Privacy Policy

This policy applies to the KidSlots website, the KidSlots mobile app, and the emails and messages we send you. It covers parents and guardians who book care, childcare providers who offer it, and the children whose care is being arranged.

Children do not have KidSlots accounts. Information about a child reaches us because a parent or guardian enters it, or because a provider the family has booked with records something about the care they gave.

Your account. Your name, email address, phone number and postal address. We geocode the address you enter so that nearby providers can be found; the coordinates are stored alongside it. Providers additionally give us a business name, business address and the childcare license number issued to them by their state.

Information about your child. First and last name, date of birth, allergies, medical notes, care notes and instructions, emergency and authorized pickup contacts, enrollment and immunization documents you upload, attendance records, and photographs taken by your provider or uploaded by you.

Bookings and payments. The bookings you make, invoices, receipts, refunds and payout records. Card and bank details are entered directly into our payment processor, Stripe, and are held by Stripe — KidSlots stores identifiers issued by Stripe and the last four digits and brand of a saved method, not full card or account numbers.

What you send through the platform.Messages between you and your provider, enrollment requests, forms you complete, reviews you write, and photos and posts shared to your child's feed.

Technical information. Log records of requests to our servers, the device and browser you use, and — if you turn notifications on — a push token for your device. We use functional cookies to keep you signed in. We do not use advertising cookies or third-party ad trackers.

• To create and operate your account and keep you signed in securely.
• To make and manage bookings: showing a provider the child they are being asked to care for, and showing you the care that was given.
• To carry out safety-critical parts of childcare — allergies, medical notes, authorized pickup — which exist so that the adult caring for your child knows them.
• To take payment, issue invoices and receipts, pay providers, and handle refunds.
• To send you service messages you have asked for: booking confirmations, reminders, payment receipts and account notices.
• To keep the platform working and secure — diagnosing faults, preventing abuse, and enforcing our Terms of Service.
• To meet legal, tax and recordkeeping obligations.

Marketing emails are off unless you turn them on, and every one of them carries an unsubscribe link that works without signing in.

This is the part of the policy most parents are here for, so it is stated separately.

• What we hold:your child's name, date of birth, allergies, medical and care notes, documents you upload, attendance records, and photographs.
• Who can see it:you; any co-parent or guardian you have granted access to; and the childcare providers your child is booked or enrolled with. A provider you have never booked with cannot see your child. Removing a co-parent's access removes their ability to see or act for your child from that moment.
• What we never do with it: we do not sell it, we do not use it for advertising or to build advertising profiles, and we do not disclose it to anyone outside the list above except where this policy says so.
• Photographs: photos of your child are visible to you, to co-parents you have authorized, and to the provider who took or received them. They are not public.
• Your control:you can correct your child's details at any time, and you can ask us to delete your child's record — see “Your choices” below.

Your provider. When you book or enroll, the provider receives what they need to care for your child: their name, date of birth, allergies, medical and care notes, your contact details and your authorized pickup contacts.

Service providers who work on our behalf. They may use the information only to provide their service to us:

• Stripe — payments, saved payment methods, provider subscriptions and payouts.
• Amazon Web Services — hosting, file and photo storage, transactional email and SMS.
• Google Maps Platform — turning the address you type into a verified address and coordinates.
• Electronic form and signature services — enrollment paperwork you complete and sign.

When the law requires it. We may disclose information to comply with a law, regulation, subpoena or court order, to cooperate with a child-protection or licensing authority, or where we believe in good faith that disclosure is necessary to prevent harm to a child or another person.

If the business changes hands. If KidSlots is acquired or merged, the information may transfer as part of that transaction; it stays subject to this policy until you are told otherwise.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We keep your account information for as long as your account is open. Booking, invoice, payment and attendance records are kept while the account is open and afterwards for as long as tax, accounting and childcare licensing rules require — providers are subject to state recordkeeping obligations that outlive an account.

When you ask us to delete a child's record, we remove it from the platform. Where a record must be retained for legal or licensing reasons, we retain only that record and only for as long as required.

Traffic between your device and KidSlots is encrypted in transit. Passwords are stored only as one-way hashes and cannot be read by us. Access to a child's record is enforced per request: every request is checked against the set of children the caller is actually linked to. Uploaded documents and photos are stored in access-controlled storage and served through links that expire.

No system is perfectly secure. If a breach affects your information, we will notify you and the relevant authorities as required by law.

• See and correct.Your profile, your children's details and your booking history are visible and editable in the app.
• Delete. Email support@kidslots.comto ask us to delete your account or a child's record. We will confirm what was deleted and what had to be retained.
• Copies. Ask us for a copy of the information we hold about you and your children.
• Messages. Notification preferences are in your settings; marketing emails also carry an unsubscribe link.
• Co-parent access.You can revoke another parent's access to your child at any time from your family settings.

Depending on where you live — including California, Colorado, Connecticut, Virginia and other states with consumer privacy laws — you may have rights to access, correct, delete, or obtain a portable copy of your personal information, and to be free from discrimination for exercising them. Contact us at the address above to exercise any of these rights. If we cannot verify that a request comes from you, we will say so rather than act on it.

If we change this policy we will publish the new text here with a new version date. When a change materially affects how we handle information about you or your child, we will tell you before it takes effect and, where the law requires it, ask you to accept the new version. We record which version of this policy you accepted and when.

Email support@kidslots.com with any question about this policy, about the information we hold, or to exercise any right described above.