Privacy Policy

Providers (daycares) use CarePanda to manage information about the families and children in their care. For that information, the Provider decides what is collected and why, and Little Larks processes it on their behalf. When a Provider belongs to an agency network, the Agency is responsible for how it uses the information it can see for oversight. For account and usage information, Little Larks is responsible.

• Account details: email, name, country, phone (optional) and a hashed password.
• Provider storefront details, including the street name, city and postal code shown publicly. The house number is never shown publicly.
• Children's first names, birth month and year, and allergy notes — never a full date of birth, and never photos of children.
• Daily journal records a Provider logs (attendance, meals, naps, diapers, moods, temperatures, notes, sleep checks), shared only with that child's family.
• Health and safety records: vaccination records (vaccine, dates and status, plus any immunization document a family chooses to upload), incident reports and medication logs a Provider records, and the parent's acknowledgement signature on them.
• Messages, applications, invoices and receipts.
• Care Wanted requests a parent posts: their first name and last initial, city, state or province, child's age, start date and description. These are public (see below).
• Reviews of a Provider, shown publicly on its storefront with the reviewer's display name (first name and last initial).
• Basic technical data such as IP address for security and rate limiting.

• To run CarePanda: show storefronts and the public Care Wanted page, deliver applications and messages, send daily and monthly summaries and vaccination reminders, route applications through agency networks, and process invoices.
• To keep accounts secure and prevent abuse.
• To send service emails. We don't sell personal information or use children's information for advertising.

Families and Providers see each other's information only as needed for an application or enrolment. If a Provider is affiliated with an Agency, the Agency's authorised administrators can see applications to that Provider and have read-only access to its enrolled children's journals, messages and health and safety records for oversight. We use service providers for hosting, email and file storage.

Care Wanted requests are public. While a request is active, anyone can see it on the Care Wanted page without signing in, and search engines such as Google may index it and show it in search results. Only the parent's first name and last initial, city, state or province, child's age, start date and description are shown — never their full last name, email, phone number or address. Please don't put details you wouldn't want public in the description. Daycares that message a parent about a request see only the parent's first name in that private conversation.

We may disclose information where required by law.

Data is encrypted in transit. Vaccination records, incident reports and medication logs are stored securely in our access-controlled database and are visible only to the child's family, their Provider and, for agency-affiliated Providers, the Agency's authorised administrators. Signed incident reports and medication logs can't be altered afterwards. Uploaded documents such as immunization records are kept in private storage and served only to authorised users, with downloads logged. Some service providers may store data outside Canada.

You can access and update your information in the app, and ask us for a copy or deletion of your data, subject to records a Provider must keep. Marking a Care Wanted request as fulfilled removes it from the public page right away; search engines may take some time to drop copies they have already indexed. Depending on where you live (for example under PIPEDA or applicable US state laws), you may have further rights.

CarePanda accounts are for adults. Information about children is entered by their parent or their Provider and is used only to provide care-related features.

We'll post any changes to this policy here and tell you about material changes.