cubbylist

When you use Cubbylist, we collect:

• Account info: your name, email address, and password (hashed)
• Addresses: home and/or work addresses you enter, used to calculate distances to daycares
• Children's info: names and dates of birth, used to determine age-appropriate daycare types. You enter this voluntarily during onboarding.
• Daycare tracking data: contacts, notes, lists, and other information you enter while researching daycares
• Payment info: processed entirely by Stripe — we never see or store your card number
• Usage data: basic analytics to understand how the product is used and to fix bugs

• Provide and improve the Cubbylist service
• Calculate distances from your addresses to daycare facilities
• Filter daycares by age-appropriate types based on your children's ages
• Process payments and manage your account
• Send transactional emails (account verification, password resets)
• Respond to support requests

We do not sell your data to third parties. We do not use your data for advertising.

We use the following services to operate Cubbylist:

• Stripe — payment processing. Stripe handles your payment information under their own privacy policy.
• Google Places API — to look up ratings and details for daycare facilities. We send facility names/addresses to Google; we do not send your personal data.
• Resend — transactional email delivery (account verification, password resets).
• Neon — our database provider, hosted in North America.
• Vercel — our hosting provider, which processes web requests.

We use essential cookies to keep you signed in and maintain your session. We do not use advertising or third-party tracking cookies.

Cubbylist stores children's names and dates of birth that parents voluntarily enter during onboarding. This data is used solely to calculate your child's age and filter daycare options by appropriate age group. This data is never shared with third parties or used for any other purpose.

Cubbylist is a tool for parents — it is not directed at children and children do not use the service directly.

We retain your data for as long as your account is active. If you request account deletion, we keep your data for a 30-day grace period in case you change your mind. After 30 days, your data is permanently deleted from our systems.

To request deletion, email hello@cubbylist.ca.

As a Canadian service, Cubbylist operates under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your data
• Withdraw consent for data collection (which may require closing your account)
• File a complaint with the Office of the Privacy Commissioner of Canada

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure infrastructure providers. No system is perfectly secure, but we take reasonable steps to protect your data.

We may update this policy from time to time. If we make significant changes, we will notify you via email. The “last updated” date at the top reflects the most recent version.

Questions or concerns about your privacy? Email us at hello@cubbylist.ca.