Privacy Policy

Last updated: April 6, 2026

TotoCare ("we," "us," or "our") is committed to protecting the privacy of licensed family daycare providers and the families they serve. This Privacy Policy explains how we collect, use, and protect your information when you use the TotoCare application.

1. Information We Collect

We collect the following types of information:

• Account information: Name, email address, daycare name, license number, and address provided during registration.
• Child and family information: Names, ages, parent/guardian contact information, and authorization type (WCCC, Private, etc.) entered by the provider.
• Attendance records: Sign-in and sign-out times, staff clock-in/out records, and transport logs.
• Incident reports: Documentation of incidents as entered by the provider.
• Payment information: Billing is processed securely through Stripe. We do not store credit card numbers.
• Usage data: App usage patterns to improve the service.

2. How We Use Your Information

• To provide and maintain the TotoCare service.
• To send SMS notifications to authorized parents/guardians via Twilio.
• To generate attendance reports required for DCYF and WCCC compliance.
• To process subscription payments through Stripe.
• To send transactional emails (welcome, billing) via Resend.
• To improve and develop new features.

3. SMS Communications & Consent

How parents/guardians opt in: When a licensed daycare provider enrolls a child in TotoCare, parents and guardians are added as contacts. Parents and guardians provide explicit consent to receive SMS messages by submitting their phone number through the TotoCare web application at app.totocare.app during the child enrollment process. The enrollment form includes the following consent language: "By providing your phone number, you consent to receive SMS notifications from your childcare provider regarding your child's attendance, pickup, and transport status. Message and data rates may apply. Reply STOP to opt out, HELP for help. Message frequency varies."

What messages parents receive: Parents and guardians receive transactional SMS messages from their licensed childcare provider regarding their own child only. Messages include: (1) sign-in confirmation when the child arrives, (2) sign-out confirmation when the child is picked up, and (3) transport status updates when applicable.

Example messages:

• "Hi [Parent], this is [Daycare Name] via TotoCare. [Child] has been signed in at 8:05 AM. Reply STOP to opt out."
• "Hi [Parent], this is [Daycare Name] via TotoCare. [Child] has been signed out at 5:30 PM. Have a great evening! Reply STOP to opt out."
• "Hi [Parent], this is [Daycare Name] via TotoCare. [Child] has been picked up for transport. Reply STOP to opt out."

Opt-out: You can opt out at any time by replying STOP, UNSUBSCRIBE, CANCEL, END, QUIT, or STOPALL to any message. You will receive a one-time confirmation that you have been unsubscribed.

Help: Reply HELP or INFO at any time to receive help. For additional support, email support@totocare.app.

Message frequency: Message frequency varies based on your child's daily attendance — typically 2 to 4 messages per day on attendance days. Standard message and data rates may apply.

Carriers: Carriers are not liable for delayed or undelivered messages.

Phone number sharing: Mobile phone numbers and SMS opt-in data are never shared with third parties or affiliates for marketing or promotional purposes. Phone numbers are used solely to deliver messages from your designated childcare provider via Twilio (our SMS infrastructure provider).

4. Data Sharing

We do not sell your personal information. We share data only with trusted service providers necessary to operate TotoCare:

• Supabase — secure database hosting
• Stripe — payment processing
• Twilio — SMS notifications
• Resend — transactional email
• Vercel — application hosting

5. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), secure authentication via Supabase, and row-level security policies to ensure providers can only access their own data.

6. Data Retention

We retain your data for as long as your account is active. Upon account cancellation, data is retained for 30 days before permanent deletion, unless required by law.

7. Children's Privacy

TotoCare is a tool for licensed childcare providers. Child information entered into the app is managed solely by the provider and is not used for any marketing or third-party purposes.

8. Your Rights

You have the right to access, correct, or delete your personal information at any time. To exercise these rights, contact us at support@totocare.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@totocare.app.