Privacy policy
Effective July 24, 2026
Pikup & Go helps schools and other institutions run car-line pickup. That means we handle information about children and the adults who pick them up — we take that seriously. This page explains what we collect, how long we keep it, and how you can ask for it to be deleted.
Who's responsible for your data
Your child's school or institution is the data controller — they decide what information is collected and why, and they're who you should contact first with questions about your family's records. Pikup & Go acts as their processor: we store and process the data on the institution's behalf, under their direction, and we don't sell it or use it for anything outside running the pickup service.
We build with FERPA in mind, since the information involved is school-related and often about minors. We don't hold, and don't claim, any formal COPPA certification — just a genuine commitment to collecting the minimum needed and deleting it on a schedule.
What we collect
Everything we store exists to run a specific part of the pickup flow. Here's the full picture:
| Data | What happens | When |
|---|---|---|
| Child roster | Name, grade, and class, so staff know who they’re releasing. | While enrolled |
| Guardians & delegates | Who’s approved to pick up each child, and who they’ve delegated that to. | While the relationship is active |
| Vehicles | Make, color, or plate info you add, so staff can spot you in line. | While your account is active |
| Pickup history | Arrival and release times for each pickup. | Rolling 13-month window |
| Location, only if your school uses it | A one-time location check when you tap "I’m Here," so a checked-in family is actually nearby. Never tracked in the background. | Rolling 13-month window |
| Pending claim requests | A parent’s request to link to a child, while staff review it. | Until resolved, then a limited window |
| Invitations | Email invitations sent to parents or delegates who haven’t signed in yet. | Limited window if unclaimed |
How long we keep it
We don't keep records longer than they're useful. These windows apply automatically, institution by institution:
| Data | What happens | When |
|---|---|---|
| Pickup history | Deleted automatically. | 13 months after the pickup |
| Resolved claim requests | Deleted automatically once approved or denied. | 90 days after resolution |
| Unclaimed invitations | Expire and are deleted. | 30 days after being sent |
| Revoked delegate access | Invitation record deleted. | 90 days after revocation |
| Vehicles | Deleted along with the parent account that added them. | Immediately on account deletion |
Deleting data
Removing a child from the roster takes them out of active queues immediately; their past pickup history still ages out on the 13-month schedule above rather than disappearing instantly, so the school retains an audit trail for recent activity.
Removing a parent or delegate link ends that person's access to the child right away — they can no longer see the child or start a pickup for them.
When an institution offboards from Pikup & Go, its roster is archived immediately and access is cut off, then fully and permanently deleted after a 30-day grace period — enough time to catch a mistaken offboarding before it's irreversible.
Your rights
You can ask to see, correct, or delete your family's data at any time. Start with your child's school, since they control the record — or write to us directly at hello@pikupandgo.app and we'll route it to the right place. We aim to respond within 30 days.
Security
Data is encrypted in transit and at rest, and access is restricted by row-level permissions so one institution's staff can never see another institution's families or children.
Changes to this policy
If this policy changes in a way that affects how your data is handled, we'll update the effective date above and notify institutions so they can pass it along to families.
Questions? Reach us at hello@pikupandgo.app.