Privacy Policy

Last updated: April 6, 2026

TotoCare ("we," "us," or "our") is committed to protecting the privacy of licensed family daycare providers and the families they serve. This Privacy Policy explains how we collect, use, and protect your information when you use the TotoCare application.

1. Information We Collect

We collect the following types of information:

Account information: Name, email address, daycare name, license number, and address provided during registration.
Child and family information: Names, ages, parent/guardian contact information, and authorization type (WCCC, Private, etc.) entered by the provider.
Attendance records: Sign-in and sign-out times, staff clock-in/out records, and transport logs.
Incident reports: Documentation of incidents as entered by the provider.
Payment information: Billing is processed securely through Stripe. We do not store credit card numbers.
Usage data: App usage patterns to improve the service.

2. How We Use Your Information

To provide and maintain the TotoCare service.
To send SMS notifications to authorized parents/guardians via Twilio.
To generate attendance reports required for DCYF and WCCC compliance.
To process subscription payments through Stripe.
To send transactional emails (welcome, billing) via Resend.
To improve and develop new features.

3. SMS Communications

TotoCare uses Twilio to send SMS notifications to parents and guardians regarding child attendance and transportation. Message frequency varies. Standard message and data rates may apply. You can opt out at any time by replying STOP to any message.

4. Data Sharing

We do not sell your personal information. We share data only with trusted service providers necessary to operate TotoCare:

Supabase — secure database hosting
Stripe — payment processing
Twilio — SMS notifications
Resend — transactional email
Vercel — application hosting

5. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), secure authentication via Supabase, and row-level security policies to ensure providers can only access their own data.

6. Data Retention

We retain your data for as long as your account is active. Upon account cancellation, data is retained for 30 days before permanent deletion, unless required by law.

7. Children's Privacy

TotoCare is a tool for licensed childcare providers. Child information entered into the app is managed solely by the provider and is not used for any marketing or third-party purposes.

8. Your Rights

You have the right to access, correct, or delete your personal information at any time. To exercise these rights, contact us at support@totocare.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@totocare.app.