Legal

Privacy Policy

Effective date: 19 July 2026

CozyHub ("we", "us", "our") operates the MyVan mobile application (the "App"), a school van tracking service used by drivers and parents/guardians in Sri Lanka. This policy explains what information we collect, how we use it, and the choices you have.

Sensitive data notice — MyVan is used to track vehicles that transport children, and to verify the identity of drivers. Because of this, the App collects a child's name and school information (provided by a parent/guardian, not by the child), and a driver's government-issued National Identity Card (NIC) details. We treat this information as sensitive and limit who can access it (see "How We Protect Your Information" below).

1. Who This Policy Covers

This policy applies to two types of App users:

Drivers — operators of a school van registered on MyVan.
Parents/Guardians — adults who register to track a van carrying their child.

MyVan is not directed at children. Children do not create accounts or directly provide information to us; all information about a child is entered by their parent/guardian.

2. Information We Collect

2.1 Account & Identity Information

Data	Collected from	Purpose
Mobile number	Drivers, Parents	Account identification and OTP-based sign-in
Full name	Drivers, Parents	Identify who is operating a van / who a pickup contact is
NIC (National Identity Card) number and photo	Drivers	Verifying a driver's identity before they can transport children
Profile photo	Drivers, Parents	Shown in the app so parents/drivers can recognize each other

2.2 Child & School Information (provided by a parent/guardian)

Data	Purpose
Child's name, grade, gender	Identify which child is associated with a pickup/drop-off
School name	Route matching and trip coordination
Pickup location	Shown on the map to the driver and to route the trip

2.3 Vehicle Information

Vehicle registration number, model, route (start/end points), assigned schools, maximum capacity, and a photo of the vehicle.

2.4 Location Data

While a driver has an active trip running, MyVan collects the van's precise (GPS) location — including while the app is in the background or the device screen is off — so that parents can see the van's live position and estimated arrival. Location is:

Only collected while a trip is active (started by the driver from within the app).
Stopped immediately when the driver ends the trip.
Not retained as a historical trail after the trip ends — the live location record is cleared shortly after the trip is marked as ended.
Never sold, and never used for advertising.

Parents also optionally share a one-time pickup location when registering, to help the driver plan the route.

2.5 Information Collected Automatically

Standard technical data needed to operate the app securely (e.g. sign-in session tokens, crash/error logs) via our infrastructure provider, Google Firebase.

3. How We Use Your Information

To create and secure your account (phone number verification via SMS one-time codes)
To match parents with the correct van and driver
To show parents their child's van in real time during an active trip
To verify a driver's identity before they can operate a van on MyVan
To notify a parent when the van is near their pickup point
To respond to support requests

We do not use your data for advertising, and we do not sell personal information to third parties.

4. Who We Share Information With

Party	What they receive	Why
Google Firebase (Firestore, Realtime Database, Storage, Authentication, Cloud Functions)	All account, trip, and location data described above	Our backend infrastructure provider — hosts our database, file storage, and login system
Google Maps Platform	Location coordinates, search queries for addresses/schools	Displaying maps, routing, and address search inside the app
text.lk (SMS gateway, Sri Lanka)	Mobile number and a one-time verification code	Delivering the SMS OTP used to sign in
Other MyVan users on the same van	Driver: name, photo, vehicle details, live location during a trip. Parent: child's name, pickup point, contact details	The core purpose of the app — so drivers and parents on the same route can coordinate

We do not share your information with data brokers or advertising networks. We may disclose information if required by law or to protect the safety of a child.

5. How We Protect Your Information

All data in transit is encrypted (HTTPS/TLS).
Sign-in requires verifying a one-time code sent by SMS to your registered mobile number.
Access to a driver's vehicle record and a parent's child information is restricted, by server-side rules, to that driver/parent and the other party they are actively matched with (e.g. a driver can only see the parents/children assigned to their own van).
The SMS-sending credentials used to deliver OTP codes are stored server-side and are never included in the app itself.

6. Your Choices & Rights

Access/update: Update your profile information at any time from Account Settings inside the app.
Location: Drivers can decline background location access, but doing so will prevent live tracking from working while the app is not on screen.
Delete your account: You can permanently delete your account and associated data at any time:
- In the app: Settings → Delete Account.
- On the web, without the app: visit our Account Deletion Request page.
Deleting your account removes your profile, photos, and (for drivers) your vehicle record. Requests submitted via the web page are processed within 7 business days.

7. Data Retention

We retain your account information for as long as your account is active. One-time SMS verification codes are stored only for 5 minutes and are deleted immediately after use or expiry. Live location data exists only for the duration of an active trip. When you delete your account, we delete the associated records described in Section 6 within 7 business days.

8. Children's Privacy

MyVan is intended for use by adults (drivers and parents/guardians). We do not knowingly allow children to create accounts. Information about a child is provided to us by their parent/guardian for the sole purpose of coordinating safe school transport, and is only visible to that child's own parent/guardian and the driver of their assigned van.

9. International Users

MyVan is designed for use in Sri Lanka. Your information is processed using Google Firebase infrastructure, which may process data outside Sri Lanka.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Effective date" above.

11. Contact Us

Questions about this policy or your data: hello@myvan.lk