Privacy notice

Childcare providers who use DCare decide which families, children and parents they enter and why. For that data the provider is the controller and DCare acts on their instructions as a processor. Parents should contact their provider first about their data. For account and website data, such as owner sign-up details, DCare is responsible.

• Account dataNames and email addresses of owners, staff and parents, handled through our authentication provider.
• Childcare recordsFamilies, children with dates of birth, fees, attendance times and the collecting adult, invoices, recorded payments and messages.
• Kiosk credentialsParent PINs and QR tokens used only for check-in.
• Technical dataLogs needed to run and secure the service.

Data is used to provide the service: generating invoices, recording attendance, showing parents their records and delivering messages. We do not sell personal data and do not use childcare records for advertising.

DCare uses Replit hosting, Clerk authentication, Stripe for configured payment processing and Resend for configured email delivery. A complete sub-processor disclosure, including processing locations and applicable agreements, is still to be published.

Owners can export all account data as JSON and CSV. Parents can export their family data from the portal. Requests to correct or delete childcare records should go to the provider, who can edit or delete them in the app.

This notice does not replace the privacy notice each provider must give to families. Using the Europe region does not by itself make a provider compliant with GDPR or national law.