Welcome to AlloKoala. We are committed to protecting the personal information of children, their parents/guardians, and our educational staff, in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Data Collection and Purpose

We collect and use the following data exclusively for daycare management purposes:

• Identity: First name, last name, date of birth, address (Optional).
• Health & Development: Allergies, daily activity logs, naps, and meals.
• Media: Photos and videos of children (strictly requiring prior consent).
• Emergency Contacts: To ensure the child's safety.

2. Consent

No personal information is collected or shared without explicit consent from the parent or guardian. This is especially critical for photo sharing and AI data processing. You may revoke consent at any time via your account settings.

3. Artificial Intelligence and Sub-processors

To assist educators in generating daily reports and tagging activities, we may use robust third-party AI providers (e.g., Google, Groq, Cohere, OpenAI).Your data is NEVER utilized or retained to train their AI models. The information is processed ephemerally.

4. Storage, Security, and Retention

Sensitive data (phone numbers, addresses) are encrypted (using AES-256-GCM) at rest. Our media assets are hosted on secure infrastructure.

Retention: If you or your child withdraw from the daycare, after a standard administrative retention period of 30 days, an automated secure deletion system will irrevocably purge all your data, including activity logs and media assets.

5. Individual Access Rights

Under PIPEDA, you are entitled to view, correct, or request deletion of the personal data held regarding you or your child. To exercise these rights, please contact the designated Privacy Officer of your respective daycare facility or our application privacy lead.

Contact: privacy@allokoala.ca