BoostPlus Privacy Policy

1. Information We Collect

We collect the following types of information when you use BoostPlus:

• Parent/Guardian information: Full name, email address, and encrypted password
• Child information: Full name, date of birth, age, classroom assignment, and health/developmental information provided during registration
• Activity data: Daily activity logs including meals, naps, diaper changes, mood, and notes recorded by staff
• Device information: Push notification tokens to send you activity alerts

2. How We Use Your Information

We use collected information to:

• Provide parents with real-time updates about their child's daily activities
• Enable daycare staff to record and manage child activity logs
• Send push notifications to parents when activities are logged
• Maintain accurate child developmental and health records for daycare staff
• Improve the BoostPlus application and services

3. Children's Privacy (COPPA Compliance)

If you believe we have inadvertently collected information from a child without parental consent, please contact us immediately at privacy@boostplusacademy.com

4. Data Security

We take data security seriously and implement the following measures:

• Encryption: All data is transmitted using TLS/HTTPS encryption
• Row Level Security: Parents can only access their own child's data — not other families' information
• Authentication: Secure email and password authentication with session management
• Access control: Staff accounts are created only by authorized administrators
• Database security: Data is stored on Supabase's secure, SOC 2 compliant infrastructure

5. Data Sharing

We do not sell, trade, or share your personal information with third parties except:

• Supabase: Our database and authentication provider (supabase.com)
• Expo: Push notification delivery service (expo.dev)
• Legal requirements: If required by law or to protect the safety of children

We never sell your data or your child's data to advertisers or third parties.

6. Data Retention

We retain your account and child data for as long as your child is enrolled at BoostPlus Enrichment Academy. Upon request, we will delete your account and associated data within 30 days. Activity logs may be retained for up to 1 year for operational and safety purposes.

7. Your Rights

You have the right to:

• Access all personal data we hold about you and your child
• Request correction of inaccurate information
• Request deletion of your account and data
• Withdraw consent for data processing
• Export your child's activity data

To exercise these rights, contact us at privacy@boostplusacademy.com

8. Push Notifications

BoostPlus sends push notifications to parents when daycare staff log activities for their child. You can disable push notifications at any time through your iPhone or Android device settings. Disabling notifications does not affect your ability to view activity logs in the app.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by sending a push notification or email. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy, please contact: