Weorda Parents App — Privacy Policy

Effective Date: July 17, 2026

This Privacy Policy explains how YPA Group Inc., a Delaware corporation doing business as Weorda ("Weorda," "we," "us," or "our"), collects, uses, shares, and protects information when you use the Weorda Parents mobile application for iOS and Android (the "App").

This Policy is written for parents, legal guardians, and authorized caregivers who use the App. If you use Weorda in a work capacity (for example, as a driver, aide, dispatcher, or office administrator), or if you visit our website or use our operator platform, the Weorda Privacy Policy applies to that use instead.

Your use of the App is governed by the Weorda Parents App Terms of Use, which incorporate this Policy.

1. The Short Version

• We collect only what the App needs: your phone number, the ride confirmations and messages you send, basic device data, and (only if you allow it) your location while the App is open.
• Information about your child shown in the App comes from your transportation company, school, or district (the "Operator"). The Operator controls that information; we process it on the Operator's behalf.
• We do not collect information from children. Children may not use the App.
• We do not sell your personal information, we do not show ads, and we do not use your data for advertising.
• Biometric sign-in (Face ID, Touch ID, fingerprint) happens entirely on your device. We never receive or store your biometric data.

2. Information We Collect About You

2.1 Account Information. Your mobile phone number, verified by a one-time SMS code. You can only access child or route information if the Operator has registered your phone number as an authorized parent or guardian contact.

2.2 Ride Management Data. Ride confirmations and skips you submit through the App, and related timestamps.

2.3 Messages. Messages you send and receive through in-app chat with the Operator's staff (such as the driver or dispatch office). These messages are visible to the Operator.

2.4 Device and Usage Data. Device type, operating system, app version, push notification tokens, IP address, and usage and error logs, collected automatically to operate, secure, and improve the App.

2.5 Location Data (optional). If you grant location permission, your device's approximate or precise location while the App is open, used only to display your position relative to the bus or stop. See Section 6.

2.6 Biometric Sign-In (optional). If you enable Face ID, Touch ID, or fingerprint sign-in, biometric verification is performed entirely by your device's operating system. We never receive, store, or have access to your biometric data.

3. Information About Your Child

3.1 Information about your child displayed in the App (such as name, route, pickup and drop-off locations, boarding status, and vehicle location) is uploaded and controlled by the Operator. Weorda processes this information on the Operator's behalf as a service provider, under our agreement with the Operator, and where student information is involved, under the FERPA "school official" framework and applicable state student privacy laws.

3.2 We do not collect information from children through the App, and we do not collect location data from children or from any device belonging to a child. The vehicle location shown in the App is the location of the Operator's vehicle, collected from the driver's device, not from your child.

3.3 Questions or requests about your child's information (including corrections or deletion) should be directed to the Operator or the school, as they control that information. We will assist the Operator in responding to verified requests.

4. How We Use Your Information

We use the information described in Section 2 to:

• Provide, maintain, and improve the App, including showing routes, arrival estimates, and notifications configured by the Operator.
• Verify your identity at sign-in and secure your account.
• Deliver your ride confirmations, skips, and messages to the Operator.
• Send transactional communications, including SMS sign-in codes, push notifications about your child's rides, and account and security notices.
• Detect, prevent, and respond to fraud, abuse, and security incidents, and enforce our terms.
• Comply with legal obligations.
• Analyze usage in aggregated or anonymized form to improve the App.

We do not use your information for advertising, and we do not use it to train artificial intelligence models for external customers without explicit consent.

5. How We Share Your Information

5.1 With Your Operator. The Operator can see your ride confirmations and skips, your in-app messages with the Operator's staff, and your contact information as registered in the Operator's system. The Operator decides how this information is used within their organization. The Operator cannot see your device location.

5.2 With Service Providers. We share information with service providers who perform services on our behalf, such as cloud hosting, authentication, SMS delivery, push notification delivery, and analytics. A current list of subprocessors is maintained at weorda.com/subprocessors. These providers are contractually required to protect your information and use it only for the purposes we authorize.

5.3 For Legal Reasons. We may disclose information if we believe in good faith that disclosure is necessary to comply with applicable law, legal process, or government request; enforce our terms; protect the rights, property, or safety of Weorda, our users, children served by Operators, or the public; or investigate or prevent fraud, abuse, or security incidents.

5.4 Business Transfers. If Weorda is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.

5.5 With Your Consent. We share information with third parties when you direct us to or otherwise consent.

5.6 What We Do Not Do. We do not sell personal information for monetary consideration. We do not share personal information with third-party advertisers for cross-context behavioral advertising. We do not share your location with Operators or with other parents.

