Tranzita

Privacy Policy

Last updated: August 2026

Tranzita is committed to protecting the privacy of every child, parent, school, and crew member on the platform. This policy explains what data we collect, why we collect it, how we store it, and your rights in relation to it.

1. Who We Are

Tranzita is a school transport platform operated by Tranzita Nigeria Ltd registered in Nigeria.

We operate as a data controller for the personal data of parents, children, schools, and crew members on the platform.

We process personal data in line with the Nigeria Data Protection Regulation, the Nigeria Data Protection Act 2023, and applicable child safeguarding obligations.

Contact for data matters: booking@tranzita.africa marked Data Privacy Enquiry.

2. Data We Collect

2.1 Child Data

We collect the child full name, school name, class, home address, and medical summary including known conditions and allergies provided by the parent at registration. We collect tap-on and tap-off event data including timestamp and GPS coordinates for every journey. We collect nurse welfare notes where the nurse records a health or behaviour observation during a journey. Child data is treated with the highest level of protection and is never shared with any third party for any commercial purpose.

2.2 Parent and Guardian Data

We collect the full name, phone number, WhatsApp number, email address, home address, and photo ID of each registered parent and each verified guardian. We use this data to provide parent PWA access, verify guardian identity at drop-off, support parent communication, and contact parents in the event of an incident or concern.

2.3 School Data

We collect school name, address, contact details, the names and roles of authorised school users, and student registration data provided by the school. We use this data to operate the school dashboard and to manage routes and manifests.

2.4 Crew Member Data

We collect full personal details, biometric data, identity documents, criminal clearance certificates, FRSC records, medical fitness records, drug screening results, guarantor details, and home address verification records for all crew members. Biometric data is encrypted and stored separately from other crew member data.

2.5 Journey Data

We collect GPS position, speed, bus ID, crew on duty, tap events, guardian confirmations, nurse welfare notes, and any incident flags for every journey. Journey data is stored for a minimum of three years.

3. How We Use Your Data

We use the data we collect solely to operate the Tranzita platform.

Specifically, we use child and guardian data to manage safe drop-off, parent PWA access, support requests and escalation. We use journey data to operate the school dashboard and investigate any incident or complaint.

We use crew data to manage vetting, scheduling, and performance monitoring. We use school data to manage routes, manifests, and school billing.

We do not use any personal data for advertising. We do not sell any personal data to any third party. We do not share personal data with any commercial partner except where required to operate the platform.

4. Data Storage and Security

All Tranzita data is stored on encrypted servers using Supabase infrastructure with PostgreSQL databases.

Supabase acts as Tranzita's database and hosting infrastructure processor. Tranzita remains responsible for how personal data is collected, accessed, retained, corrected, deleted, and protected inside the platform.

All data is encrypted at rest and in transit using industry standard AES-256 encryption. Biometric data is stored separately from all other personal data with additional access controls.

Access to personal data is restricted to Tranzita team members who require it to perform their specific operational role. All access to personal data is logged.

If a reportable personal data breach occurs, we will investigate, contain the incident, notify affected schools or users, and notify the relevant Nigerian data protection authority within 72 hours where legally required.

We use OWASP ZAP for continuous automated security scanning of our platform.

5. Your Rights

You have the right to request a copy of all personal data Tranzita holds about you or your child at any time.

You have the right to request correction of inaccurate data, request deletion subject to our legal retention obligations, and object to our processing of your data.

These rights are handled under the Nigeria Data Protection Regulation, the Nigeria Data Protection Act 2023, and any other applicable Nigerian data protection requirement.

To exercise these rights contact booking@tranzita.africa marked Data Rights Request. We will respond within 14 days.

6. Children's Data

We treat all data relating to children with the highest level of protection.

Child data is never used for any purpose other than operating the safe transport of that specific child. Child data is never shared with any third party except the school the child is registered at and the crew members assigned to that child route.

We do not retain child data beyond three years from the child last journey on the platform except where legally required to retain incident records relating to that child.

7. Contact

For all privacy enquiries contact: booking@tranzita.africa marked Privacy Policy Enquiry.

Tranzita Nigeria Ltd. Lagos, Nigeria.