Privacy Policy

1. Who We Are

TinyMatch is an Ontario-based childcare matching platform that connects parents searching for licensed childcare with daycares and home childcare providers that have available spots. TinyMatch is operated as a sole proprietorship by its founder, based in Pickering, Ontario, Canada.

2. What Information We Collect

Parents and Families

• Name (optional)
• Email address, and a phone number if you add one
• If you sign in with Google, the name and email address Google shares with us
• City or municipality within Ontario
• Your child's birthday or due date (and a second child's, if you add one). We use it only to work out which age room fits on a spot's start date; directors see the age group, never the date.
• Home postal code (the first three characters are enough), used only to measure distance
• Date by which childcare is needed
• Preferred program type, and for part-time care, the days you need
• Optionally, which of your ranked centres a sibling already attends
• A ranked list of up to 3 daycares you are interested in (up to 10 with Premium, once it is available)
• Stripe payment information if you subscribe to Premium (processed directly by Stripe — we never see your card number)

Daycares and Childcare Providers

• Daycare or home childcare name and licensed name
• City, address, and program details
• Contact name and email address
• Available spot details
• Waitlists a daycare uploads. A director can upload their centre's own waitlist (typically a spreadsheet of names, email addresses, phone numbers, children's age groups and the date care is needed) so TinyMatch can keep it current for them. The daycare confirms at upload that it collected that information itself and has the right to share it with a service provider. We use it only to show that centre which families are on TinyMatch, how ready each family is, and, if the centre asks us to, to contact those families on the centre's behalf about care at that centre. We never use an uploaded waitlist to market TinyMatch to the people on it, never share it with any other daycare, and never add anyone on it to a mailing list without their own sign-up.

Automatically Collected

• Anonymized web analytics via Google Analytics 4
• A simple TinyMatch visit counter: the page you viewed, the website that sent you, and a random ID kept in your browser so we can count unique visitors. No IP address, no cookies, nothing that identifies you.
• Server logs (IP, browser type) — deleted after 30 days

What We Do NOT Collect

• Government IDs, SIN, health card numbers, immigration status
• Children's names or photos (the only child information we hold is a birthday or due date, used to work out the age room)
• Location tracking or biometrics

3. How We Use Your Information

We use your information to match parents with available daycare spots, send match alerts, and improve the platform. We do not sell your personal information to any third party. We do not share individual-level data with advertisers or data brokers.

We publish aggregate, anonymized market insights (e.g., "Ajax has the highest infant demand in Durham Region"). No individual is identifiable in any published data.

4. Who We Share Your Information With

Daycares you're matched with. Before you choose to connect, a daycare sees only your child's age group, your city and roughly when you need care. Your name and email (and phone, if you add one) go to a daycare only when you choose to share them: by giving the director your TinyMatch code, or by tapping "Share my contact" on an invitation from that daycare. You can say no thanks to any invitation, and that daycare isn't told who you are.

If you tell us a sibling already attends a centre. So that centre can confirm it, its director sees your name, your child's age group and your care date. No other centre sees this, and you can remove the sibling answer from your account at any time.

If you are on a daycare's uploaded waitlist. That daycare already has your details; TinyMatch holds them only for that daycare. If you also have a TinyMatch profile, the daycare can see that you do, your child's age group, the date you need care, where you ranked that centre and whether your search is paused, so it can prioritise ready families. It does not see your other ranked centres, your postal code or your contact details beyond what it already had. Email hello@tinymatch.ca to be removed from a daycare's uploaded list on TinyMatch.

Service providers. We use these companies to run TinyMatch:

• Supabase (USA) — Database hosting. SOC 2 Type 2 certified.
• Brevo (France/EU) — Email delivery. GDPR compliant.
• Stripe (USA) — Payment processing. PCI DSS Level 1 certified.
• Google Analytics (USA) — Anonymized web analytics only.
• Vercel (USA) — Website hosting.

We may disclose information if required by law or court order. We will notify you of any business transfer that involves your data.

5. Data Retention

• Match profiles: 24 months, then automatically anonymized
• Daycare registrations: while active, plus 12 months
• Uploaded daycare waitlists: until the daycare deletes them or closes its account, and in any case no longer than 24 months after upload
• Email signups: until you unsubscribe or request deletion
• Subscription records: 7 years (Canadian tax law)
• Server logs: 30 days

6. Your Rights

Under PIPEDA, you have the right to access, correct, or delete your personal information. To make any of these requests, email hello@tinymatch.ca with a subject line saying what you're asking for (access, correction or deletion). We respond within 30 days.

To lodge a privacy complaint: Office of the Privacy Commissioner of Canada — priv.gc.ca — 1-800-282-1376.

7. Children's Privacy

TinyMatch is used by parents, not children. The only child-related information we hold is what a parent gives us: the child's birthday or due date (to work out the right age room) and, if they add one, the same for a second child. We never ask for a child's name, and a daycare sees only the age group. If you believe someone under 18 has given us information, contact us immediately at hello@tinymatch.ca.

8. Security

All data is transmitted over HTTPS. Parent match profiles are protected by Row Level Security and are not publicly accessible. We never handle credit card numbers. If a breach creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as soon as feasible, as PIPEDA requires.

9. Changes to This Policy

We will update the effective date and notify users by email when material changes are made. The current version is always at tinymatch.ca/privacy.

10. Contact