Parent App Privacy Notice

This notice explains how the Beenest parent app handles information. The staff app has its own notice (Staff App Privacy Notice). How we handle data on our website and as a company is described in our Privacy Policy.

1. Who provides the app and who is responsible

The app is provided by Triple Peak Software Systems, [legal form, e.g. LLC], [registered address] ("Beenest", "we"). Email: hello@beenest.co.

Your center is responsible for your data. Your child care center (or the organization that operates it) chose Beenest and decides what information is used, for what purpose, how long it is kept and when it is deleted. Everything you send through the app, and everything the app shows you, belongs to your center. Beenest provides the app and processes the data only on your center's behalf and under its instructions, as a "service provider" or "processor" under applicable US state privacy laws (see our Data Processing Addendum with centers). We do not use the data for our own purposes, for advertising or to train AI models. We do not sell or share personal information (as those terms are used in the California Consumer Privacy Act) and do not use it for targeted or cross-context behavioral advertising.

If your center is an educational agency or institution subject to FERPA, Beenest acts as a "school official" with a legitimate educational interest under the center's direct control (34 CFR § 99.31(a)(1)(i)(B)).

Questions about your rights go to your center (see section 10).

AI in the parent app. The only AI feature in the parent app is AI translation (section 8), and only if your center uses it and has chosen the highest AI privacy level, "All" [OPEN: confirm the English label of this AI level in the US app]. Messages from your center may have been drafted with AI help; they are sent only after the center has reviewed them.

2. What data the app collects

The app works without a user account; you do not enter your own name or contact details. You sign in with your center's access and your child's code. The camera is used only to scan that code. The app does not create a new record; it uses the child ID that already exists at the center. Through the app you can send:

• absence notices (child and date; the app does not ask for a reason), meal cancellations, pickup notices with an optional note, and poll votes
• yes or no replies to the center's events
• if your center offers payments through the app: confirmation that your child will take part in an activity and the notice "paid by transfer" [OPEN: are in-app parent payments by bank transfer available in the US?]
• if your center has turned the feature on (off by default): the person picking up your child on a given day, including a new person with their name and relationship to the child. A new person is saved only after you confirm the pickup authorization by email (see below). Please tell that person; they must show ID at pickup. Whether a child is handed over is decided by the center's staff. The names of authorized pickup persons are visible on every device where your child's code is stored.
• if your center has turned the feature on (off by default): requests for a parent conference with a topic, and your choice of a suggested time. The topic is read by the director or the group's team. Write only what is needed to schedule the meeting, and discuss health matters in the meeting itself.

The app shows you the center's messages and events, blog posts, and the permissions on file for your child (without the option to change them). Depending on the center's settings it also shows your child's authorized pickup persons and open payments with the recipient account and a payment QR code [OPEN: available in the US?]. Journal entries and group reports are written by staff. You see them only if the center has turned on display in the app (off by default) and releases the individual entry. An entry about your child is visible to everyone who has stored your child's code in the app.

Confirmation by email. For a new authorized pickup person, for permissions and for recording a parent conference, the center asks for your consent by email. The email goes to the one address the center has on file for your child and is sent in the center's name ("[Center name] via Beenest"). Your consent is saved only if you open the link within one hour and confirm on the page, together with the text and the time as a record. Your name, IP address and device are not saved. The confirmation page is a Beenest web page (hosted by Vercel in the United States). The request keeps your email address only until you confirm, and at most about one hour after the link expires. For permissions and recordings, the center also keeps a log of what was sent.

Please note: anyone with access to that mailbox can confirm. Protect it, and tell your center if your address changes. If you share custody, talk to each other; the center may also ask for the other parent's consent. To withdraw a consent, contact your center; the withdrawal takes effect once the center has recorded it.

This content is linked to the child ID, not to your name. Data linked to an ID is still personal information.

Data minimization. No location data, no access to photos, contacts or microphone, and no analytics or tracking tools. The app does not collect biometric identifiers such as face geometry or fingerprints [OPEN: confirm]. The web view shows only the traffic light, the center's messages and the center status; you sign in with the center's parent password. Child codes, notices and wallet passes are not available there. The web view is served by the Beenest application itself (Vercel, United States).

Your own programs and AI services. You may use what the app shows you freely, including with your own programs or AI services (for example an AI assistant that summarizes messages for you). You are responsible for that use. The service you choose has its own terms and privacy notice; it is not a service provider of your center or of Beenest. Messages from the center may contain information about other people; please pass it on only where you are allowed to. Never enter your center's parent password in another service.

