Privacy Policy

1. Who we are

Carewix ("Carewix," "we," "us") provides childcare management software to licensed childcare centers in Canada. This policy explains what personal information we collect, why we collect it, and the rights you have over it, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. What we collect

Depending on your role, we collect:

• Account information — name, email, role, and the center(s) you're associated with.
• Child and family information, entered by a center on behalf of enrolled families — name, date of birth, emergency contacts, authorized pickup persons, allergy and medical information, attendance records, and daily activity logs.
• Billing information — tuition and invoice records. Payment card details are processed by our payment provider and are never stored directly on Carewix servers.
• Usage data — log-in activity and general product usage, used to maintain and improve the service.

3. Why we collect it

We collect and use personal information only to operate the service a childcare center has signed up for: enrollment, attendance tracking, billing, staff scheduling, and parent–center communication. We do not sell personal information, and we do not use children's information for advertising or any purpose unrelated to delivering the service.

4. Who we share it with

We use a small number of subprocessors to run Carewix, each bound by their own data protection obligations:

• Supabase — database hosting and authentication.
• Resend — transactional email delivery (account confirmation, notifications).

We do not share personal information with third parties for their own marketing purposes. A childcare center using Carewix remains the data controller for the family and child information it enters; Carewix acts as a processor on the center's behalf.

5. Where data is stored

Carewix's primary database is hosted in Canada. Some subprocessors may process limited data outside Canada as part of delivering their service (for example, email delivery infrastructure); where this occurs, we take steps to ensure an equivalent level of protection.

6. Your rights

You may request access to, correction of, or deletion of your personal information at any time. For a center's families, most requests should go through the center directly, since they control the underlying data; Carewix will support the center in fulfilling that request. To make a request directly to Carewix, contact support@carewix.com.

7. Data retention

We retain personal information for as long as a center's account is active, plus any additional period required to meet legal, regulatory, or licensing recordkeeping obligations. Centers can request deletion of their data upon closing their account, subject to those obligations.

8. Security

We use encryption in transit and at rest, and role-based access controls so that a user only ever sees data relevant to their role and location. See our Security page for more detail.

9. Breach notification

In the event of a breach of security safeguards involving personal information under our control that poses a real risk of significant harm, we will notify affected individuals and, where required, the Office of the Privacy Commissioner of Canada, in accordance with PIPEDA.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to center Owners by email.

11. Contact us

Questions about this policy or your data can be sent to support@carewix.com.