Legal
Privacy Policy
This Privacy Policy has been prepared in good faith to comply with PIPEDA and applicable Ontario law. It has not yet been reviewed by legal counsel. TinyMatch intends to have this document reviewed by a qualified Ontario privacy lawyer before material commercial scale is reached.
1. Who We Are
TinyMatch is an Ontario-based childcare matching platform that connects parents searching for licensed childcare with daycares and home childcare providers that have available spots. TinyMatch is operated as a sole proprietorship by its founder, based in Pickering, Ontario, Canada.
2. What Information We Collect
Parents and Families
- Name (optional)
- Email address
- City or municipality within Ontario
- Child's age group (infant, toddler, preschool, or school age)
- Date by which childcare is needed
- Preferred program type
- A ranked list of up to 10 licensed daycares you are interested in
- Stripe payment information if you subscribe to Premium (processed directly by Stripe — we never see your card number)
Daycares and Childcare Providers
- Daycare or home childcare name and licensed name
- City, address, and program details
- Contact name and email address
- Available spot details
Automatically Collected
- Anonymized web analytics via Google Analytics 4
- Server logs (IP, browser type) — deleted after 30 days
What We Do NOT Collect
- Government IDs, SIN, health card numbers, immigration status
- Names, photos, or identifying information about children
- Location tracking or biometrics
3. How We Use Your Information
We use your information to match parents with available daycare spots, send match alerts, and improve the platform. We do not sell your personal information to any third party. We do not share individual-level data with advertisers or data brokers.
We publish aggregate, anonymized market insights (e.g., "Ajax has the highest infant demand in Durham Region"). No individual is identifiable in any published data.
4. Who We Share Your Information With
- Supabase (USA) — Database hosting. SOC 2 Type 2 certified.
- Brevo (France/EU) — Email delivery. GDPR compliant.
- Stripe (USA) — Payment processing. PCI DSS Level 1 certified.
- Google Analytics (USA) — Anonymized web analytics only.
- Vercel (USA) — Website hosting.
We may disclose information if required by law or court order. We will notify you of any business transfer that involves your data.
5. Data Retention
- Match profiles: 24 months, then automatically anonymized
- Daycare registrations: while active, plus 12 months
- Email signups: until you unsubscribe or request deletion
- Subscription records: 7 years (Canadian tax law)
- Server logs: 30 days
6. Your Rights
Under PIPEDA, you have the right to access, correct, or delete your personal information. To make any of these requests, email [email protected] with the subject line that matches your request. We respond within 30 days.
To lodge a privacy complaint: Office of the Privacy Commissioner of Canada — priv.gc.ca — 1-800-282-1376.
7. Children's Privacy
TinyMatch does not collect personal information about children. The only child-related data we collect is an age group category. If you believe a child under 13 has submitted information, contact us immediately at [email protected].
8. Security
All data is transmitted over HTTPS. Parent match profiles are protected by Row Level Security and are not publicly accessible. We never handle credit card numbers. In the event of a data breach, we will notify affected users within 72 hours as required by PIPEDA.
9. Changes to This Policy
We will update the effective date and notify users by email when material changes are made. The current version is always at tinymatch.ca/privacy.
10. Contact