Privacy Policy

Last updated: 18 October 2026

This policy explains how BabyKids (“we”, “us”) collects, uses and protects information in the BabyKids website and mobile app (iOS and Android). The app is used by the centre’s administrators, teachers and by parents and guardians of enrolled children. We take the privacy of children very seriously.

1. Who can use the app

Accounts are created by the centre. We do not allow public sign-up, and we do not knowingly collect information from children themselves. Children never have accounts. Their information is entered by the centre and shown only to the child’s own parents/guardians and to the centre’s staff.

2. Information we collect

• Account information: name, email address, phone number, role (admin, teacher or parent) and an encrypted (hashed) password.
• Child information entered by the centre: name, date of birth, room, allergies and medical notes, doctor’s details, authorised pick-up and emergency contacts, enrolment details and fees.
• Daily care records: attendance and sign-in/out times (including who dropped off and collected the child), meals, naps, nappy/toilet entries, activities, medication, mood and daily summaries, learning and progress notes, and incident/accident reports.
• Photos: pictures that teachers upload to share a child’s day. A photo is shown only to the parents/guardians of the children it is shared with.
• Messages and feedback: messages between parents and the centre, and parents’ feedback on the daily report.
• Billing information: invoices, payments recorded by the centre (amount, date, method and reference). We do not store card numbers.
• Device information for notifications: if you allow notifications, a push-notification token for your device and its platform (iOS or Android).
• Technical data: basic server logs (such as IP address and time of request) kept for security and troubleshooting.

3. How we use information

• To run the centre’s day-to-day care: attendance, daily reports, photos, progress, incidents and communication with families.
• To prepare and send invoices and record payments.
• To send notifications about things that matter to you, such as a new notice, a shared daily report or photo, a message, an incident report or a new invoice.
• To keep the service secure and to prevent misuse.

We do not sell personal information, we do not show advertising, and we do not use analytics or tracking tools in the app.

4. Camera and photo library

The app asks for camera and photo-library access only when a teacher chooses to take or pick a photo to share. You can refuse or withdraw this permission in your device settings; the rest of the app keeps working.

5. Who can see information

• Parents/guardians see only the children linked to their account.
• Teachers see the children and records they need to care for them.
• Administrators manage enrolment, billing, notices and the planner.

6. Service providers

We use the following to deliver the service:

• Web hosting provider that stores the database and uploaded photos on our behalf.
• Expo push notification service (and, through it, Apple Push Notification service and Google Firebase Cloud Messaging) to deliver notifications. These services receive your device’s push token and the notification text (for example “Aarav’s day: your daily report is ready”).

We share information with other parties only if required by law or to protect a child’s safety.

7. Security

Data is sent over encrypted connections (HTTPS). Passwords are stored hashed, sign-in sessions in the mobile app are kept in the device’s secure storage (Keychain/Keystore), and each account can only access the information its role allows. No system is perfectly secure, so please keep your password private and tell us immediately if you think your account has been misused.

8. How long we keep information

We keep records while a child is enrolled and for as long afterwards as needed for the centre’s legal, safety and accounting obligations. The centre may delete or anonymise a child’s records on request, unless we are required to keep them.

9. Your choices and rights

• Ask the centre to show you, correct or delete information about you or your child.
• Turn notifications off in your device settings at any time.
• Delete your account yourself in the app (More → My account → Delete my account) or on the website; see how to delete your account. Your name, email, phone, password and device tokens are removed; records the centre must keep (invoices, incident reports, messages) remain without your name.
• Ask the centre, using the contact details below, to delete your child’s records.

10. Changes to this policy

If we change this policy we will update the date above and, for significant changes, tell families through the app.

11. Contact us

BabyKids
39 Papaya Crescent, Voivoi Industrial, Nadi, Fiji