How we protect your center’s data

All production data — databases, the activity and messaging store, photos and documents — is hosted on Microsoft Azure in the West US 2 region, in the United States.

• In transit: every connection to our website, web app and mobile APIs uses HTTPS, served through Cloudflare. Plain HTTP requests are redirected to HTTPS.
• Storage accounts accept HTTPS connections only, with TLS 1.2 as the minimum.
• At rest: Transparent Data Encryption is enabled on our production databases. Azure Storage and Azure Cosmos DB encrypt all stored data at rest.

Production databases keep 30 days of point-in-time restore, so data can be recovered to any moment within the last month.

• Stored in private containers. Public access is disabled at the storage-account level, so no file can be made publicly readable.
• Shared only through signed links that expire — between 15 minutes and an hour, depending on the file type.

• Every request is scoped to your facility. No center can see another center’s data.
• Within your facility, access follows granular role-based permissions, including custom roles you define — so a teacher can see their classroom without reaching billing or staff records.
• Parents see only their own children.
• Children do not have accounts. Child records are entered by your staff and by parents.

• Sign in with Google, Apple or Microsoft, or with email. Registration is protected by Google reCAPTCHA Enterprise against automated sign-ups.
• Application secrets and connection credentials are held in Azure Key Vault, not in code.
• Payments are taken on Stripe’s hosted checkout. Card numbers never pass through or rest on our servers.

When you ask AI search a question, the question and the records it matched are sent to Microsoft’s Azure OpenAI Service to compose the answer. Only records the signed-in person is already permitted to see are included.

Microsoft states that prompts and responses are not available to OpenAI and are not used to train or improve models. Microsoft may retain flagged content for abuse monitoring under its own terms. See Microsoft’s data, privacy and security documentation.

These companies process data on our behalf to run the service:

Google Analytics is used on this marketing website only. It is not used inside the Childcarious app.

You can request an export or deletion of your data at any time. See our Privacy Policy for your rights, or request account deletion.

We have not completed a third-party security audit such as SOC 2. We would rather tell you that than imply otherwise. If your organization requires one, let us know.

If you believe you have found a vulnerability, email [email protected] with the subject “Security”. Please give us a reasonable chance to fix it before disclosing it publicly.