1Who we are
Rooli is a school transport management and tracking system provided by EduMarket in the Arab Republic of Egypt. In this policy, "Rooli", "we" and "us" refer to EduMarket as the service provider.
This policy applies to roolirooli.com and to the Rooli service used by schools. EduMarket's general privacy policy applies to EduMarket's other platforms.
2Our role and the school's role
When a school uses Rooli to manage its students' transport, the school is responsible for the data of its students, their parents and its transport team, and decides what that data is used for. We process this data on the school's behalf and under its instructions, and we don't use it for any other purpose.
For website visitors and people who request a demo, we are directly responsible for their data.
3Data we collect
From website visitors and demo requests:
- Your name, school name and phone number, and your email address if you enter it, when you send the "Request a demo" form.
- General technical data such as your device type, browser and the pages you visited, to measure and improve the website's performance.
Within the Rooli service, depending on what the school enters and turns on:
- Student data: name, grade, address or pick-up and drop-off point, and assigned route.
- Student photos: a reference photo of the student added by the school, and a photo the supervisor takes when the student boards the bus as proof of boarding, as described under "Student photos and face check".
- Parent data: name and contact details, to send trip notifications.
- Transport team data: the names of drivers and supervisors, their contact details and the tasks assigned to them.
- Bus and trip data: buses, routes, trip times, student boarding and drop-off records, and day-to-day changes.
- System users' account data and a log of their activity in the system, for security and auditing.
- Location data from the driver app during trips, as described under "Location information".
- Messages exchanged within the service between parents and the trip team about their children's trips.
From the Rooli app on a driver's or supervisor's device:
- Device and usage data and crash reports, such as device model, operating system and the screens used, through Google's Firebase Analytics and Firebase Crashlytics, to improve the app and fix crashes.
- Your device's notification token, to send trip notifications.
- Device motion data (drivers), to tell when the bus starts and stops during a trip and to save battery. It is processed on the device and isn't sent to our servers.
- Unlocking the app with your fingerprint or face, if you turn it on. Verification happens entirely through your device's system, and no biometric data reaches us.
4Location information
Drivers: When you use Rooli as a driver, the app collects your device's precise location (GPS), only while a trip you are assigned to is in progress. This includes when the app is closed or not in use: an ongoing notification is shown for as long as location is being collected. We use it to show the bus on the trip map, guide you to each stop, record stop arrivals, and share the bus's live route and arrival times with the school that operates the trip and with the parents of students on that trip. Location is sent to Rooli's servers, kept as part of the trip history for as long as the school subscribes to the service (as described under "Where data is stored and how long we keep it"), and is visible to that school. Collection stops when the trip ends.
Supervisors: When you use Rooli as a supervisor, the app uses your device's location during a trip only to confirm you are at the current stop before you board students or mark them absent. This check happens on your device. Your location is not sent to our servers, shared, or stored.
We do not sell location data or use it for advertising. You can withdraw location access at any time in your device's settings. Trip tracking and stop check-in won't work without it.
5Student photos and face check
To make sure the student getting on the bus is the student registered for the trip, the supervisor takes a photo of the student at boarding. The app compares this photo with the reference photo the school added, and the comparison happens only on the supervisor's device. We don't create a permanent face template, we don't send any face data to our servers, and we delete the temporary copy of the reference photo from the device after the comparison.
The boarding photo is uploaded to Rooli's servers and kept in the trip history as proof of boarding. Only the school that operates the trip can see it, and it is deleted according to the retention period described under "Where data is stored and how long we keep it". Student photos are not used for any other purpose and are never shared with advertisers.
Student photos are added and used at the school's decision, and the school is responsible for informing parents and obtaining their consent. Parents can contact the school about the use or deletion of their child's photo.
6How we use data
- Responding to demo requests and getting in touch with interested schools.
- Running the Rooli service for the school: organizing buses, routes and trips, and following students getting on and off.
- Sending trip notifications to the users concerned.
- Providing technical support and protecting the service from misuse.
- Improving the website and the service, and measuring how well our marketing campaigns perform, on the website only.
- Complying with the law and responding to requests from the competent authorities.
We don't sell personal data, and we never use student data in any advertising or marketing.
7Children's data
Most students who use school transport are children. That's why we collect student data, including their photos, only through the school and only to run the transport service and keep students safe. The school is responsible for informing parents and obtaining their consent as the law requires. Students themselves don't use the website or create accounts on it.
9Cookies and measurement tools
The Rooli website uses cookies and similar tools to run the site and to measure its performance and how well our ads work:
- Essential: to run the website, remember some preferences, and show the "No connection" page when you lose your internet connection.
- Measurement and advertising: we may use Meta Pixel to count visitors and to see whether a demo request was sent after someone saw our ads.
You can block or delete cookies in your browser settings, and control personalized ads in your Meta account settings. Some parts of the website may not work as they should if you block them.
10Protecting data
We use appropriate technical and organizational measures to protect data, including encrypted connections, access limited by role, and audit logs. Still, no system is completely secure. If a breach affects the data, we will notify the school concerned and the competent authorities without delay, as the law requires.
11Where data is stored and how long we keep it
The service is hosted with cloud service providers whose servers may be outside Egypt, with appropriate safeguards as the law requires.
- Demo request data: we keep it for as long as we're in touch, and then for up to two years unless you become a customer.
- Rooli service data: we keep it for as long as the school subscribes, then delete it or return it to the school within a reasonable time after the subscription ends, unless the law requires us to keep it longer.
12Your rights
Under Egypt's Personal Data Protection Law (Law No. 151 of 2020), you have the right to:
- Know what data we hold about you and get a copy of it.
- Correct or update your data.
- Ask us to delete your data or limit how it is used.
- Withdraw your consent to marketing messages at any time.
- Object to the processing of your data, and file a complaint with the Personal Data Protection Center.
If your school has registered your data in the Rooli service, as a parent, driver or supervisor, contact the school first, and we'll help it carry out your request.
13Deleting your account
If you have a driver or supervisor account in the Rooli app, you can ask us to delete it at any time from the account deletion page, without signing in. We confirm the request with a code we send by SMS to the mobile number on the account.
We review every request and process it within 30 days: we delete your login, unassign you from upcoming trips, and remove your name from the school's trip history. We may keep some data longer where the law requires us to.
14Updates to this policy
We may update this policy from time to time. We'll publish the new version on this page with its update date, and let subscribing schools know about any material change.
15Contact us
For any question or request about your privacy, contact EduMarket by phone or WhatsApp at the number below.