3. Push notifications

Push notifications are opt-in. You only receive them if you allow notifications in your phone's operating system. If you decline, no device token is created or sent.

If you turn on push, the operating system (iOS) or the Firebase SDK (Android) creates a device token. It is stored in Cloudflare KV (United States) together with the groups you chose and the IDs of the children stored in the app (at most 20), so that notifications about a particular child reach only that child's devices. The token is not linked to a name. It is deleted when you turn off push in the app (Settings, Push notifications) or sign out. You can also withdraw the permission in your phone's settings.

Tokens at the push services

To deliver notifications, the device token is also processed and stored by these services for as long as the token is valid:

• Apple Push Notification service (APNs), Apple Inc.: Apple keeps the device token in its routing infrastructure to deliver messages to iOS devices.
• Firebase Cloud Messaging (FCM), Google LLC: Google creates and manages the FCM registration token to deliver messages to Android devices.
• Expo, 650 Industries, Inc. (United States): Expo stores the device token, as described in its own privacy notice, to pass messages on to APNs or FCM.

This token storage is part of the platform infrastructure provided by Apple and Google. It cannot be configured or switched off at the app level, and there is no push delivery on iOS or Android without it.

What notifications contain

Which notifications you receive depends on the features your center uses and on whether you allow notifications. Possible notifications:

• Group messages: title and text as written by staff; the center's name is placed before the title.
• Messages to your family: a fixed title with the center's name and no text; you see the content only in the app. If you answer with one of the offered actions (for example OK, Accept, Appointment, Join), the center stores the action you chose and the time.
• Traffic light changes: only when it turns yellow (the center is close to its limit) or red (the center is at full capacity), with fixed texts. No notification for green, on closing days or outside opening hours. The center can turn yellow and red off separately (on by default).
• Event reminders: title and time of the event, no names of children or groups.
• Conference appointments and new journal entries: fixed texts without names, only to devices where that child is stored.
• Payments received, if your center offers payments through the app: amount and purpose, without the child's name, only to devices where that child is stored.

Reminders about open payments are created by the app on your device (local notification); nothing is sent to push services for them. Staff must take care not to include sensitive information about children in free text; there is no technical filtering. The push services only pass message content through for delivery and do not store it permanently. The center's data stays in the database in the United States. Notifications can appear on your lock screen; you can turn off previews in your phone's settings.

4. Wallet passes

You can create a digital pickup card for Apple Wallet or Google Wallet. To do so, the child code, group name, center name, center address and, if stored, the child's name are sent to our push service at Cloudflare. The finished pass is kept in Cloudflare KV (United States) for up to 5 minutes. For Apple Wallet the card is created as a file. For Google Wallet a signed link is created through Google services, and Google (Google LLC) receives the content of the card.

If you give a child a nickname in the settings, it appears on the wallet pass. The nickname is stored only on your device and is sent to the card service once, only when you create the pass.

5. Where data is stored

Information sent through the app is stored in databases in the United States (Supabase, Inc., hosted in [AWS region]).

For push notifications and wallet passes, device tokens go to the services named in section 6. Cloudflare KV (United States) permanently holds, per center: the center's parent password, the center's name, push tokens and device IDs with their group assignment and stored child IDs. Wallet passes with the child's name stay there for up to 5 minutes.

Email is processed in the EU. Emails sent by the software, such as the consent and pickup confirmation emails in section 2, are sent through Brevo (Sendinblue SAS) with hosting in France and Germany [OPEN: confirm Brevo stays in EU as part of "mail"]. If you email us, your message is stored in our mailbox at Zoho Corporation B.V. in the Netherlands. Email is the only part of the service that runs in the EU.

6. Third-party services

The app relies on these services:

• Apple Push Notification service (APNs): delivery on iOS (details in section 3)
• Google Firebase Cloud Messaging (FCM): delivery on Android (details in section 3)
• Expo (650 Industries, Inc.): relay between the app and APNs or FCM (details in section 3)
• Cloudflare, Inc.: API relay and Cloudflare KV storage in the United States, with no access to the database (see section 7)
• Google Wallet (Google LLC): creating wallet passes on Android
• Supabase, Inc. (database) and Vercel, Inc. (application, confirmation pages and web view), both in the United States
• Google Cloud Vertex AI (Google LLC): AI translation, only if your center uses it (section 8)

APNs, FCM and Expo receive push tokens and the title and text of each notification (section 3). The full list of service providers that process center data is in our Data Processing Addendum.

No analytics, tracking or advertising tools are used in the app.

