Privacy policy
Version 2026-09-16
Who we are
Zeneon runs STMS, a service schools use to manage their buses and to show families where the bus is during a trip. The school your child attends, or the school you work for, chooses to use STMS and decides which of its data goes into it. Zeneon keeps that data safe on the school's behalf.
What we keep, and about whom
School staff. Your name, your phone number, your role at the school, and a record of what you change in STMS.
Drivers. Your name, your phone number, the bus you drive, and the bus's position while a trip is running. Your phone is the bus's tracker only from the moment you start a trip until you end it. STMS does not collect your location at any other time, and the app does not ask the phone for permission to do so.
Parents and guardians. Your name and phone number, which the school enters so it can reach you. Which children ride which bus, and which stop they use.
Students. Name, class, bus, stop, and whether they boarded and left the bus on a given day. A photo, a date of birth, or a note the school adds (for example about a medical need) only if the school chooses to record it. Notes of that kind are stored encrypted and are visible only to the school's managers and to the assigned driver.
The bus's position is shared only with the school that runs it and with the guardians of the children riding it. Nobody outside the school sees it.
Who else handles it
- The sign-in code is sent to your phone over WhatsApp. Meta delivers the message; it does not see anything else.
- Push notifications reach the app through Firebase Cloud Messaging. The message says that something happened; the details load from STMS.
- The servers run in one region, under contract to Zeneon. There are no advertising or analytics trackers in the app or on the website.
How long we keep it
- Raw bus positions: 90 days. After that only a summary of each trip remains (the route driven, its length, its duration, and the stop times), with no link to the driver's phone.
- Student and family records: for as long as the child is enrolled, then archived under the school's contract. The school can ask for a family's data to be deleted when the child leaves, and we honour the deletion rules of the country the school is in.
- Your own account: you can delete it yourself from the app's More tab, confirmed by a code to your phone. That erases your name and releases your number; the school's own records about you or your child are the school's to delete, on request.
- The change log (who changed what, and when): kept, because it is how the school and we can answer questions later.
Your choices
To see, correct, or delete what STMS holds about you or your child, ask your school; the school controls its data and we act on its instructions. For anything about Zeneon itself, or if you believe data has been mishandled, contact us directly.
Changes
When this policy changes in a way that matters, the version number at the top changes and the app asks you to read and accept it again before you continue.