Privacy Policy
Effective date: September 19, 2026
1. Scope and responsibility
Profit Plan HQ operates Daycare Profit Engine at https://daycare.profitplanhq.com. We are responsible for the personal information we collect to operate our accounts and service. Direct privacy questions and requests to our privacy contact at support@profitplanhq.com.
This policy covers our public product website, the hosted application, and our related customer support. Paddle's checkout and buyer services are governed by its own Privacy Policy. This policy does not cover websites or services operated independently by others.
2. Information we handle
| Category | Information and source | Main purpose |
|---|---|---|
| Account and authentication | Email address you provide; account identifiers, verification status, and session information produced by our authentication service | Send sign-in links, authenticate you, protect your account |
| Business plans | Business labels, enrollment and tuition assumptions, staffing figures, expenses, scenarios, settings, and imported backup content you provide | Calculate results, save your plan, restore it across sessions and devices |
| Subscription records | Customer, transaction, and subscription identifiers; account linkage; payment/subscription status, relevant dates, and refund or dispute references received from Paddle | Confirm paid access, manage subscriptions, resolve billing problems |
| Technical information | IP address, browser/device information, request times, error details, and security or access logs handled by our infrastructure | Deliver the service, investigate errors, prevent misuse |
| Support correspondence | Contact details, messages, and any attachments you choose to send | Answer questions and address support or privacy requests |
We obtain information directly from you, from your use of the service, and from providers involved in authentication, infrastructure, email delivery, and billing. We do not need identifiable information about children, parents, or individual employees. Use aggregate figures and generic labels. Do not upload medical records, government identifiers, or full payment card details.
You provide payment information through Paddle and its payment partners. Our application does not receive or store your full card number or card security code. Paddle may collect billing addresses, payment details, tax information, and fraud-prevention data under its own policy.
3. How and why we use information
We use the information above to provide sign-in, calculations, cloud saving, import/export, and subscription access; send essential account and service messages; handle support; secure the service; investigate misuse; and meet applicable recordkeeping or legal obligations. We do not sell private business plans or use their contents for targeted advertising or AI model training.
Where applicable law requires a stated lawful basis, processing needed to supply the requested account and subscription is based on performing our contract with you. Security, proportionate troubleshooting, and resolving disputes serve our legitimate interests in operating a reliable service, subject to your rights. Required records and legally mandated disclosures are based on legal obligations. Optional uses that require consent will use that consent, which you may withdraw. We do not treat acceptance of our Terms as blanket consent to unrelated marketing or tracking.
Your email and necessary account and billing identifiers are required for account-based access. If you do not provide them, we cannot provide that access. You decide what planning figures to enter, but missing or inaccurate figures affect the usefulness of results.
4. Providers and disclosures
We use the following types of providers, which receive information necessary for their roles:
- Netlify: hosts the public product website and processes website requests and associated technical information.
- Cloudflare: hosts and delivers the application, processes requests, provides security infrastructure, and stores cloud plan and app billing records.
- Supabase: provides account authentication, email verification, and session management.
- Email delivery providers: deliver sign-in and service messages through our configured email services.
- Paddle and its payment partners: operate checkout, recurring billing, tax handling, fraud prevention, and purchase-related support. Paddle has separate responsibility for its transaction data and describes its purposes in its own policy.
Service providers acting on our behalf must process information under appropriate contractual and security arrangements. We may also disclose information to professional advisers under confidentiality duties; in response to a valid legal requirement; to protect lawful rights or address security threats; or as part of a business transfer with appropriate confidentiality and notice protections. We limit disclosures to what is reasonably needed for the relevant purpose.
5. Cookies, browser storage, and exports
The app uses authentication cookies and related browser storage to complete sign-in and maintain your session. Blocking necessary cookies can prevent sign-in or disrupt account access. The app may also read a plan left in browser storage by an earlier version when you choose to import it.
Plans saved in the hosted version are stored on our infrastructure, not solely on your device. Downloaded JSON backups and files shared through your device are separate copies under your control. Clearing your browser or resetting a plan does not cancel your subscription or automatically remove all account and billing records.
Our current application does not intentionally use advertising pixels or behavioral advertising cookies. Paddle and infrastructure providers may use their own technologies for checkout, authentication, and fraud prevention. If we introduce optional tracking that requires consent, we will explain it and obtain that consent before activation.
6. International processing
Our providers operate internationally, so information may be processed outside your province, state, or country and be subject to the laws of the processing location. Information is handled through our cloud, authentication, email, and payment providers. Processing locations depend on their infrastructure and the services used; we can provide further information about relevant providers and arrangements on request.
International processing is subject to applicable data protection requirements. Where required, appropriate transfer safeguards must be in place, such as an applicable adequacy decision or contractual protections. Contact support@profitplanhq.com for information about the arrangements applying to your data, including how to request details of relevant safeguards. We do not promise that data is stored exclusively in Canada or any other single country.
7. Retention and deletion
We retain information only for as long as reasonably needed for the purposes explained here, subject to applicable law. Account and saved-plan information is retained to operate the account and maintain its saved work. Cancellation ends future subscription billing but does not itself delete your account or saved plan. You may request account and plan deletion at support@profitplanhq.com.
We determine necessary retention by considering whether the account remains active, a deletion or closure request, an unresolved support issue, security needs, and legal recordkeeping or dispute obligations. Billing and dispute records may need to be kept after account closure. Support and technical records are kept only as needed to resolve their purpose and satisfy applicable obligations. Backups may retain restricted copies until their normal rotation expires; retained copies are not used for unrelated purposes.
We will tell you if a legal exception prevents a requested deletion. Paddle controls its own transaction retention, and copies you downloaded or shared remain on the devices or services you selected. Contact Paddle directly about its records at https://paddle.net.
8. Security
We use measures appropriate to the service, including HTTPS, authenticated sessions, and account-based access checks. Access by personnel and providers is limited to legitimate operational needs. No internet service or storage method is completely secure. Protect your email and devices, avoid sharing sign-in links, and store exported files securely. We will assess security incidents and notify affected people and authorities when required by applicable law.
9. Your choices and rights
You may update planning information in the app and export your plan using its backup feature. For account details, access, correction, deletion, or privacy complaints, email support@profitplanhq.com. Depending on the law that applies, you may also have rights to receive a portable copy, restrict processing, withdraw consent, and challenge our handling of information. Withdrawing consent does not affect processing that was lawful before withdrawal or processing supported by another lawful basis.
Right to object: Where applicable, you may object to processing based on legitimate interests and to direct marketing. Send objections to support@profitplanhq.com. We will assess them under the applicable law.
We may need proportionate verification of your identity before releasing or changing account information. We will respond within applicable legal time limits and explain any lawful extension or refusal. Exercising privacy rights will not itself lead to discrimination, although deleting information essential to the service can prevent us from continuing to provide it.
You may complain to the privacy regulator responsible for your location, including the Office of the Privacy Commissioner of Canada, the relevant provincial regulator, the UK Information Commissioner's Office, or your EU/EEA data protection authority, as applicable. You do not need to waive that right or finish our internal process first.
The app performs calculations using your figures and automatically checks subscription status to determine access. It does not decide credit eligibility, employment, admission, or childcare services. If an automated access check appears wrong, contact support for review.
10. Children and policy updates
The service is intended for adult business users, not children. We do not knowingly solicit children's personal information. If you believe such information was submitted, contact us so we can investigate and take appropriate removal steps.
We will update this policy when our practices change and provide additional notice or seek consent where required. The effective date identifies the current version. Contact support@profitplanhq.com for questions or to request a copy.