Last updated October 4, 2026
DaycareFlow ("DaycareFlow," "we," "us") provides software that helps solo home daycare providers manage children, families, attendance, and billing. This policy explains what information we collect, why, and how it's protected — for providers, for the parents they invite, and for the children in their care.
Account information. When you sign in with Google, we receive your name and email address to create your account.
Provider-entered information.A provider using DaycareFlow enters information about the children in their care and those children's parents, including names, dates of birth, allergies, medication schedules, care notes, and parent contact details and billing terms the provider sets up. This information is entered and controlled by the provider, not by us or by the children.
Usage information. We log screen views and key actions (for example, adding a child or confirming attendance) to understand how the product is used and to keep an audit trail of changes to child records.
DaycareFlow is a tool for licensed child care providers and the parents they work with — it is not directed at children, and children do not create accounts or interact with DaycareFlow themselves. Information about a child (name, date of birth, allergies, medical notes) is entered by the provider as part of running their business and is necessary to deliver the service a parent has enrolled their child in.
We do not knowingly collect information directly from children, and we do not use child information for advertising. A parent who wants a child's record reviewed, corrected, or removed should contact the provider who manages that record, or email us at the address below and we will assist.
We do not sell personal information, and we do not use child or family data for advertising.
A provider can see and manage the children and families they added. A parent can see only the children they've been linked to via a share code from their provider. Access is enforced at the database level so one provider's data is not visible to another provider or to unrelated parents.
A provider can archive or permanently delete a child's record at any time. Deleting your DaycareFlow account removes your profile and cascades through the records tied to it; a minimal log that an account existed and was deleted is kept for security and legal-compliance purposes.
Data is stored with a provider (Supabase) using row-level access controls so each user can only reach their own data or data explicitly shared with them. We use Google OAuth for sign-in rather than storing passwords ourselves.
We may update this policy as the product changes. We'll update the date above when we do.
Questions about this policy or a request about your data: email privacy@daycareflow.co.