Draft in plain language. It has not been reviewed by a lawyer and must be before real families use the service.

Privacy

Nookwell is used by childcare programs to run their day. The program decides what to collect. We keep it safe and use it only to provide the service.

What we hold

• Children: name, birth date, allergies and notes the program chooses to add, room, attendance, daily reports, photos if the program uses them.
• Families: parent or guardian name, email, who may pick up.
• Staff: name, email, shifts.
• Billing: invoices and payment status. Card and bank details are handled by Stripe.
• We do not ask for Social Security numbers, ID documents or medical records.

Who sees it

• A parent sees only their own child.
• Teachers see the children in their program. Directors also see billing and the activity log.
• Every view and change to a child record is logged, and the director can read that log.
• We do not show ads. We never sell or share children's or families' data.

Companies that process data for us

• Supabase: database, sign-in, and file storage
• Vercel: hosting
• Stripe: payments (card and bank details go to Stripe, never to us) and our own subscription billing
• Resend: sending email

Your choices

• A program can export all of its data at any time and delete a child's records.
• A parent can ask the program to delete their child's records. Programs may have to keep some records under licensing or tax rules, so some billing records may remain without any child's name.
• Cancelling takes one click and nothing is deleted.

Open questions for a lawyer

Children's privacy law (COPPA and California rules), consent wording, how long licensing requires records to be kept, and who is the data controller (the program or us).