๐ Legal
Privacy Policy
We are committed to protecting the privacy of children, parents, and daycare educators on our platform.
๐
Last updated: May 2025
MamtaNest ("we", "our", or "us") is a daycare management platform based in India. We provide two mobile applications:
- MamtaNest Admin โ for daycare centers and educators to manage attendance, children's records, activities, fees, and parent communication.
- MamtaNest โ for parents and guardians to stay connected with their child's daycare, view activities, attendance, fees, and communicate with staff.
This Privacy Policy applies to both applications and our related services. By using our apps, you agree to the practices described in this policy.
We collect the following categories of information to provide our services:
๐ถ Child Information (collected by daycare admin)
-
๐ชช
Basic IdentityFull name, date of birth, gender, and photograph
-
๐ซ
Enrollment DetailsClass/group assigned, admission date, daycare center
-
๐ฟ
Health & SafetyKnown allergies, emergency contact number
๐จโ๐ฉโ๐ง Parent / Guardian Information
-
๐
Father's InformationName, mobile number, hashed password, WhatsApp opt-in preference
-
๐
Mother's InformationName, mobile number, hashed password, WhatsApp opt-in preference
๐ซ Daycare Staff / Admin Information
-
๐ค
Account DetailsDaycare name, admin name, mobile number, hashed password
๐ Usage & Activity Data
-
โ
Attendance RecordsCheck-in and check-out times, date, status (Present/Absent), remarks
-
๐ฏ
Daily ActivitiesActivity type (Meal, Nap, Art, Play, etc.), notes, date, optional photo
-
๐ฐ
Fee RecordsMonthly fee amount, payment status, payment mode, receipt numbers
-
๐๏ธ
Notes & MessagesMessages sent between parents and daycare staff
-
๐
HolidaysHoliday dates and descriptions added by the daycare
๐ฑ Device & Technical Data
-
๐
Push Notification TokenExpo push token to deliver in-app notifications. Stored separately for father and mother.We do not collect device identifiers beyond what is required for push notifications.
๐ Passwords are never stored in plain text. All passwords are hashed using bcrypt before being saved to our database.
We use the information we collect only for the purposes described below. We do not sell your data or use it for advertising.
- To authenticate daycare admins and parents and provide secure app access
- To manage and display child profiles, attendance, and daily activities
- To send real-time push notifications to parents on attendance check-in/check-out, new activities, fee reminders, and notes
- To send WhatsApp messages for attendance notifications and fee receipts (only to parents who have opted in)
- To generate fee receipts and monthly attendance reports
- To allow parents to view their child's daily schedule, meals, activities, and attendance history
- To allow daycare admins to manage holidays, fee records, and child profiles
- To allow two-way messaging between parents and daycare staff
- To allow password reset by admin (temporary password shared physically with parent)
Our platform manages personal data about children under the age of 13. We take this responsibility very seriously.
- Child data is entered exclusively by the daycare administrator โ children do not have accounts or directly interact with the app.
- Children's data (photos, health info, attendance) is only visible to: (a) the daycare admin who manages that child, and (b) the parents/guardians of that specific child.
- Child photographs are stored securely on our server and are not publicly accessible or indexed.
- We do not use children's data for advertising, profiling, or any purpose beyond delivering the core service to parents and daycare staff.
- Parents may request deletion of their child's data at any time by contacting us or the daycare administrator.
โ ๏ธ If you are a parent and believe that information about your child has been added incorrectly or without your knowledge, please contact us immediately at the address below.
We do not sell, rent, or trade personal information to third parties. Information is shared only in the following limited circumstances:
- Within the daycare: The daycare admin can view all children's data for their own registered daycare center. They cannot see data from other daycare centers.
- With parents: Parents can only view data related to their own children โ they cannot view any other child's information.
- WhatsApp messaging: Mobile numbers of opted-in parents are shared with our WhatsApp Business API provider (bhashsms.com) solely to deliver transactional messages (attendance alerts and fee receipts). No marketing messages are sent.
- Push notifications: Push tokens are shared with Expo's push notification service to deliver real-time alerts.
- Legal requirements: We may disclose information if required by law, court order, or governmental authority in India.
