Privacy Policy

Our commitment

Nestlings handles information about children — we treat that responsibility seriously. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We collect only what the service needs, we never sell personal information, and we never use children's data for advertising.

What we collect

• Account data — name, email, and password (or Google sign-in for parents).
• Program data — entered by childcare providers: child profiles, attendance, daily activity records, photos, menus, plans, and invoices.
• Messages — conversations between providers and families.
• Device data — a push notification token, if you enable notifications.

Who can see what

Access is enforced at the database level with row-level security. Staff see only their own program. Parents see only their own children's records and the program's shared content (menus, calendar, published lesson plans). Photos are stored privately and served through expiring signed links. Providers control what is visible to families on every record.

Where data lives

Data is hosted on Supabase infrastructure. Payment card details never touch our servers — card payments are processed by Stripe. We retain program records for as long as the provider maintains their account.

Your rights

You may access, correct, or delete your personal information. Parents and staff can delete their account directly in the app (Settings → Delete my account), which erases their personal data and unlinks them from all records. Records about children belong to the childcare provider, who is responsible for their retention policy. For questions or complaints, contact privacy@nestlingsapp.ca. You may also contact the Office of the Privacy Commissioner of Canada.

Children's privacy

Children never use Nestlings directly and have no accounts. Information about children is entered and controlled by their childcare provider with the consent of parents or guardians as required by their licensing obligations.