How We Handle Your Data

Running a childcare center means using a few trusted technology companies to keep the website online, store records safely, and send you messages. These companies are called subprocessors: they handle data on our behalf so we can serve your family. We keep the list short, and we only work with providers that meet strong security standards.

Each one is described below, along with what it does and the promise it makes to protect your information.

Supabase stores our records and files, including enrollment details, family and child information, and photos shared through the parent portal. Data is encrypted at rest and in transit, and access is limited to the accounts that need it.

Supabase is bound by its own security and privacy commitments to protect the data it holds for us. It processes data only to provide the storage service, not for its own purposes.

Vercel hosts our website and delivers its pages to your browser. When you visit the site, Vercel handles the request so the page loads quickly and securely over an encrypted connection.

Vercel is bound to protect the information that passes through its service and to use it only to deliver our website to you.

Some helper features on our site use Anthropic's Claude AI, for example to draft lesson ideas or summaries for staff. When a feature uses AI, only the information needed for that task is sent, and it is used to produce the result you asked for.

Anthropic is bound to protect that information and does not use it to train its AI models. We do not send children's personal records to AI features as part of everyday care.

We use an email service to send notifications, such as enrollment updates, tour confirmations, and messages from the center. This provider handles the email address and message needed to deliver those notes to you.

Our email provider is bound to protect that information and to use it only to deliver the messages we send on your behalf. We do not use it for outside advertising.

Every company listed here works under an agreement that requires it to protect your information and to process it only to provide its service to us. None of them may use your family's data for their own marketing, and none may share it with outside parties for advertising.

We review the providers we use and keep the list as small as the center's needs allow.

The records and files we hold are stored on servers located in the United States. Your family's information is not moved overseas as part of our normal operations.

We never sell your family's information, and we never share it with data brokers or advertisers. We also do not use your data, or your child's data, to train AI models.

Your information is here to help us care for your child and communicate with you, and nothing more.