naptime.pro

Privacy Policy

Last updated October 21, 2026

Naptime.pro helps child care providers run sign-ins, photos, forms, licensing records, and payments, and helps families stay close to their child's day. This policy explains what information the app holds, why, who can see it, how long it stays, and the choices you have. It covers every role that uses the app.

1. Who this policy covers

Naptime.pro is the software child care programs use to run their day: sign-ins and sign-outs, photos, forms and signatures, compliance records, messages, and payments. In this policy, "we" and "us" mean Naptime.pro, the company that operates this app, and "you" means whoever is reading it — a provider, a staff member, a parent or guardian, an authorized pickup person, or someone applying for care.

The child care program you belong to ("the provider") decides what goes into their program: children's records, schedules, health notes, photos, and billing. That makes your provider responsible for the information about you and your child, and we store and process it for them on their instructions. If you want something reviewed, corrected, or deleted, start with your provider.

2. Children's information

We collect information about a child only when the child's provider enters it. That includes name, birth date, room and schedule, guardians and authorized pickup people, allergies and health notes, medication authorizations and doses given, incident reports, attendance and hours, photos the child is tagged in, and signed forms. Some of this is sensitive health information, and it is collected so the provider can care for the child safely and meet licensing duties.

We do not sell children's information. We do not use it for advertising, we do not build advertising profiles, we do not use it to train public AI models, and we do not share it with data brokers. We do not knowingly collect information directly from a child — everything comes from the provider or the child's guardian.

United States federal law (the Children's Online Privacy Protection Act, or COPPA) treats this as children's personal information. The provider is responsible for obtaining verifiable permission from a parent or guardian before entering a child's information and before sharing photos. If you are a parent and believe your child's information was added without your permission, contact your provider and then us.

3. What we collect

Information you and your program give us:

  • Account details: your name, email address, phone number, role, and sign-in credentials.
  • Program details: program name, license number, address, hours, capacity, staff-to-child ratios, rooms, rates, and billing settings.
  • Child and family records: names, birth dates, guardians and contact details, authorized pickup people, schedules, allergies, medical notes, and room assignments.
  • Daily operations: attendance and hours, meals served and food program counts, bottles and first foods, daily reports, photos and videos shared with families.
  • Compliance records: emergency drills, incident and injury reports, medication authorizations and dose logs, certifications, and uploaded documents such as immunization records, physicals, CPR cards, and background checks.
  • Signed forms: the form itself, the signature image, the typed name, the timestamp, and the technical audit details described in section 6.
  • Billing: invoices, line items, subsidy records, amounts, dates, and payment methods. We do not store full payment card numbers — card payments are handled by our payment processor.

4. Technical information and cookies

When you use the app we receive technical information such as your device and browser type, IP address, and security and error logs. We use it to keep the app working, to keep it secure, and to fix problems.

We use the minimum storage needed to run the app: a session cookie to keep you signed in, and your device settings for light or dark mode and your language choice. We do not use third-party advertising cookies or cross-site trackers in this app.

5. Photos and media

A photo is shared only with the family of the child the photo is tagged to and with staff of the program. Photos are not public, are not posted anywhere else by us, and are not indexed by search engines. We do not run facial recognition and do not try to identify children in photos.

Providers are responsible for obtaining a parent's permission before sharing photos and for following their state's rules about photography of children in care. Uploaded files are stored privately rather than on public links, and they are served through signed links that expire.

6. Signed records and electronic signatures

When a parent, staff member, or provider signs a form in the app, we record the signature image, the typed name, the email address or phone number used, the date and time, and technical details such as the IP address and device. That record is stored with the form so the signature can be verified later. This is what makes an electronic signature trustworthy as proof of who agreed to what, and when.

By signing in the app, you agree that your electronic signature has the same legal effect as a handwritten signature, under the federal Electronic Signatures in Global and National Commerce Act (E-SIGN) and the Uniform Electronic Transactions Act (UETA) as adopted in your state, and you consent to receive and sign these records electronically.

Providers are responsible for keeping the signed records their licensing rules require and for giving families a copy on request; the inspection packet and per-form download features produce printable copies. Signed records and medication logs are not deleted through the app — a correction is added as a new entry with an audit trail, so the record stays complete for a licensing visit.

7. How we use information

We use information to run the account and its features, to send what the provider asks us to send (daily reports, reminders, invoices, and forms), to support providers and answer questions, to keep the app secure and prevent abuse, to fix and improve the software, and to meet our own legal, tax, and billing duties.

