Privacy Policy

This Privacy Policy outlines the principles under which LM INNOVATION PRIVATE LIMITED, operating under the brand name "LittleMove", collects, uses, stores, and protects personal data provided by users of its platform. LittleMove is a transport technology aggregator that enables seamless interaction between educational institutions, parents, and drivers through a real-time tracking and communication system.

By accessing or using any part of the LittleMove platform, whether through a mobile application, website, or API integration, you acknowledge that you have read and understood this Privacy Policy and that you consent to the practices described herein. This policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), and other applicable laws governing data privacy and protection in India.

This Privacy Policy applies to all users who interact with or use the LittleMove platform, including representatives of educational institutions, parents or guardians of students, and drivers or transport personnel associated with the services. It governs the data collected throughout the operational lifecycle of the platform, from registration and onboarding to real-time usage and customer support. The policy remains applicable regardless of the means of access, whether through mobile devices, desktop applications, or integrated third-party services.

We collect a variety of information depending on the user's role and interaction with the platform. For instance, when schools onboard to use our services, we may collect details about the institution and its authorized personnel, including names, contact numbers, email addresses, and vehicle-route mappings. Parents or guardians who register to access the real-time tracking features are required to provide their contact information and details of the students under their care. In the case of drivers, we collect personal identification data, such as their name, contact number, driving license information, and verification records. Additionally, our system collects and processes technical and usage data like IP addresses, device identifiers, GPS coordinates, and session activity to ensure seamless functionality and real-time updates.

The primary purpose of collecting this information is to provide, maintain, and improve our services. The data helps in:

• Enabling accurate and timely GPS-based tracking of school transport
• Dispatching trip schedules to drivers
• Notifying parents about their child's pickup and drop-off events
• Helping school administrators manage student safety and transport logistics
• Responding to technical queries and providing customer support
• Conducting internal audits and analytics to enhance user experience

In cases where the law requires compliance or information-sharing with government bodies, the data may also be used to meet such legal obligations. At no point do we sell or rent your data to external parties for marketing or profiling purposes.

We process personal data only when it is legally permissible to do so. The legal bases include:

• Contractual Necessity: Processing required for the performance of a contract, such as when a school signs up for our services.
• Legal Compliance: Meeting record-keeping and safety monitoring obligations under applicable laws.
• Vital Interests: Protection of vital interests, especially when involving children's safety.
• Consent: Explicit consent of the data subject or their lawful guardian for sensitive or optional information.

LittleMove may share personal information with trusted partners and service providers who are engaged to support our technological and operational requirements. These include:

• Cloud storage vendors
• Notification delivery platforms
• Technical support providers

Such sharing is governed by legally binding agreements and is strictly limited to the scope of service delivery. Information may also be disclosed to school administrators who are legally or contractually entitled to access student and driver data.

In specific cases, especially under legal compulsion, data may be disclosed to law enforcement agencies or governmental authorities upon valid requests. All such disclosures are made with careful attention to necessity, proportionality, and due process.

We retain personal data only for as long as it is necessary to fulfill the purposes stated in this Policy. Once the data is no longer required, whether due to the termination of service, withdrawal of consent, or passage of statutory time limits, it is securely deleted or anonymized.

Typically, we maintain account and trip-related records for a period of twenty-four months following the last activity or disengagement to allow for dispute resolution, regulatory audits, or service reactivation. After this retention period, records are securely removed from our primary systems unless a legal exception mandates continued storage.

We implement a variety of organizational, technical, and administrative safeguards to protect your data from unauthorized access, alteration, disclosure, or destruction. These include:

• AES-256 encryption for data at rest and in transit
• Firewalls and intrusion detection systems
• Multi-layered authentication
• Strict access controls
• Confidentiality agreements for staff
• Regular security audits
• Penetration testing

Only authorized personnel have access to personally identifiable information, and such access is governed by strict confidentiality agreements. Regular security audits and penetration testing are conducted to identify and mitigate potential vulnerabilities, ensuring a high standard of data protection across the platform.

Users of the LittleMove platform have several rights with respect to their personal data, in accordance with the Digital Personal Data Protection Act:

• Right to access: The data held about you
• Right to correction: Correct inaccuracies in your data
• Right to withdraw consent: For specific data processing activities
• Right to erasure: Request deletion of data no longer necessary
• Right to grievance redressal: Raise complaints regarding any misuse

We are committed to addressing such requests and grievances within the legally mandated timelines. All requests can be directed to our appointed Grievance and Data Protection Officer.

We recognize the importance of protecting children's privacy, especially in a school-based ecosystem. Any data related to minors is collected only with the verified consent of a parent, guardian, or authorized school representative.

The platform does not allow children to directly create accounts or provide personal information. All child-related data, including name, class, stop location, and attendance status, is controlled and managed by either the parent or the school.

We ensure additional safeguards when processing children's data, keeping it accessible only to verified stakeholders and storing it under high-security protocols.

In certain scenarios, data may be stored or processed in jurisdictions outside India. When such international data transfers are necessary, we ensure that the recipient country or service provider maintains data protection standards that are equal to or stronger than those required under Indian law. Such transfers are carried out only under lawful contracts that include data protection obligations and enforceable rights for affected individuals.

This Privacy Policy may be amended or updated periodically to reflect changes in our practices, technological improvements, or legal requirements. All users will be notified of significant changes through:

• Platform alerts
• Email notifications
• Public postings on our website

The updated version will be published at www.littlemove.in/privacy, and your continued use of the platform after the date of change shall constitute your acceptance of the new terms.