Privacy Policy

Face2Name plays two roles depending on the data involved:

• As a data controller — for account and billing information about the childcare organizations and their staff who use the Service.
• As a data processor — for information about children and their authorized contacts, which is uploaded and controlled by the childcare organization (our customer). The organization is the controller of that data and is responsible for obtaining all legally required parental or guardian consent.

Account & organization data. Names, email addresses, roles, organization name, address, and childcare license number provided during signup and administration.

Children’s data (processed for organizations). Child names, dates of birth, profile photos, room/class assignments, authorized pickup/contact names, consent records, and uploaded consent documents.

Operational data. Transition and verification records, attendance/roster changes, and audit logs of sensitive actions.

Billing data. Subscription status and payment metadata. Card details are handled directly by our payment processor (Stripe); we do not store full card numbers.

Technical data. Device, app version, log, and crash /diagnostic data used to operate and improve the Service.

• To provide, secure, and maintain the Service.
• To enable child verification, transition workflows, and consent tracking for organizations.
• To process subscriptions and billing.
• To monitor reliability, diagnose crashes, and prevent abuse.
• To communicate about the Service and respond to support requests.
• To comply with legal obligations.

The Service is intended for use by childcare staff and administrators, not by children. Information about children is provided by the organization for the purpose of operating its own child-safety procedures. The organization is responsible for providing notice to, and obtaining consent from, parents or guardians as required by applicable law (including the U.S. Children’s Online Privacy Protection Act, where applicable). We use children’s data only to provide the Service to the organization and do not sell it or use it for advertising.

We do not sell personal information. We share it only with service providers (“sub-processors”) that help us operate the Service, under contractual confidentiality and security obligations:

• Supabase — database, authentication, and file storage hosting.
• Stripe — subscription payment processing.
• Sentry — error and crash diagnostics.
• Expo (EAS) — mobile application build and update delivery.

We may also disclose information to comply with law, enforce our agreements, or protect the rights and safety of users, or in connection with a business transfer.

We retain personal information for as long as needed to provide the Service and as configured by each organization’s data-retention settings, unless a longer period is required by law. When an organization or account is deleted, we delete or de-identify the associated personal data, including stored photos and consent documents, within a commercially reasonable period.

We use technical and organizational measures to protect information, including encryption in transit, row-level access controls that isolate each organization’s data, and audit logging of sensitive actions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. Because much of the data in the Service is controlled by a childcare organization, requests concerning children’s data are generally directed to that organization; we will assist our customers in responding. To exercise a right or make a request, contact us at support@face2name.app. Account and organization deletion can also be initiated from within the Service.

We may process and store information in countries other than where you are located. Where required, we use appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where appropriate, provide additional notice.

Questions about this Privacy Policy can be sent to support@face2name.app.