Children's Privacy Notice

1. Who This Notice Is For

1.1 This Notice is written for parents and legal guardians who use ZuKeepr on behalf of their child or children. If you are not the parent or legal guardian of a child, you should not provide information about that child through the Platform.

1.2 ZuKeepr is intended for use by adults aged nineteen (19) or older. Children may not create accounts on ZuKeepr. The Platform does not include features for direct child onboarding, child messaging, child profile self-management, or any other direct child interaction. All information about children is provided and managed by an authorized parent or legal guardian through their own adult account.

2. What Information We Collect About Children

When you create or update a child profile on ZuKeepr, you provide us with information about that child. The table below describes the categories of information we may collect, why, and at what stage the information is shared with a daycare.

Category

Examples

Why We Collect / When Shared

Identity

First name, last name, date of birth

Identification at care facility; age eligibility. Full DOB shared at enrollment acceptance only.

Health and safety (sensitive)

Allergies, medical information, immunization records, doctor or clinic

Safe care and emergency response. Shared with the chosen daycare at enrollment acceptance, not at application.

Emergency contacts

Names and relationships of contacts; phone numbers

So someone can be reached in case of urgent need. Shared at enrollment acceptance.

Pick-up authorizations

Authorized and unauthorized pick-up persons

So the daycare only releases the child to approved adults. Shared at enrollment acceptance.

Language

Primary and secondary languages spoken

So the daycare can communicate appropriately. Shared at application stage as part of general care needs.

2.1 We do not knowingly collect information about a child beyond what you, as the parent or guardian, provide to us through your account.

2.2 We do not collect biometric data, geolocation data, or behavioural tracking data about children.

2.3 We do not allow children to communicate directly through the Platform. All messaging takes place between the parent's adult account and the daycare.

2.4 Sensitive fields (medical information, full date of birth, emergency contacts, pick-up authorizations) are optional at the application stage and can be supplied closer to enrollment acceptance. The Platform encourages but does not require these fields to be completed before an offer of enrollment is extended.

3. How We Use Children's Information

Information about your child is used solely to operate the Platform and facilitate childcare placement. Specifically, we use the information to:

• Show eligible daycares a limited profile of your child when you apply (such as age range, languages, and general care needs);
• Share full child profile information with a daycare only after you accept that daycare's offer of enrollment;
• Maintain records of enrollments, payments, and communications relating to your child's care;
• Respond to your requests, including access, correction, or deletion of your child's information;
• Comply with our legal obligations under applicable privacy, childcare, and consumer protection law.

3.1 We do not use children's information for advertising, marketing, profiling, or behavioural analytics. We do not sell, rent, or trade children's information. We do not allow third-party advertisers to access children's information.

4. Verifiable Parental Consent and Legal Authority

4.1 When you create a Parent account, you are asked to confirm that you are the parent or legal guardian of any child whose information you will provide, and that you consent to ZuKeepr collecting and using that information as described in this Notice. This is recorded with a timestamp, IP address, user-agent, and Notice version, and is stored as part of your account record.

4.2 You also confirm, separately at signup, that:

• You have legal authority to make decisions about the child's care and to share information about the child with childcare providers;
• No court order, custody arrangement, or other legal restriction prevents you from using the Platform with respect to the child or from sharing the child's information with potential or chosen daycares;
• You will promptly notify ZuKeepr at support@zukeepr.com if your legal authority changes or if a court order or custody arrangement is put in place that affects your use of the Platform with respect to the child.

4.3 This confirmation is presented as a dedicated checkbox at signup, separate from your acceptance of the Terms of Service, the Privacy Policy, and this Notice. The text presented to you reads substantially as follows: "I confirm that I am the parent or legal guardian of any child I add to ZuKeepr, that I have authority to share that child's information with daycares through this Platform, and that no court order or custody arrangement prevents this use."

4.4 By providing information about your child, you reaffirm your verifiable parental consent under the U.S. Children's Online Privacy Protection Act ("COPPA") and equivalent Canadian privacy law.

4.5 If you are not the parent or legal guardian of a child, you should not provide that child's information through the Platform. Doing so is a violation of our Acceptable Use Policy, may be a misuse of the Platform under the Parent Agreement, and may also violate applicable law.

5. Who We Share Children's Information With

5.1 ZuKeepr shares your child's information only with the licensed daycare provider you have applied to or enrolled with through the Platform. Sharing happens in two stages and is enforced technically by the Platform:

• Application stage: The daycare you apply to sees a limited profile of your child (such as age range, general care needs, and scheduling preferences). Sensitive fields — full date of birth, medical and dietary details, emergency contacts, and pick-up authorizations — are NOT shared at this stage;
• Enrollment-acceptance stage: After you accept an offer of enrollment from a specific daycare, the full child profile (including sensitive fields you have provided) is shared with that specific daycare for the purpose of providing care. At this stage, you will be presented with a confirmation step summarizing what is about to be shared and with which daycare, before the share takes effect.

5.2 We do not share your child's information with:

• Daycares you have not applied to or accepted an offer from;
• Other parents or families;
• Advertising or marketing partners;
• Analytics providers (Microsoft Clarity and similar services are excluded from child profile pages by configuration);
• Affiliated services or future ZuKeepr products (such as babysitter, camp, tutoring, special-needs, healthcare, or seniors services we may launch later) — those would each require fresh, specific consent from you.

