What we collect, why, and the rights you have over your information - in plain English.
Last updated: 28 June 2026
School Run [registered company name and address] is the data controller for the information described here. For any privacy question, or to exercise your rights, email hello@schoolrun.ie or use our contact page.
We don't collect information about your children (no names, ages or year groups).
Before you connect, others see only your approximate area and your first name with a surname initial (e.g. “Sarah O.”) - never your exact location. When you both accept a connection, your verified phone number is shared so you can arrange the run; this is the trusted way to reach each other and isn't optional. In your privacy settings you can choose whether to also share your email and your full name.
School Run is for adults arranging the school run. By using it you confirm you are 18 or over and the child's parent or guardian (or otherwise responsible for them), acting on their behalf. We treat anything connected to children's travel as especially sensitive and collect as little as possible.
To keep people safe, authorised staff may access account information and message content only when necessary to investigate a report or safety concern, enforce our terms, or meet a legal obligation (for example a Garda request). Every such access is limited to what's needed and recorded in an access log. We never sell your data or use private messages for advertising.
We use a small set of trusted providers and share only the minimum each needs:
We share with authorities only where the law requires it.
We host your data on servers in the EU. A few providers above operate internationally; when your data is processed outside the EEA we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
We keep your account data while your account is active. You can delete your account any time from Profile & settings → Account, which permanently removes your routes, connections and messages. Records we must keep for safety, fraud-prevention or legal reasons - such as abuse reports and moderation access logs - are kept only as long as needed for those purposes (for example, abuse reports for up to 12 months). Phone-verification codes expire within minutes.
Under GDPR you can access, correct, delete, export, restrict or object to the use of your data, and withdraw consent. Delete your account from Profile & settings → Account; for a copy of your data, just contact us. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).
We use only strictly necessary cookies - to keep you signed in and to protect forms. We use no advertising cookies, and our analytics (Umami) is cookieless, so there's nothing to consent to.
We protect your information with appropriate technical and organisational measures. If we make a significant change to this policy we'll update this page and let you know.