Privacy Policy
Last updated September 22, 2026
One Touch Dispatch is school-bus dispatch and student-transportation software operated by Massive Movement Inc. (“Massive Movement,” “we,” “us”), Cresco, Pennsylvania, USA. This policy explains what we collect, why, and what we never do with it. It covers onetouchdispatch.com, the dispatcher and driver screens, the school-office board, and the parent pages.
Who the data belongs to
School districts and bus contractors are the owners of their student, family and staff records. Massive Movement processes that data on their behalf, under their instructions, and only to run the service. When a district ends its agreement we return or delete its data on request.
What we collect
Students
Name, grade, school, assigned stop and route, badge code, and — where the district records them — special-needs and wheelchair-securement flags and extended-time needs. Boarding events (on the bus, dropped off, no-show) with time and stop.
We do not store student home addresses. A child is linked to a bus stop, and the stop’s address is a kerbside location a bus visits — not a dwelling. If a district switches on walking-distance checks, an address in their import file is used once to measure the walk to school and is then discarded: we keep the distance in miles and the date it was measured, never the address or its coordinates. With the setting off, an address in an import file is ignored entirely.
Parents and guardians
Name, mobile number and email address when the district records them or you enter them yourself; your language preference; your notification choices; absences you report; and messages you send to the transportation office.
Drivers and district staff
Name, work contact details, photo, role, credential records the district maintains (license, endorsements, medical card, background and training dates), inspection and work-order entries, and — while a run is active — the bus’s location.
Scanning a driver’s license
A driver may scan the barcode on the back of their own driver’s license to fill in their credential record instead of typing it. We read four things from it: the license number, the vehicle class, the endorsements, and the issue and expiry dates — plus the issuing state. That barcode also carries the holder’s date of birth, height and eye color, and none of those are read or stored — there is no setting that turns them on. The barcode is decoded on the driver’s own phone and only those credential fields are sent to us; the barcode text itself never reaches our servers and is never logged. Scanning is optional — the transportation office can enter a license by hand, as it always could.
Home address is a district choice, and it is off unless the district turns it on. The barcode carries the holder’s home address. By default we do not read it. A transportation office can switch that on, and then a driver’s address is read from the barcode during their scan and saved to their staff record instead of being typed in. The driver sees the address on screen before anything is sent, and the invitation email they received says which setting their district is using. Switching it off stops any further addresses being read; it does not delete records the district already holds, which remain the district’s to keep or clear.
A driver may also take their staff photo from the picture on the front of their license, so that dispatchers see a face beside the name on the board. The camera shows a portrait-shaped frame and only the pixels inside that frame are captured — the rest of the card, including the date of birth and address printed beside the portrait, is never photographed. An image of the whole card is not created at any point. This is optional too, and a photo taken any other way works the same.
Vehicles
GPS position, speed and heading during a route; odometer, inspection, maintenance and compliance records.
Technical
Standard server logs (IP address, browser type, pages requested) kept for security and troubleshooting, and the small amount of data your browser stores to keep you signed in and remember your sound and language settings.
Text messages (SMS)
Parents may choose to receive text-message updates about their own child’s bus. This is opt-in: on your child’s private page you enter your mobile number, tick the consent box, and tap “Turn on text updates.” We record the date, time and the exact wording you agreed to.
- Messages cover your own child only: the bus approaching your stop, boarding, drop-off, delays, route changes, closures and breakdowns.
- Message frequency varies with your child’s route. Message and data rates may apply.
- Reply STOP to cancel at any time, or tap “Stop text updates” on your child’s page. Reply HELP for help.
- Your mobile number is used to deliver these messages and to let the transportation office answer your replies. It is not used for marketing.
- We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Opting out of texts does not affect any other part of the service.
How we use the data
To show dispatchers where buses are, to give drivers their stops and roll call, to let a school office see who is on the way, to tell parents about their own child’s ride, to keep vehicle and driver compliance records, and to keep the service secure and working. We do not build advertising profiles and we do not use student data to train third-party AI models.
Who we share it with
We share data only with the service providers that make the product run, each bound to use it only for that purpose:
- Supabase — database, sign-in and file storage (United States).
- Vercel — application hosting (United States).
- Twilio — delivery of text messages you opted into.
- Resend — delivery of email notices.
- HERE and OpenStreetMap — road routing for bus-safe directions. Stop coordinates are sent; student names are not.
- Anthropic — the optional AI assistant, which receives a summary of live fleet status. Student names are not sent.
- Stripe — district billing. Parents and students are never involved in payments.
We also disclose data when a district instructs us to, or where the law requires it (for example a lawful subpoena, or an emergency involving someone’s safety). We do not otherwise disclose student information to anyone.
Student privacy
We handle student records as a school official with a legitimate educational interest under FERPA, at the district’s direction. We do not use student data for advertising or sell it, consistent with state student-data-privacy laws. Districts may sign a data-privacy agreement with us; we support the standard state agreements.
How long we keep it
Live bus locations are kept for 7 days and then deleted automatically. Student, family, staff, vehicle and compliance records are kept while the district’s agreement is active, and afterwards only as long as the district or the law requires. Inspection, injury and conduct reports may be kept longer where a district must retain them.
Security
All traffic is encrypted in transit (HTTPS) and data is encrypted at rest. Access is separated by role — drivers see their own run, a school office sees only its own students, parents see only their own children — and enforced in the database itself, not just the screens. Sign-in uses a password or a one-time email link. We keep server-side keys out of the browser.
Your choices
- Turn text messages, push notifications or email on or off at any time from your child’s page.
- Ask your district’s transportation office to correct or remove information about you or your child; they can also revoke a family link.
- Residents of states with privacy laws (for example California, Colorado, Connecticut, Virginia) may request access to, correction of, or deletion of their personal information. Contact your district first, since they control the record, or write to us and we will assist them.
Children
One Touch Dispatch is used by adults — dispatchers, drivers, school staff and parents. Student information is entered by the district, not by children, and we do not knowingly collect information directly from a child.
Changes
If we change this policy we update the date above and, for material changes, notify districts by email. Continued use after a change means the updated policy applies.
Contact
Massive Movement Inc.
Cresco, Pennsylvania, USA
stevan@massivemovementinc.com · 1-570-972-7169