Privacy policy
Last updated 2 November 2026
Schools and families trust us with information about children. We keep it safe, show it only to the people who should see it, and never sell it or use it for advertising.
Who we are
toddlepath is an app that connects schools with their families: teachers record a child’s day, families see it, and both talk to each other. “toddlepath”, “we” and “us” mean the team that runs it.
This policy explains what information we hold, why, who we share it with and the choices you have. It covers the website, the app (for staff and for families) and the emails and texts we send.
The school decides, we look after it
Most of what is in toddlepath is about children and their families, and it belongs to their school. The school decides what it records and who sees it; we keep it safe and use it only to run toddlepath for that school. If you have a question about what a school records, ask the school first; we will help them answer.
When a family keeps something of their own in toddlepath (their account, their child’s health card, milestones), the family decides who sees it, school by school.
What we hold
- Accounts: names, email addresses, phone numbers, passwords (stored scrambled, never readable) and sign-in settings.
- About children: names, dates of birth, classes, attendance, the day’s records (meals, naps, moments, photos and videos), learning notes and reports, and what the school or family adds.
- Health: allergies, conditions, medication plans and doses, and incidents, only where the school uses Health, and seen only by staff the school allows and by the family.
- Families and the people around a child: guardians and trusted adults, who may pick up, and how to reach them.
- Messages and forms: what schools and families write to each other, and answers to forms.
- Payments: what a school bought and when. Card and Mobile Money details go straight to our payment provider; we never see or keep them.
- How toddlepath is used: sign-ins, the device and browser, and a record of who changed what, so schools can see their history and we can keep accounts safe.
How we use it
- To run toddlepath for the school and its families: showing each person what they are allowed to see, and sending the emails, texts and notifications the school and family have chosen.
- To keep accounts and children safe: sign-in codes, spotting unusual sign-ins, and the history of changes.
- To help: our support team opens a school’s account only to help it, and the school is told each time.
- To make toddlepath better: we look at how pages are used, never to sell anything.
We never sell information, never show advertising, and never use children’s information to build profiles or for marketing.
AI help
Some schools use AI help to draft notes, summaries and form questions. It runs only when a member of staff asks for it, uses only what that draft needs, and leaves out health information. Staff check every draft before anything is sent. We use AI providers whose business terms do not allow them to train their models on what we send.
Who we share it with
Only the providers that help us run toddlepath, each for its own part and bound to keep it safe:
- Amazon Web Services: the servers that hold toddlepath.
- Cloudflare: keeps the website and app fast and protected.
- Resend: sends our emails.
- mNotify: sends our texts.
- Paystack: takes payments for schools.
- Anthropic, OpenAI or Google: AI help, when a school uses it.
We share information with others only when the law requires it, or to protect a child or someone else from harm.
How long we keep it
We keep a school’s information while it uses toddlepath. A school can remove records, children and staff. When a school leaves toddlepath, we delete its information, unless the law says to keep it longer. A family can close their account at any time by writing to us.
Keeping it safe
Everything travels encrypted. Each person sees only what their role or family allows; health and other sensitive records have their own permissions, and every look at a health profile is recorded. Staff can turn on two-step sign-in, and schools can limit where their staff sign in from. No system is perfect: if something goes wrong that affects you, we will tell the school, and you, without delay.
Your choices and rights
You can ask to see the information held about you or your child, to correct it, or to have it deleted, and you can choose which emails and texts you get in the app. For records the school keeps, ask the school, or write to us and we will pass it on and help. You may also complain to the Data Protection Commission of Ghana.
Children
Children do not have accounts. What is held about them comes from their school and their family, and only their family and the staff the school allows see it.
Cookies and your browser
We use what keeps you signed in and remembers your choices on this device. We do not use advertising cookies.
Changes
When this policy changes in a way that matters, we will tell schools and families in the app before it takes effect. The date at the top says when it last changed.