Privacy Policy

1. Information We Collect

We collect information directly from you and automatically through your use of our portal.

Information You Provide

• Child information: Full name, date of birth, gender, health conditions, allergies, immunization records, emergency contacts, and authorized pickup persons
• Parent/guardian information: Full name, email address, phone number, home address, and employment information
• Enrollment details: Preferred start date, schedule preferences, and program needs
• Documents: Files you upload to complete your enrollment, such as birth certificates, vaccination records, or custody agreements
• Communications: Messages you send to our staff through the portal

Information We Generate

• Attendance records: Daily check-in and check-out times for enrolled children
• Activity logs: Daily activity reports including meals, nap times, and developmental milestones
• Application history: Status updates and notes related to your enrollment

Automatically Collected Information

• Log data: IP address, browser type, pages visited, and access times
• Authentication tokens used to maintain your logged-in session

2. How We Use Your Information

We use the information we collect to:

• Process and manage your childcare enrollment application
• Provide daily attendance and activity reports through the Parent Portal
• Communicate with you about your child's care, enrollment status, and required documents
• Send notifications and email updates related to your enrollment
• Comply with state childcare licensing regulations and mandatory reporting requirements
• Maintain accurate health and safety records for your child
• Improve the functionality and security of our platform

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

• Service Providers: We use trusted third-party services to operate our platform:
  • Supabase — secure database hosting and authentication. Your data is stored on encrypted servers.
  • Resend — transactional email delivery (enrollment confirmations, notifications).
• Legal Requirements: We may disclose information if required by law, such as mandatory reporting to child protective services or in response to a lawful court order.
• Business Transfers: In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new owner, who will be bound by this policy.

4. Children's Privacy (COPPA)

We collect information about children under 13 only as necessary to provide childcare services and only from their parents or legal guardians. We do not knowingly allow children to create accounts or directly submit personal information through our portal.

Information about enrolled children is used solely for childcare management purposes and is protected with the same security measures as all other personal data. We comply with the Children's Online Privacy Protection Act (COPPA) and applicable New York State childcare privacy regulations.

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encrypted data storage, secure HTTPS connections, role-based access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information and your child's records for the duration of your enrollment plus a minimum of three (3) years after your last date of service, as required by New York State childcare licensing regulations. After this period, records are securely deleted. You may request earlier deletion of your account data subject to any legal retention obligations.

7. Your Rights

You have the right to:

• Access the personal information we hold about you and your child
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data, subject to legal retention requirements
• Withdraw consent for optional communications at any time

To exercise any of these rights, contact us at mumchildcare@gmail.com. We will respond to all requests within 30 days.

8. Cookies & Local Storage

Our portal uses secure, HTTP-only cookies to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Session data is automatically cleared when you log out.

9. Links to Third-Party Sites

Our portal may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or through a notice in the Parent Portal. The date at the top of this page reflects when the policy was last revised. Your continued use of our services after any update constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: