Privacy Policy

Childcare centers that subscribe to CubHub (each a "Center") are the data controller for information about the children, families, and staff in their care. CubHub acts as a data processor or service provider on behalf of those Centers. When you create a CubHub account directly (for example, as a prospect evaluating the product or a parent invited by a Center), CubHub is the controller of that account-level information.

We collect the following categories of information:

• Account information. Name, email, mobile phone number, role (administrator, teacher, or guardian), and the Center you are associated with.
• Child and family records. Information Centers enter about enrolled children, such as name, date of birth, classroom assignment, allergies, dietary restrictions, vaccination records, emergency contacts, and authorized pickup guardians.
• Daily operations data. Attendance records, activity logs (meals, naps, diapers, notes), photos and videos uploaded by staff, messages, announcements, time-clock entries, and curriculum plans.
• Payment information. Billing address and payment method details are collected and stored by our payment processor, Stripe. CubHub receives only the last four digits of the card and the card brand for display purposes.
• Biometric templates (optional). If a Center enables face check-in, guardians may choose to enroll a face descriptor. We store a mathematical template only; we do not store the original photo. Enrollment is opt-in and can be deleted at any time.
• Technical data. IP address, device type, browser, log data, and cookies necessary to authenticate and secure the Service.

We use the information we collect to:

• Provide, maintain, and secure the Service.
• Authenticate users and enforce role-based access within each Center.
• Process payments and send transactional emails (receipts, invites, password resets).
• Send SMS/text messages for account notifications, attendance alerts, billing reminders, and other Service-related communications where you have opted in.
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms.
• Communicate with you about product updates, support requests, and policy changes.
• Comply with legal obligations and respond to lawful requests.

We do not sell personal information, and we do not use child data for advertising.

If you provide your mobile phone number and opt in to receive text messages, we may send you recurring automated SMS and MMS messages. These messages may include:

• Attendance check-in/check-out confirmations
• Billing and payment reminders
• Account verification codes
• Onboarding and setup notifications
• Appointment and tour reminders
• Service announcements and promotional messages

Consent and opt-out. Your consent to receive text messages is not required to use the Service. You may opt out at any time by replying STOP to any message or updating your notification preferences in account settings. Reply HELP or text HELP to (404) 994-4231 for support information.

Data sharing. SMS consent is not shared with third parties or affiliates. We do not sell, rent, or share your phone number or SMS consent information with third parties for their marketing purposes. Phone numbers are shared only with our SMS delivery provider (RingCentral) solely to transmit messages on our behalf, under a data processing agreement.

Retention. We retain your phone number and SMS preferences as long as your account is active or as needed to provide the Service. If you opt out of SMS, we retain a record of your opt-out to honor your preference.

Standard message and data rates from your wireless carrier may apply. Message frequency varies. Carriers are not liable for delayed or undelivered messages.

CubHub is designed for use by adults operating a licensed childcare program. Information about children is entered only by authorized staff at a Center or by the child's verified guardian, under a written agreement with that Center. Consistent with the Children's Online Privacy Protection Act (COPPA), CubHub does not knowingly collect personal information directly from children under 13. Where a Center uses CubHub to record information about children, the Center acts as the "operator" for COPPA purposes and is responsible for obtaining verifiable parental consent as required by law. Guardians may request access to or deletion of their child's information by contacting their Center directly or writing to privacy@cubhub.ai.

We share information only as follows:

• Within a Center. Information entered by a Center is accessible to that Center's authorized staff and to guardians who are linked to specific children, subject to role-based access controls.
• Service providers. We use a small number of trusted subprocessors to run the Service, including Supabase (database and authentication), Stripe (payments), and Mailgun (transactional email). Each is bound by a data protection agreement.
• Legal and safety. We may disclose information if required by law, subpoena, or court order, or to protect the rights, safety, or property of CubHub, our customers, or others.
• Business transfers. If CubHub is involved in a merger or acquisition, information may transfer as part of that transaction, subject to this Policy.

We retain Center data for as long as the Center maintains an active subscription. When a Center cancels, we retain data for thirty (30) days in a recoverable state to allow reactivation, after which we permanently delete or anonymize it, except where we are required to retain records for legal, tax, or audit purposes. Guardians and staff may request deletion of their personal account at any time.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact your Center (who is the data controller for child and family records) or write to privacy@cubhub.ai. We will respond within the timeframes required by applicable law.

We follow the practices described in our Security overview, including encryption in transit and at rest, role-based access control, row-level security on every database table, and audit logging of sensitive actions. No system is perfectly secure, and we encourage you to report any suspected vulnerabilities to security@cubhub.ai.

CubHub is operated from the United States. If you access the Service from outside the United States, you consent to the transfer of your information to the United States and its processing there.

We may update this Privacy Policy from time to time. If we make material changes, we will notify affected customers by email and update the "Last updated" date above. Your continued use of the Service after an update means you accept the revised Policy.

CubHub, LLC.
Email: privacy@cubhub.ai