6. Location Data

6.1 Location permission is optional. The App works without it.

6.2 If you grant location permission, the App uses your device's location only while the App is open, solely to display your position relative to your child's bus or stop.

6.3 We do not track your location in the background or when the App is closed. We do not share your location with Operators or other parents, and we do not use it for advertising.

6.4 You can revoke location permission at any time in your device settings.

7. Notifications and SMS

7.1 By creating an account, you consent to receive transactional communications by SMS and push notification, including sign-in codes, security alerts, service notices, and notifications about your child's rides (such as arrival estimates, pickup and drop-off confirmations, delays, and schedule changes).

7.2 You can stop SMS messages by replying STOP. Because sign-in codes are delivered by SMS, opting out will prevent you from signing in with that number. You can control push notifications through your device settings. Standard message and data rates may apply.

8. Data Retention

We retain your personal information for as long as necessary to provide the App and as required by applicable law:

• Active accounts: retained while your account is active, plus thirty (30) days following account deletion or the end of the Operator's subscription, unless deletion is requested earlier.
• Inactive accounts: may be deleted after twelve (12) months of inactivity.
• Backups: may be retained for up to ninety (90) days in encrypted backup systems.
• Legal holds: information subject to legal hold is retained until the hold is released.
• Aggregated and anonymized data: may be retained indefinitely.

Information about your child is retained and deleted in accordance with the Operator's instructions, as described in Section 3.

9. Data Security

9.1 We implement reasonable administrative, technical, and organizational safeguards to protect personal information, including encryption in transit using Transport Layer Security, encryption of data at rest, role-based access controls, multi-factor authentication for administrative accounts, access logging and monitoring, and restricted internal access on a need-to-know basis.

9.2 No security measure is perfect, and we cannot guarantee absolute security. In the event of a security incident affecting your personal information, we will notify affected individuals and regulators where required by law and within applicable timeframes.

9.3 Because the App displays information about your child's location, you must protect your device with a screen lock and keep your account secure, as described in the Parents App Terms of Use.

10. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, including access, correction, deletion, portability, restriction, objection, opt-out of certain processing, and non-discrimination for exercising your rights.

To exercise rights regarding your own information (such as your phone number, account, messages you sent, and device data), contact privacy@weorda.com or use the rights request form at weorda.com/privacy-request. We will respond within the timeframes required by applicable law (generally 30 to 45 days). Please use the subject line "Privacy Request" and include your name, phone number, and the nature of your request.

For rights regarding your child's information, contact the Operator or the school, as described in Section 3.

You can delete your account at any time in the App's settings (Control Center) or by emailing support@weorda.com. See weorda.com/account-deletion for details. Deleting your account does not delete information about your child held by the Operator.

11. California and Other State Privacy Rights

11.1 If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know, access, delete, and correct your personal information, to limit use of sensitive personal information, to opt out of sale or sharing (Weorda does not sell or share personal information for cross-context behavioral advertising), and to non-discrimination. In the past twelve months, in connection with the App we have collected: identifiers (phone number, account ID); internet or other electronic network activity (usage and log data); geolocation data (with your permission); and communications you send through the App. We collect this information directly from you and automatically through your use of the App, for the purposes described in Section 4, and disclose it only as described in Section 5.

11.2 California residents may designate an authorized agent to make rights requests on their behalf. We may require verification of the agent's authority.

11.3 Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Tennessee, and other states with applicable privacy laws have similar rights. To exercise them, contact privacy@weorda.com.

12. Children's Privacy

12.1 The App is intended for use by adults (parents, legal guardians, and authorized caregivers) who are at least 18 years old. Children may not create accounts or use the App. We do not knowingly collect personal information directly from children under 13.

12.2 Student information shown in the App is processed on the Operator's behalf under the FERPA framework and state student privacy laws, not under the consumer COPPA framework. Operators and the schools they serve are responsible for obtaining required parental consents.

12.3 If we learn that a child under 13 has provided us with personal information directly, we will promptly delete that information. If you believe a child has provided us with information, contact privacy@weorda.com.

13. International Users

The App is intended for use in the United States. Information is processed and stored on servers located in the United States. If you use the App from outside the United States, your information will be transferred to, processed, and stored in the United States, where data protection laws may differ from those in your jurisdiction.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated Policy at weorda.com/parents-privacy with a new "Last Updated" date. For material changes, we will provide additional notice (such as by SMS, push notification, or a notice in the App) at least thirty (30) days before the changes take effect.

15. Contact Us

YPA Group Inc. (d/b/a Weorda)
Privacy: privacy@weorda.com
Legal: legal@weorda.com
Account or app help: support@weorda.com