled and your permissions, we may collect:

• Account information (name, email, phone), role (Parent/Driver), authentication and OTP logs (including, where used, Sign in with Apple or Google sign-in identifiers/tokens and related account linkage metadata).
• Student linkage identifiers and authorization metadata (as permitted by the School and Parent/Guardian).
• Attendance/pickup events (timestamps, status labels, method, audit metadata).
• Device/app technical data (device model, OS version, app version, push token, diagnostics, logs).
• Location/proximity data only if you enable it (GPS, geofence events, Bluetooth/RFID proximity signals).
• Support communications and service messages.

4. Purposes of Use

We use personal information to:

• Send Service Messages and notifications via push notifications, SMS/text, WhatsApp, and/or email, in accordance with School configuration and your available user settings.
• Provide and operate the Services (attendance visibility, pickup coordination, notifications).
• Authenticate users (including through optional third-party identity providers such as Sign in with Apple or Google sign-in) and manage access controls; prevent fraud and misuse.
• Maintain auditability, diagnostics, and service reliability; improve security.
• Provide customer support and respond to user requests.
• Comply with legal obligations and lawful requests.

5. Consent and User Choice; Permissions

School and user preferences. Schools may configure notification rules (event types, timing, and channels). Where available, you may manage certain notification preferences in the app and disable push notifications in device settings. If you disable messages, you may miss important service notices. Certain account/security or legally required notices may still be sent where permitted.

We obtain consent as required by law. Certain features require device permissions (notifications, Bluetooth, location). You may withdraw consent by disabling permissions in your device settings. Some features may not function if permissions are disabled.

Minimum necessary permissions. We design the Services to request only the minimum permissions needed for features. Where feasible, optional features are permission-gated and can be disabled.

6. Location Data and Safety

Location features are optional and permission-based. Location and proximity signals may be imprecise, delayed, or unavailable. Location information is provided for convenience only and is not a safety guarantee.

Users must not use the Services while driving and must park safely before viewing location information.

7. Sharing and Disclosures

We may disclose personal information to:

• Messaging and communications service providers (for example, push notification services, SMS gateways, WhatsApp messaging providers, and email delivery services) to deliver Service Messages and notifications.
• Authentication providers (Apple or Google), only as necessary to enable your requested sign in flow; those providers process your authentication request under their own terms and privacy practices.
• The School and authorized School administrators/staff, consistent with access controls and School policies.
• Service providers who help us operate the Services (hosting, monitoring, notifications, support), subject to contractual safeguards.
• Law enforcement or regulators where required or permitted by law.

We do not sell personal information.

8. Cloud Hosting and Cross-Border Processing

The Services use Amazon Web Services (AWS) and Google Cloud. Depending on configuration, redundancy, and support operations, personal information may be processed or stored in Canada and/or other jurisdictions where service providers operate. Where data is processed outside Canada, it may be subject to the laws of those jurisdictions. We require service providers to protect personal information using appropriate safeguards.

9. Security Safeguards

We use administrative, technical, and physical safeguards designed to protect personal information (such as access controls, encryption in transit and where appropriate at rest, logging/monitoring, and least-privilege practices). No system is perfectly secure; unauthorized access may occur despite safeguards.

10. Breach / Incident Response (Canada)

If a breach of security safeguards occurs, we will assess and respond consistent with applicable law, including notification and reporting obligations where there is a real risk of significant harm.

11. Account and Data Deletion (Google Play / Store Readiness)

Account deletion and data deletion are supported as follows (subject to School record requirements and lawful retention):

• In-app deletion path: If your account is eligible for self-service deletion, you will be able to request deletion from within the app settings.
• Web deletion request resource: We maintain a publicly accessible web page describing how to request account deletion and associated data deletion.
• Some information may be retained if required by law, required for security/fraud prevention, or required by School contractual obligations (for example, audit logs).
• If the School controls certain official records, deletion requests for those records may need to be directed to the School.

Privacy Choices / Data Deletion URL: https://dargan.ca/privacy-choices

12. Access and Correction

You may request access to, or correction of, personal information under Dargan’s control by contacting policy@dargan.ca. If the request concerns a School-controlled record, we may direct you to the School’s process.

Children’s Information

The Services are intended for adult Parent/Guardian and Driver account holders. Student information is displayed only to authorized users under School and Parent/Guardian authorization workflows. Parents/Guardians are responsible for supervising Student device use (including smartwatch usage).

13A. Tracking, Advertising, and App Tracking Transparency (ATT)

Dargan does not sell personal information. Unless otherwise disclosed in our app store privacy disclosures or explicitly presented to you in the app, we do not use personal information for behavioral advertising and we do not engage in cross-app tracking for targeted advertising purposes.

If we implement tracking for advertising as defined by Apple, we will (where required) request permission using Apple’s App Tracking Transparency framework and update our App Store privacy details and this Privacy Policy accordingly.

Third-party SDKs. If we integrate third-party SDKs (for example, crash reporting or performance monitoring), we configure them to minimize data collection and support privacy-by-design. Our app store disclosures will reflect applicable data categories.

14. App Store Disclosures and Consistency (Apple / Google / Samsung)

We provide disclosures in app store submissions (for example, Apple App Privacy Details, Google Play Data Safety, and Samsung requirements). Those disclosures must be consistent with this Privacy Policy and actual in-app behavior.

When we revise this Privacy Policy, we will update this page and, where required, notify users through the app or other reasonable means.

15. Links

Privacy Policy URL: https://dargan.ca/privacy

Privacy Choices / Data Deletion URL: https://dargan.ca/privacy-choices

16. Changes to This Policy; Versioning

We may update this Policy from time to time. Updated versions will be posted at the Privacy Policy URL and may be reflected in app store listings. We may maintain records of policy versions for audit and compliance.