This app is a record-keeping tool for licensed child-care facilities. It holds information about children, so we have written this policy to say plainly what is collected, who can see it, where it is stored, and how to have it removed.
Two parties are involved, and they have different roles under Canadian privacy law:
| Category | Examples | Who enters it |
|---|---|---|
| Account | Name, email address, role | Facility administrator |
| Child profile | Name, date of birth, room, allergy, dietary and medical notes, comfort notes, authorised pickup people | Facility staff |
| Daily activity | Meals, naps, diaper changes, photos, status, timestamps | Teachers |
| Attendance | Check-in, check-out and absence events, timestamps, handwritten signatures | Teachers and the signing guardian |
| Health | Illness and symptom observations, temperature, incident reports, medication and care schedules | Teachers and parents |
| Messages | Parent↔teacher message text and timestamps | Users |
| Device | Push notification token, if you allow notifications | Automatic |
The app does not collect payment card details, government identification numbers, precise location, contacts, or advertising identifiers. There is no analytics or advertising software in the app.
When a signature is captured at drop-off or pick-up, the app stores the path your finger travelled as a list of coordinates — not a scanned image — along with the time and, optionally, the signer's name.
Access is enforced by the database itself, not merely hidden in the app screens. Every table holding information about a child carries row-level security rules that are applied to every request, so a request for someone else's records returns nothing even if the app were modified or bypassed.
Photos are kept in private storage, not at public web addresses. Each photo is filed under the child it belongs to, and can be read only by that child's parents or guardians, that child's assigned teachers, and administrators. The app displays photos using links that expire after about an hour.
A child-care owner can set up a new facility from the sign-in page. Nobody can join an existing facility on their own: every staff and parent account is created by that facility's administrator. Passwords must be at least eight characters with upper and lower case letters and a digit. Accounts may optionally enable two-step sign-in with an authenticator app; when enabled, records about children cannot be reached without the second step.
Information is held in a hosted PostgreSQL database and file storage operated by Supabase, in a Canadian region. Connections are encrypted in transit. Sign-in tokens are held on your device in the operating system's secure storage (iOS Keychain or Android Keystore).
If you allow notifications, the app stores a device token so it can notify you about arrivals, departures and incident reports. Routine updates such as meals and naps are gathered into one end-of-day summary rather than sent individually, and you can change which types you receive in the app. Your token is deleted when you sign out.
Notifications are not a safety system. Some phones silently block them. In an emergency your facility will telephone you.
The app can send a group story — one post about several children — to those children's families. Because that means one family may see a photo containing another family's child, a child is never included unless a guardian or administrator has switched on photo sharing for that child. The default is off, and the restriction is enforced by the database rather than by the screen, so it cannot be worked around in the app. You can withdraw that permission at any time, and it takes effect immediately for anything sent afterwards.
Records are kept for as long as the child is enrolled and for the period afterwards that child-care law sets: in Saskatchewan, the Licensee's Manual sets 6 years after a child leaves for attendance records. When a facility closes, the records it must keep are kept for at least 6 years, longer where the law requires it, and then deleted. Photographs are kept for as long as the record that refers to them.
To see or correct your information, contact your facility.
To delete your account, open Get help in the app and tap Delete my account; a facility's owner can also close the whole facility there. Nothing happens for 7 days, so you can change your mind. Your login and the information that is only yours are then erased; records that child-care law requires the facility to keep stay until their keeping period ends. Full details, including what to do if you cannot sign in: Delete your account.
This app is for use by child-care staff and by parents and guardians. It is not directed at children and children do not hold accounts. A child's records are entered by authorised staff under the consent your facility obtains from you at enrolment.
If personal information is exposed, we tell your facility without undue delay. Where there is a real risk of significant harm, the Office of the Privacy Commissioner of Canada and the affected families must be told what happened, what information was involved, and what is being done; your facility is responsible for that, and we help it, or do it for the facility if it asks us to. A record of every such incident is kept for at least 24 months, as PIPEDA requires.
If this policy changes in a way that materially affects you, your facility will be told so that it can inform families. The effective date at the top of this page always reflects the current version.
For your own or your child's information — access, correction, deletion, or questions about consent — contact your child-care facility directly. They hold the enrolment record and the consent you gave.
For questions about the app itself, or about how the provider handles personal information, contact the Privacy Officer, Nyxura AI Solutions Inc., at noreply@regina-montessori.com.