Privacy Policy
Last updated October 29, 2026
Care Circle Privacy Policy
Introduction
Effective date: October 29, 2026
This Privacy Policy explains how Chympen (Care Circle, we, us, or our) collects, uses, and protects information through our website at carecirclehq.io and our application at app.carecirclehq.io (together, the Service).
Our Role
Care Circle provides software to daycares and childcare providers (Providers). When a Provider enters information about children, families, and staff, the Provider decides what is collected and why. The Provider is the controller of that information, and Care Circle acts as a service provider that processes it only on the Provider's instructions. If you are a parent and have questions about your child's information, please contact your daycare first. We will help Providers respond to your request.
Information We Collect
Information from Providers and staff:
Account details such as name, email, phone number, role, and program name.
Billing details for paid plans. Card details are collected and stored by Stripe, not by us.
Information Providers enter about children and families:
Child details such as name, date of birth, enrollment and attendance records, allergies, health and emergency notes, and authorized pickup contacts.
Parent and guardian names and contact details.
Messages, updates, photos, and files shared through the Service.
Tuition, invoice, and payment records, and waitlist entries.
Information collected automatically:
Device and log data such as IP address, browser type, pages viewed, and timestamps.
Cookies and similar technologies, described below.
Children's Privacy and COPPA
Children do not create accounts or use the Service directly. Information about children is provided by Providers and parents. Under the Children's Online Privacy Protection Act (COPPA), where it applies, the Provider is responsible for giving notice to parents and obtaining any required consent. Care Circle uses children's information only to provide the Service to the Provider and for no other commercial purpose. We do not use children's information for advertising, and we do not build marketing profiles of children.
Parents may ask their Provider to review, correct, or delete their child's information. Parents may also email info@carecirclehq.io and we will work with the Provider to respond.
FERPA
Where a Provider is subject to the Family Educational Rights and Privacy Act (FERPA), Care Circle acts as a school official with a legitimate educational interest. We use education records only to provide the Service, remain under the Provider's direct control regarding those records, and do not disclose them except as FERPA allows or as the Provider directs.
How We Use Information
We use information to:
Provide, operate, and maintain the Service.
Process payments and manage subscriptions.
Send service messages such as account notices, receipts, and security alerts.
Provide customer support.
Keep the Service secure and prevent fraud or misuse.
Understand and improve how our website and app are used, using aggregated data.
Comply with legal obligations.
We may send Provider account holders product updates and marketing emails. You can opt out at any time using the unsubscribe link or by emailing us. We never send marketing to children.
No Sale of Personal Information
We do not sell personal information, and we do not share personal information for cross context behavioral advertising. We have never done so.
How We Share Information
We share information only in these cases:
With the Provider and the users it authorizes, such as staff and parents, as part of the Service.
With service providers who help us run the Service, under contracts that limit their use of the data.
When required by law, court order, or to protect the safety of a child or any person.
In connection with a merger, acquisition, or sale of assets, subject to this Policy.
With your consent or at your direction.
Third Party Processors
We use trusted third party processors, including:
Stripe, for payment processing and subscription billing.
Cloud hosting and database providers, to store and run the Service.
Email delivery providers, to send account and service emails.
Google Analytics, on our marketing website only, to understand site traffic. We do not use Google Analytics inside the app where children's information is stored.
A current list of processors is available on request at info@carecirclehq.io.
Cookies
We use cookies and similar technologies to keep you signed in, remember your settings, and keep the Service secure. On our marketing website, Google Analytics uses cookies to measure visits. You can block or delete cookies in your browser settings, although some features may not work without essential cookies. You can also use the Google Analytics opt out browser add on offered by Google.
Data Security
We use reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit, access controls based on role, and limited staff access on a need to know basis. No method of transmission or storage is completely secure. If we learn of a security incident affecting personal information, we will notify affected Providers and others as required by law.
Retention and Deletion
We keep information for as long as an account is active or as needed to provide the Service. When a Provider closes its account, it may request an export within 30 days. After that, we delete or anonymize the Provider's data within 90 days, except where we must keep certain records, such as billing records, to meet legal, tax, or accounting obligations. Backups are overwritten on a regular schedule. Providers can delete individual child or family records at any time, and may request deletion by emailing info@carecirclehq.io.
Your Privacy Rights
Depending on where you live, you may have rights under state privacy laws, such as the California Consumer Privacy Act (CCPA) as amended, and similar laws in other states. These may include the right to:
Know what personal information we collect and how we use and share it.
Access and receive a copy of your personal information.
Correct inaccurate information.
Delete your personal information.
Opt out of the sale or sharing of personal information. We do not sell or share it.
Limit the use of sensitive personal information.
Not be treated differently for exercising your rights.
To make a request, email info@carecirclehq.io. We will verify your identity before acting on a request, and you may use an authorized agent. If your information was entered by a daycare, we may refer your request to that Provider, since it controls that information. If we deny your request, you may appeal by replying to our decision, and we will respond within the time required by law.
Where Data Is Stored
The Service is intended for use in the United States, and information is stored and processed in the United States.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify Providers by email or in the app before the changes take effect. The effective date at the top shows when it was last updated.
Contact
For privacy questions or requests, email info@carecirclehq.io.