7. Cloudflare (API relay and storage)

Cloudflare Workers carry data between the app and the center's database (Supabase). API requests are forwarded to the database in the United States. Cloudflare has no access to the Supabase database. In addition, our push service stores in Cloudflare KV (United States), per center, the items listed in section 5. Wallet passes, which may contain the child's name, stay in KV for up to 5 minutes.

Data passed through Cloudflare Workers

• meal cancellations
• absence notices (without a reason)
• pickup notices (with an optional note)
• the center's messages, journal entries about your own child and group reports (display only, not stored at Cloudflare)
• center status (open, closed and so on)
• poll answers (one vote per device; the device ID is used only to prevent duplicate votes)
• pickup persons, conference requests, event replies, participation and payment notices; display of events, permissions, open payments and blog posts (not stored at Cloudflare)
• child ID and center ID

Not passed through Cloudflare: children's check-in and check-out times. These are recorded only at the terminal at the center and stored directly in the database. Staff time records do not go through the parent app but through the staff app, directly to the Beenest application.

8. Storage on your device

On your device the app stores only the access to your center (in the device's protected storage), the child codes, nicknames, settings and your own replies. The center's content is not stored on the device; it is loaded each time you open it. Exceptions: for offline display of the calendar, the center's closing days and closures and its dated messages from the current month onward (title, text, group) stay on the device.

If you use the app in another language, your device translates messages, blog posts, journal entries and the meal plan itself (Apple Translation or Google ML Kit, without sending anything to third parties) and stores the translations on the device (at most 500 entries). If your center uses AI translation, AI translates the full content instead, on Google Cloud Vertex AI in the United States, into the language the center has on file for you or, as long as none is on file, the language you choose in the app. That language choice is sent to the center. Only the translation is stored by Beenest, for at most 30 days. Push notifications are not translated.

The access is sent only when you sign in and when you register for push. The nickname is sent only when you choose to create a wallet pass (section 4).

No screenshots, no sharing. Screenshots, screen recordings and photographing the app's content are not permitted, nor is passing content on to others or into other apps such as messengers or social networks. This applies especially to messages, journal entries and information about other people.

Keep the QR code safe. The QR code is a key to your access. Keep it safe and do not show it to anyone who should not have it. If it is lost or in the wrong hands, tell your center right away; it will issue a new code.

9. Required and voluntary data

Drop-off and pickup times

Drop-off and pickup times are recorded only at the check-in terminal at the center, not through this app. Child care centers keep attendance records to show who is in the building, to meet their capacity limits and to document when responsibility for a child passes between parents and the center. Which records your center must keep, and for how long, depends on the licensing rules that apply to it and on its own policies. The terminal is the tool your center uses for this; ask your center whether it is part of your enrollment agreement.

Choice of software

Your center chooses which software it uses, just as an employer chooses the office software for its staff. Your rights concern how your data is protected, not which technical system the center uses.

Voluntary data (through this app)

Everything you send through this app, such as meal cancellations, pickup notices and other messages, is voluntary. The app is an optional channel between parents and the center. You do not have to use it.

10. Your rights

Because your center decides how your data is used, send requests about your data, or your child's data, to your center. That includes requests to see, correct, delete or receive a copy of data. If you send such a request to us, we will pass it to your center or tell you to contact the center, and we help the center respond.

• Correct: data stored only on your device (such as nicknames) you can change directly in the app.
• Delete: you can delete data stored on your device at any time with "Reset app" in the settings. Data you send through the app becomes part of the center's records once the center receives it. The center keeps and deletes it according to its settings, its policies and the record-keeping rules that apply to it.

Some US states give residents rights over their personal information, such as the right to know, correct or delete it. A summary of these rights and how we handle them as a service provider is in our Privacy Policy.

Children. Parents and staff use Beenest apps; children do not. The app is not directed to children. Information about children is entered by the center or by parents. We do not knowingly collect personal information directly from children under 13.

11. Support via WhatsApp

[OPEN: is WhatsApp support available in the US? If not, remove this section.] We offer optional support via WhatsApp, a service of Meta Platforms, Inc. If you use this channel:

• Do not share personal information: do not send personal or sensitive information over WhatsApp (for example children's names, dates of birth, health information, photos or documents with personal content). The channel is only for general questions and technical support.
• Storage by Meta: WhatsApp messages are processed and stored on Meta's servers under Meta's own terms and privacy policy.

For anything involving personal information, please email hello@beenest.co.

12. Changes

We may update this notice when needed. The current version is always available in the app and at beenest.co/parent-app-privacy.

13. Contact

Questions about privacy: hello@beenest.co or [privacy contact email]. Questions about your own data or your child's data are best sent to your center.