5.3 The only exceptions to the above are:

• Service providers that help us operate the Platform (such as our cloud hosting and database providers), who handle information under strict confidentiality and security obligations and are not permitted to use the information for their own purposes — a current list is available at zukeepr.com/subprocessors;
• When required by law, court order, or valid legal process;
• When necessary to prevent imminent harm to a child or other person;
• When you, the parent, expressly direct us to share the information with a specific party.

6. Daycares and Joint Responsibility

6.1 Once your child's information is shared with a daycare at the enrollment-acceptance stage, that daycare is jointly responsible with ZuKeepr (under Canadian privacy law) or has its own separate responsibilities (under applicable U.S. state privacy law) for handling the information appropriately. The daycare has its own legal obligations to use the information only for caring for your child, to maintain appropriate safeguards, and to honour your access, correction, and deletion requests.

6.2 Daycares listed on ZuKeepr are required, through the Daycare Agreement and the Data Processing Agreement, to:

• Use children's information only for providing childcare services;
• Limit access to staff with a legitimate need to know;
• Maintain appropriate physical, technical, and administrative safeguards;
• Notify ZuKeepr promptly of any actual or suspected data breach involving information received through the Platform.

6.3 If you have concerns about how a daycare is handling your child's information, you may raise those concerns with the daycare directly and report them to ZuKeepr at support@zukeepr.com.

7. How Long We Keep Children's Information

7.1 Active accounts: We retain your child's information for as long as your ZuKeepr account is active and as needed to provide the Platform's services.

7.2 Account closure: When you close your ZuKeepr account, your child's information is retained for an additional ninety (90) days to handle any disputes, financial reconciliation, or legal claims. After that period, your child's information is permanently deleted from ZuKeepr's active systems, subject to legal retention obligations (for example, retaining payment records as required by tax law).

7.3 Daycare-held information. A daycare that has received your child's information through ZuKeepr retains that information under its own policies and applicable law. Daycares are often required by childcare licensing law to retain specific records for several years even after a child stops attending. Closing your ZuKeepr account does not, by itself, delete information held by a daycare and does not override the daycare's separate legal retention obligations. To request deletion from a specific daycare, contact that daycare directly. ZuKeepr will assist you in identifying the appropriate contact upon request.

7.4 Legal holds: If we receive a legal request, court order, or are involved in active litigation, we may retain relevant information longer than the periods above for as long as legally required.

8. Your Rights as a Parent

As the parent or legal guardian, you have the following rights regarding your child's information on ZuKeepr:

8.1 Right to Review

You can view your child's information at any time through your account dashboard.

8.2 Right to Correct

You can update or correct your child's information through your account dashboard at any time.

8.3 Right to Delete

You can request deletion of your child's information at any time, in whole or in part. Most deletions can be made directly through your dashboard. For deletions that require manual processing, contact support@zukeepr.com. We will honour such requests within thirty (30) days, subject to legal retention obligations.

8.4 Right to Refuse Further Collection

You may stop providing further information about your child at any time. Doing so may limit your ability to use parts of the Platform but will not affect your right to have previously collected information reviewed, corrected, or deleted.

8.5 Right to Withdraw Consent

You may withdraw your consent to ZuKeepr's collection and use of your child's information at any time by closing your account or contacting support@zukeepr.com. Withdrawal of consent does not apply retroactively to information already shared with daycares; that information remains subject to the daycare's own privacy practices and legal retention obligations.

9. Security

9.1 ZuKeepr maintains physical, technical, and administrative safeguards designed to protect your child's information against unauthorized access, alteration, disclosure, or destruction. Child profile pages, medical information pages, and similar sensitive interfaces are subject to additional access restrictions and are excluded from analytics tools.

9.2 No system is perfectly secure. In the event of a data breach affecting your child's information, we will notify you and applicable authorities as soon as feasible and as required by law.

10. International Transfers

10.1 ZuKeepr is based in Canada, and our infrastructure is primarily hosted in Canadian data centres. Some service providers may store or process data in the United States or other jurisdictions.

10.2 Where information is transferred internationally, we take reasonable steps to ensure the information remains protected under safeguards comparable to those required by PIPEDA and applicable provincial privacy law. See zukeepr.com/subprocessors for current vendor jurisdictions.

11. Changes to This Notice

11.1 We may update this Children's Privacy Notice from time to time. Material changes will be communicated to parents via email or in-app notice at least thirty (30) days before they take effect.

11.2 If a change materially expands how ZuKeepr collects, uses, or shares children's information — or if ZuKeepr begins offering new services that would involve children's information in a different way — we will seek your renewed consent before the change applies to your child's information.

12. How to Contact Us

Questions, concerns, or requests regarding this Children's Privacy Notice or your child's information on ZuKeepr can be sent to:

ZuKeepr Inc.

914 Graythorpe Place, Victoria, British Columbia, Canada

support@zukeepr.com

zukeepr.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, the British Columbia Office of the Information and Privacy Commissioner, the U.S. Federal Trade Commission, or your state Attorney General's office in the United States.

─────────────────────────────────────────────────────────────────────────