Privacy Policy | Poppins On-Demand Childcare

Who we are

Poppins On-Demand Childcare, LLC is a Utah company based in Lehi, Utah. We provide booking, scheduling, and communication tools for families using our childcare services. When this policy says "we," "us," or "Poppins," we mean Poppins On-Demand Childcare, LLC. When we say "you," we mean the parent or guardian using our services.

Information we collect

From parents and guardians, directly. When you create an account, book care, or message us, we collect your name, email address, phone number, home address, billing information (handled by Wix Payments, see below), emergency contacts, and any preferences or notes you choose to share. We also collect the content of messages you send us through the app.

About your children, from you. To provide care safely, we collect information you give us about each child you book for: name, date of birth, allergies, medical notes, dietary restrictions, photo for caregiver identification, pickup authorizations, and any care instructions you share. We do not collect information directly from children. Parents and guardians provide everything we hold about a child.

Photos and videos taken during care. Caregivers may take photos or short videos of your child during a booking and send them to you through the app so you can see how things are going. These images are shared only with the parent or guardian on the booking and are stored on our systems. We do not use them for marketing, public posting, or any other purpose without your separate written permission.

Automatically, when you use the app or website. Device type, operating system version, app version, IP address, app crash logs, approximate location (derived from IP), and how you interact with the app (screens viewed, features used, taps). We use Google Firebase for analytics and crash reporting; Firebase collects this on our behalf.

From Wix. Our app and website run on Wix infrastructure. Wix processes some account and usage data on our behalf as our service provider.

Text messaging (SMS). If you opt in to text messages from Poppins, we send automated SMS about your child's visits and replies from our team. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to cancel at any time. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text-message services.

How we use your information

We use what we collect to:

Run the service: create your account, schedule bookings, match you with caregivers, send confirmations and reminders, and process payments.
Care for your child safely: give caregivers the information they need (allergies, medical notes, emergency contacts, pickup authorizations).
Communicate with you: respond to messages, send booking-related push notifications and emails, and send service updates. You can turn off push notifications in your device settings at any time.
Improve the app and site: understand which features and pages are used, and find and fix crashes and bugs. We use PostHog for product analytics, Sentry for crash and error reports, and Google Firebase.
Protect everyone: prevent fraud, enforce our terms, and comply with the law.

We do not sell your personal data, and we do not share it with data brokers. We do use some of it for advertising: see Targeted advertising and your choices below for exactly what we share with Meta, and how to stop it.

Who we share information with

We share information only with parties that need it to help us run the service, and only for the purposes described here:

Caregivers booked for your child. They receive your child's name, age, care notes, allergies, pickup details, and your contact information for the booking.
Wix. Hosts our booking system, member accounts, and content. Wix's handling of that data is governed by Wix's own privacy policy.
Stripe. Processes card payments. Your card details go directly to Stripe; we never see or store full card numbers.
Supabase. Our main database. It holds parent accounts, children's profiles, bookings, and emergency contacts.
Meta (Facebook and Instagram). Receives browsing and booking activity from our website and app, and a hashed copy of your email address and phone number when you complete a booking, so we can measure and target our advertising. This is described in full under Targeted advertising and your choices below, including how to opt out. We never send Meta any information about your children.
PostHog. Product analytics — which pages and features get used.
Sentry. Crash and error reports from the app and website.
Google (Firebase). Crash and usage analytics, used to keep the app working.
Apple and Google. When you download the app, the app stores collect information governed by Apple's and Google's own privacy policies.
Service providers we rely on for email, SMS, customer support, and similar functions. Each is bound by contract to use your information only to provide services to us.
Law enforcement or regulators when required by law, court order, or to protect someone's safety.
A buyer or successor if Poppins is sold, merged, or reorganized. We'll notify you if your data moves to a new owner.

We require any third party that handles your data to protect it at the same level we do.