No data is shared with social media platforms, data brokers, or advertising networks.
Both apps use Expo Push Notifications to send real-time alerts. Notification types include:
- Child check-in and check-out alerts
- New activity or photo posted by the daycare
- New message/note from the daycare
- Fee payment confirmation and reminders
Push notification tokens are stored in our database linked to each parent's record. Separate tokens are stored for father and mother so each parent receives notifications independently.
You can disable push notifications at any time through your device's notification settings. This will not affect your ability to use the app.
MamtaNest can send WhatsApp messages to parents for the following transactional purposes:
- Attendance check-in and check-out notifications
- Fee payment receipt with receipt number
- Fee payment reminders
WhatsApp messages are sent via bhashsms.com, a registered WhatsApp Business API provider. Only pre-approved message templates are used โ no custom or unsolicited messages are sent.
๐ฑ WhatsApp messaging is opt-in only. The daycare admin sets a WhatsApp preference flag separately for father and mother when enrolling or editing a child's profile. Parents can request the daycare admin to disable WhatsApp messages for them at any time.
Mobile numbers shared with bhashsms.com are used exclusively for message delivery and are not retained by them for any other purpose.
Your data is stored on secured servers based in India. We implement the following security measures:
- All passwords are hashed using bcrypt โ passwords are never stored in plain text
- All API requests require authentication via JWT (JSON Web Token) โ each session uses a short-lived signed token
- API endpoints are protected โ users can only access data belonging to their own daycare or their own children
- Child photographs and activity images are stored in a private uploads directory and served only to authenticated users
- Mobile app data is stored locally using AsyncStorage on your device โ only your login token and basic profile info are cached
While we take all reasonable measures to protect your data, no system can be completely secure. Please use a strong, unique password and do not share your login credentials with others.
We retain personal data for as long as it is needed to provide the service:
- Child profiles and attendance records are retained for as long as the child is enrolled at the daycare
- Fee records and receipts are retained for accounting and legal compliance purposes
- Activity logs and notes may be deleted by the daycare admin at any time
- When a child is removed from the system by the daycare admin, their profile and associated data are permanently deleted
How to Request Data Deletion
Parents or daycare admins can request deletion of their data by:
- Contacting the daycare admin to remove the child's profile from the system
- Emailing us directly at the contact address below with the subject line "Data Deletion Request"
We will process deletion requests within 7 business days.
As a user of MamtaNest, you have the following rights regarding your personal data:
- Right to Access โ You may request a copy of the personal data we hold about you or your child
- Right to Correction โ You may request correction of inaccurate or incomplete data. Parents can ask the daycare admin to update their child's profile directly in the app
- Right to Deletion โ You may request deletion of your personal data as described in Section 9
- Right to Opt Out of WhatsApp โ You may request the daycare admin to disable WhatsApp notifications for your number at any time
- Right to Opt Out of Push Notifications โ You can disable notifications through your Android device settings at any time
- Right to Change Password โ Parents can change their own login password directly in the app from the Dashboard โ Change Password screen
To exercise any of these rights, contact the daycare admin directly through the app, or reach us using the contact details in Section 13.
MamtaNest uses the following third-party services to operate. Each has its own privacy policy:
-
๐
Expo Push Notifications (expo.dev)Used to deliver real-time push notifications to Android devices. Push tokens are sent to Expo's servers.expo.dev/privacy
-
๐ฌ
BhashSMS / BUZWAP (bhashsms.com)WhatsApp Business API provider used to send transactional messages. Mobile numbers of opted-in parents are shared only for message delivery.bhashsms.com
-
๐ค
Google Fonts (fonts.googleapis.com)Used in our web pages for typography. Google may log font requests.policies.google.com/privacy
We do not use Google Analytics, Facebook Pixel, or any advertising SDKs in our mobile apps.
We may update this Privacy Policy from time to time to reflect changes in our app features, legal requirements, or business practices. When we make significant changes:
- The "Last updated" date at the top of this page will be revised
- For material changes, we will notify daycare admins via the app or email
- Continued use of the app after the updated policy is posted constitutes acceptance of the revised policy
We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us:
We aim to respond to all privacy-related inquiries within 5 business days.