Privacy Policy

Last updated: October 22, 2026

1. Introduction

Welcome to CareLocal (“we,” “our,” or “us”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share and protect information when you use our platform (the “Platform”), which connects centers (“Centers”) with qualified childcare professionals (“Staff”), supports hiring and staff records, publishes optional public center pages, and lets visitors ask a center for a tour. By using the Platform you accept this policy.

Centers decide what they ask Staff to provide and how they use records after they receive them. Once information is shared with a center, that center’s own practices also apply to the copy it holds.

2. Information We Collect

  • A
    Childcare professionals (Staff)Profile details (name, email, phone number, address), experience, credentials and certifications, availability, uploaded documents and photos, a resume, applications and cover notes, job alert preferences, the professional references you list (their name, title, business, email and phone, which you confirm they have agreed to share), and ratings and feedback from the centers you work with.
  • B
    CentersAdministrator name, email and phone, center name, address, phone, email, license number and capacity, programs, team bios and other About information, work areas, subscription and billing details (card details are handled by Stripe; we do not store full card numbers), and the staff records you create: documents, completion and due dates, notes, hours, job postings, applications, interview and offer details and offer letters.
  • C
    Visitors who request a tourYour name, email address, phone number, best time to contact, the tour date and time you pick (or when you are free), your answers to the optional questions (such as preferred start date and topics of interest), any message you write, and the names and dates of birth or due dates of your children.
  • D
    Usage & Device DataLogs of notifications and their delivery status, IP address, browser type, operating system, pages viewed, and a record of who viewed which uploaded document and when.
  • E
    Notification DataYour email address, push notification tokens, and, if you opt in to text messages, your mobile number with a record of when and how you agreed, and any request to stop.

3. How We Use Your Information

  • A
    Shift Matching, Hiring & VerificationLetting centers review and verify Staff credentials before shifts are claimed, process applications, schedule interviews and send offers.
  • B
    Records & Compliance ToolsStoring documents and tracking completion and due dates so centers can manage their childcare records.
  • C
    Public Pages & Tour RequestsShowing the information a center chooses to publish, and delivering tour requests to that center, with confirmation emails to the person who asked.
  • D
    NotificationsSending shift alerts, application and offer updates, document requests, tour updates and administrative messages by email, push notification, in the app and, with your consent, text message.
  • E
    Billing, Security & ImprovementProcessing subscription and fee payments, preventing spam, fraud and abuse (for example by limiting repeated submissions), keeping an access log of document views, fixing problems and improving the Platform.

4. Sharing Your Information

We do not sell your personal information, and we do not share it for advertising. We share information only in these situations:

  • A
    Between Staff and CentersWhen you join a center’s pool, claim a shift or apply for a job, that center’s administrators can see your name, contact details, profile, resume, references and the credentials and documents you choose to share with it. A center can also record ratings and feedback about you, and Staff can rate centers. When an application closes, the center’s access that came from it ends after about 30 days.
  • B
    On public pagesIf a center turns on its public page, it publishes its name, address, programs, team names, titles and bios, open jobs and a short description, and, if it chooses, its phone, email, license number, capacity and an average Care Score with the number of ratings. Team email addresses and individual reviews are never shown. Published jobs and pages can be indexed and cached by search engines.
  • C
    Tour requestsA tour request goes to the center you sent it to and its administrators. We do not share it with other centers or use it for marketing.
  • D
    Service providersWe use providers that process data for us: Supabase (database and sign-in), Vercel (hosting and analytics), Cloudflare (file storage), Stripe (payments), Twilio (text messages and verification), Resend (email), and Google Firebase and browser push services (push notifications). They may use the information only to provide their service to us.
  • E
    Legal and safetyWe may disclose information if the law requires it, or to protect the safety, rights or property of our users, the public or the Platform. If we are involved in a merger or sale, information may transfer under this policy.

5. Security & Data Retention

We use administrative, technical and physical safeguards. Documents are stored privately and opened through short-lived secure links; one-time phone upload links expire after 10 minutes and can only receive a file. Access is limited by role, and views of uploaded documents are logged. No system can be guaranteed completely secure.

We keep your information while your account is active and as needed to provide the Platform and meet legal and record-keeping obligations. Tour requests stay with the center while its account is active unless deleted. You can ask us to delete your information (section 8); we may keep what the law requires us to keep, and centers may keep their own copies of records you shared with them.

6. Children’s Information

The Platform is for adult childcare professionals and center administrators, and for adults who ask a center for a tour. We do not knowingly collect personal information directly from children under 13, and we do not allow children to create accounts. If we learn that a child under 13 has given us personal information directly, we will delete it.

When a parent or guardian requests a tour, they may give a child’s name and date of birth or due date. We collect this only so the center can prepare for the tour, and share it only with that center. We do not use it for advertising or marketing. A parent or guardian can ask us to delete it by contacting us. Please do not include medical or other sensitive details about a child in a tour request.

7. Cookies & Analytics

We use essential cookies to keep you signed in and to protect your session. We use Vercel Web Analytics to understand how pages are used; before analytics data is sent we remove sign-in codes and one-time tokens from page addresses. We do not use advertising or cross-site tracking tools.

8. Your Choices & Rights

You can view, correct or update your profile and documents by signing in. You can leave a center you have joined, withdraw an application, and delete a job alert. A center can turn its public page or its tour button off at any time.

Text messages. We text you only if you agree. Reply STOP to any message to stop, or HELP for help. Stopping texts means you will not get immediate shift offers by text, but you can still receive them in the app, by email and by push notification. You can also unsubscribe from emails using the link in them, or by contacting us.

Depending on where you live, you may have the right to know what we hold about you and to ask us to correct, delete or give you a copy of it. To make a request, contact us below. We may need to verify who you are first.

9. Changes to This Policy

We may update this policy. The date at the top shows when it was last revised. For material changes we will notify you by email or in the Platform.

10. Contact Us

If you have questions, concerns or requests about this Privacy Policy or your data, contact us:

CareLocal Privacy Team
Email: privacy@carelocal.co