Sandke Apps
Privacy Policy

Privacy Policy for Cambria Bus Buddy

Effective date: July 2, 2026

Privacy questions can be sent to cambriabusbuddy-privacy@sandke.com.

Cambria Bus Buddy ("we," "our," or "us") is designed to work entirely on your device. The app helps Cambria Community Bus drivers load a daily schedule, manage stops during a drive, and produce a post-drive summary. This policy explains what data the app handles, how it is used, and your choices.

1. Data the App Handles

  1. Schedule information you import from a schedule document, including rider names, phone numbers, pickup addresses, destinations, and scheduled times.
  2. A local knowledge base the app builds over time: rider records (name, alternate names, phone number, home address, accessibility notes) and saved destination mappings (informal names paired with resolved addresses).
  3. Drive records: stop lists, completion times, cancellations, companions, mileage, and gas-up entries.
  4. Your driver name and app preferences, entered in Settings.
  5. Your device's approximate position while the app is in use during an active drive, only if you grant location access and enable drive-time hints.

2. On-Device Processing

Schedule documents are parsed entirely on your device. The imported schedule file itself is never stored by the app and is never uploaded anywhere — the parsed schedule becomes the app's working copy. We do not operate any servers, and no app data is sent to us.

3. Rider Information

Schedules contain personal information about riders — names, phone numbers, and home addresses. This information stays on your device (and, if you enable iCloud sync, in your private iCloud account). It is never transmitted to us or to any third party by the app. As the driver, you are responsible for handling rider information in line with your organization's policies.

4. Location and Apple Services

  1. Location access is optional and When-In-Use only. It is used solely during an active drive to estimate the drive time to your next stop. The app never requests background or Always location access.
  2. Destination lookup and drive-time estimates use Apple MapKit services. When the app resolves a destination name or requests a travel-time estimate, relevant request data (such as the search text, or your position and the next stop's location) is processed by Apple to return results, subject to Apple's privacy policy.
  3. We do not run our own location or place-search backend.

5. Phone Calls

Tapping a rider's phone number hands the number to the standard iOS phone dialer. The app does not access your call history, contacts, or call content.

6. iCloud Sync (Optional)

  1. iCloud sync is opt-in and disabled by default. You choose at first launch.
  2. When enabled, drive data and the knowledge base sync across your devices through your private iCloud (CloudKit) database, tied to your Apple Account. Only you can access this data; we cannot read it.
  3. When disabled, all data stays local to each device and nothing is synced.

7. Live Activity

If you enable the Live Activity, the current stop — including the rider's name and destination — is shown on your Lock Screen and in the Dynamic Island during a drive. This display is generated on-device. Keep in mind it is visible to anyone who can see your locked device.

8. Data Sharing and Selling

  1. We do not sell your personal data or riders' personal data.
  2. We do not share data with data brokers or advertising networks.
  3. We do not use third-party analytics or ad SDKs.
  4. We do not operate developer servers for app data.
  5. The post-drive summary is shared only when you explicitly use the iOS share sheet, and only with the destination you choose.

9. Tracking

We do not track you across apps or websites for advertising purposes.

10. Data Retention and Deletion

  1. Drives, rider records, and location mappings remain on your device until you remove them.
  2. You can delete individual drives, rider records, and saved location mappings in the app at any time.
  3. Settings > Clear All Data deletes all app data, including data in your private iCloud database if sync is enabled, and restarts the first-run setup.
  4. You can revoke location access anytime in iOS Settings: Settings > Privacy & Security > Location Services > Cambria Bus Buddy.
  5. Removing the app removes app data stored locally by the app, subject to iOS backup and restore behavior. If iCloud sync was enabled, synced data remains in your iCloud account until deleted via Clear All Data or your iCloud settings.

11. Children's Privacy

The app is designed for adult bus drivers and is not designed to knowingly collect personal information from children for profiling, advertising, or sale.

12. Changes to This Policy

We may update this policy as the app evolves. The effective date will reflect the latest version.

13. Contact

If you have questions about this policy, contact us at cambriabusbuddy-privacy@sandke.com.