Targeted advertising and your choices

We advertise Poppins on Facebook and Instagram, and we use information about how people use our site and app to make that advertising work. Here is exactly what that involves, and how to stop it.

What Meta receives:

Browsing and booking activity from our website and app, collected by the Meta pixel: pages viewed, when a booking is started, and when one is completed.
When you complete a booking, our servers send Meta a matching record that includes your email address and phone number in hashed (SHA-256) form. Hashing scrambles the values so they cannot be read directly, but they are still personal information, and Meta can match them to an account someone already has.
Meta uses this to tell us whether our ads worked, and to build audiences of people who resemble our customers, which we then advertise to.

Nothing about your children is ever part of this. Children's names, ages, care notes, allergies, and photos are never sent to Meta and are never used for advertising.

To opt out, email info@poppinschildcare.com from the address on your account and ask to opt out of advertising. We will stop sending your booking events to Meta and remove you from our advertising audiences within 15 days. Opting out changes nothing about your bookings, your account, or the messages we send you about care.

You can also limit this yourself, whether or not you contact us: adjust your ad preferences in Facebook or Instagram settings, turn off app tracking on your device (on iPhone, Settings then Privacy & Security then Tracking), or use a browser that blocks tracking scripts.

Children's information

We take children's data seriously. A few things to know:

We do not knowingly collect information directly from children. The app is for parents and guardians, age 18 and over.
Information we hold about children comes from the parent or guardian who creates the account and makes bookings.
We use children's information only to deliver care and communicate with the parent. We do not use it for advertising or share it for advertising.
Photos and videos of your child are shared only with you, retained only as long as needed for care records and your own access in the app, and deleted on request.
If you believe a child has used the app without parental involvement, email info@poppinschildcare.com and we'll delete the account and associated data.

How long we keep information

We keep account and booking information while your account is active and for up to seven years after closure to meet tax, insurance, and legal record-keeping obligations Utah childcare providers are subject to. Photos and videos sent during care are retained for 12 months by default, or you can request earlier deletion. Crash and analytics data is retained per Google Firebase's defaults (up to 14 months for most data types). When data is no longer needed, we delete or anonymize it.

Your choices and your rights

You can review and update most of your information directly in the app under your account settings. You can also:

Request a copy of the personal data we hold about you.
Request deletion of your account and the data tied to it. Some records may be retained where the law requires (for example, financial records).
Request correction of inaccurate information.
Withdraw consent for photos and videos at any time.
Turn off push notifications in your device settings.
Delete your account entirely from within the app, or by emailing us.

To make any of these requests, email info@poppinschildcare.com from the email address on your account. We'll respond within 45 days. If we can't fulfill a request, we'll explain why.

Utah residents: The Utah Consumer Privacy Act gives Utah consumers specific rights, including the right to know what personal data we process, to access and obtain a copy of it, to delete it, and to opt out of targeted advertising. We do process personal information for targeted advertising, as described in Targeted advertising and your choices, and you can opt out at any time by emailing us. We do not sell personal data. You can exercise any of these rights using the contact information above.

How we protect information

We use industry-standard safeguards: encryption in transit (HTTPS/TLS), encrypted storage, access controls limiting employee and caregiver access to what's needed for their role, and background checks for caregivers. No system is perfectly secure, but we work to reduce risks and respond quickly if something goes wrong. If a breach affects your information, we'll notify you and the relevant authorities as the law requires.

App store information

Our app is distributed through the Apple App Store and Google Play. Apple and Google collect their own information when you download or use the app, governed by their privacy policies. The data we declare in our App Store privacy nutrition label and our Google Play Data Safety form is consistent with this policy.

Changes to this policy

We'll update this page when our practices change. The "Last updated" date at the top will tell you when. For material changes, we'll notify you in the app or by email before the changes take effect.

Contact us

Poppins On-Demand Childcare, LLC Lehi, Utah info@poppinschildcare.com

For privacy requests, please use the email above and put "Privacy Request" in the subject line.