We do not sell, rent, or trade personal information, and we do not share it for cross-context behavioral advertising (including what California law calls "sharing"). We use aggregated, de-identified statistics — never a child's record — to understand how the app is used.

8. Who we share information with

Hosting and service providers that operate the app for us, including cloud hosting and database, email and text-message delivery, and payment processing (Stripe). They may use the information only to provide those services to us.

Your provider, who controls the program's records.

People with the right access inside the app: a guardian sees only their own family's records, an authorized pickup person sees only the children they are authorized to pick up, staff see the children in the rooms assigned to them, and billing information is limited to the provider and the family it belongs to.

When the law requires it, in response to valid legal process, or where necessary to protect a child or someone's safety. Providers have their own legal duties to report suspected abuse or neglect and to cooperate with licensing; those duties are the provider's to meet.

If the app changes hands (for example, in a merger or sale), with notice to providers.

9. How we keep information safe

Traffic between your device and the app is encrypted in transit, and data is stored with hosting providers that encrypt it at rest.

Uploaded files — photos, signed forms, certificates, and documents — are stored privately, never on public web links, and are delivered through signed links that expire.

Access is controlled at the database level, per role and per program: a family only reaches its own records, staff only the children in their rooms, pickup people only the children authorized to them, and billing only the provider.

Passwords are handled by our authentication provider and are never visible to us, and staff access can be switched off by the provider at any time.

No system is perfectly secure. If we learn of a security incident affecting your information, we will notify the affected providers and follow applicable breach-notification law.

10. How long we keep information

Records stay in the app while the provider's account is active, because licensing, insurance, and tax rules may require a provider to keep them for years. When a provider asks us to delete a child's or family's records, or closes their account, we delete or de-identify them, except where we must keep records for billing, fraud prevention, or legal reasons, or where the provider chooses to export them first.

Because your provider controls the record, ask the provider if you want a copy of your family's records or want them deleted.

11. Your choices and rights

You can see, and often correct, your own information in the app — for example your contact details, your pickup list, and your notification settings — or ask your provider to correct something you cannot change yourself.

Depending on where you live, you may have extra rights. California residents have rights under the CCPA/CPRA; Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states have similar laws. These can include the right to know what we hold about you, to get a copy, to correct it, to delete it, to opt out of sale or sharing for advertising (we do neither), and not to be discriminated against for asking. You can ask through your provider or contact us; we will verify the request and answer within the time the law allows.

Parents and guardians: you may review your child's information, ask for it to be corrected or deleted, and refuse further collection. Your provider's legal retention duties may limit what can be deleted; start with your provider and we will help them.

12. Where information is stored

The app and its data are hosted in the United States. If you use the app from outside the United States, you are sending your information to the United States.

13. Children using the app directly

The app is built for adults — providers, staff, guardians, and authorized pickup people. Children are not meant to use it or hold their own accounts, and we do not knowingly collect information directly from a child. If we learn that a child created an account directly, we will delete it and ask the provider to correct the record.

14. Changes to this policy

If we make a meaningful change, we will update the date at the top of this page and tell providers in the app. If you keep using the app after a change, the updated policy applies.

15. Text messages (SMS)

If a parent or guardian opts in to urgent text notices, we hold their mobile number and a record of the consent: the wording they agreed to, when they agreed, and technical details such as the IP address and device. That record exists so we can show the provider, a carrier, or a regulator that the person opted in.

We do not sell or share your SMS opt-in data — your mobile number and your consent — with third parties or affiliates for marketing or promotional purposes.

The number and the consent are used only to send the urgent notices the person asked for and to honor STOP and HELP requests. Texts are delivered through our messaging provider (Twilio), which processes the number only to carry the message. Anyone can opt out at any time by replying STOP, or in their notification settings, and we keep a record of the withdrawal so no further texts are sent.

16. Contact and complaints

For questions, requests, or complaints about privacy, reach the Naptime.pro team from your account in the app, or ask your child care provider — they hold your family's records and can usually act fastest. You also have the right to complain to your state's Attorney General or the Federal Trade Commission.

A note for providers

This policy describes how the software handles information. It is not legal advice. Child care records, children's privacy (COPPA), photography permission, and record retention rules differ by state, and your licensing agency is the authority that applies to you. Please have your own attorney review this page and your own family documents against the rules for your state, and add your business name, address, and contact details before you publish.