Privacy Policy

BrightBadge is committed to protecting the privacy and security of your personal information. This policy explains how we collect, use, and safeguard data when you use our childcare management platform.

• •Account information (name, email, phone number) when you register
• •Child profiles (name, date of birth, classroom, allergies, medical conditions) entered by authorized adults
• •Attendance records including check-in/check-out times and digital signatures
• •Guardian and emergency contact information
• •Payment information processed securely through Stripe (we do not store card numbers)
• •Usage data and app analytics to improve our service

• •Managing child check-in/check-out and ensuring pickup safety
• •Maintaining health and allergy records for childcare providers
• •Sending notifications about attendance, announcements, and account activity
• •Processing subscription billing and payments
• •Improving our platform and user experience
• •Complying with legal obligations and childcare regulations

Children never use BrightBadge directly. All data about children is entered and managed by authorized adults — parents, guardians, and childcare staff. We implement strict access controls so that only authorized personnel at a specific childcare site can view children's information.

• •Children do not create accounts or interact with the app
• •All child data is entered and managed by parents or authorized staff
• •Role-based access controls limit who can view child information
• •Health and medical data is encrypted at rest and in transit

We take data security seriously and employ industry-standard measures to protect your information.

• •Data is hosted on secure, SOC 2 compliant cloud infrastructure (Supabase/AWS)
• •All data is encrypted in transit using TLS 1.2+
• •Sensitive data is encrypted at rest
• •Access is logged and monitored for unauthorized activity
• •Attendance records are retained for 5 years per childcare regulations

You have the following rights regarding your personal data:

• •Access — Request a copy of your personal data
• •Correction — Request corrections to inaccurate data
• •Deletion — Request deletion of your account and associated data
• •Export — Request a portable copy of your data
• •Withdraw consent — Opt out of non-essential data processing

If you have questions about this privacy policy or want to exercise your data rights, contact us at: