Privacy Policy

Last updated 26 September 2026

Daycares use Wiglo to share each child's day with their family. That means we look after very personal information, including information about young children. This policy explains what we hold, why we hold it, and what you can ask us to do with it.

It covers the Wiglo and Wiglo Staff apps on iPhone and Android, the Wiglo web apps at app.wiglo.ca and staff.wiglo.ca, and this website.

1. Who we are and our role

Wiglo is made by Kode Kreations Inc., a Canadian company based in Markham, Ontario ("we", "us").

Daycares, schools and child-care centres use Wiglo for attendance, daily reports, messages with families and billing. Your daycare is responsible for the information about its children, families and staff. It decides what is collected and why. We are its service provider: we store and process that information for the daycare, and use it only to run, protect and improve Wiglo. We are preparing a written data processing agreement that sets out these responsibilities for each daycare.

Requests about a child's records, such as correcting them, usually go to your daycare first. You can always write to us directly, and we will help or pass your request to the right place.

2. What we collect

Parents, guardians and emergency contacts

• Name, email address and phone number, so you can sign in and the daycare can reach you.
• Which children you are linked to, and whether the daycare allows you to pick them up or send messages.
• A child's emergency contacts: name, contact details and relationship to the child.
• Your language (English, French or Spanish).
• Your photo-consent decision for your child, with the date, the version of the consent wording, and the internet address and device details it was given from, so there is a clear record.

Daycare staff and owners

• Name, email address, phone number and, if you add one, a profile photo.
• Your role, location and classrooms.
• A record of actions you take, such as signing a child in or marking an invoice paid, so the daycare has an accurate history.
• Your notification preferences.
• For the daycare itself: its name, logo, locations, hours and fees.

Messages

The messages families and staff send each other in Wiglo, who sent them, when, and which child a message is about.

Billing

The daycare's own invoices, receipts and deposits for each child. These are the daycare's records of what it bills families, not purchases in the app. Wiglo never charges parents and never collects parents' card or bank details. When we begin charging daycares for Wiglo, a payment processor will handle the daycare's payments and will receive no information about parents or children. We will update this page before that starts.

Sign-in

You sign in with a one-time code sent to your email, or with your Google account. There is no Wiglo password, and we never see your Google password. If you use Google, Google shares your name, email address and profile picture with us so your account can be matched to your daycare's invitation. Parents can create a sign-in account in the app before they are invited; we keep the name and email address used, to match the account to an invitation, and you can ask us to delete it at any time.

Technical information

• Error reports. When something goes wrong in an app, we receive a report with technical details of the problem, your device type, operating system and app version, an internal account number, and your role and daycare. It never contains your name or email address. After a crash you can choose to describe what happened, and your description is sent with the report.
• Notification tokens. If you allow notifications, your phone gives us a device code used only to send you Wiglo notifications.
• Server logs. Short-lived technical records of requests, such as the time and whether a request worked. They contain no names, email addresses, message text or children's details.

What we do not do

We do not sell, rent or trade personal information. We do not show advertising, use tracking tools, or use analytics that build a profile of you. We do not use facial recognition, and the apps do not use your location, contacts or microphone.

3. Children's information and photos

Children do not use Wiglo. There is no child account and no screen meant for a child. A child's information is entered by the daycare's staff and the child's parents or guardians, and can include:

• name, date of birth and gender;
• classroom, location, enrolment status and dates;
• attendance: sign-in and sign-out times and who did them;
• daily events recorded by staff: meals, sleep, toileting, activities, health notes, incidents, supply requests and notes;
• a profile photo, only with a parent's consent;
• fees, invoices, receipts and deposits;
• emergency contacts.

Only the daycare's staff and the parents and guardians linked to the child can see it. Health and incident notes are sensitive, and we treat them with extra care.

Photos and consent

Staff cannot upload a child's photo unless a parent has given photo consent in Wiglo. We record each consent decision, when it was made and which version of the wording was shown.

Each photo is stored at its own long, random web address that cannot be guessed and is not listed or searchable anywhere. Wiglo shows that address only to people with access to the child. Anyone who has the exact address can open the photo, so please do not share it outside Wiglo. When a photo is replaced or removed, the old one is deleted.

You can withdraw photo consent at any time in the family web app at app.wiglo.ca, in your photo consent settings, or by asking your daycare or emailing us. Once you withdraw it, staff can no longer add photos of your child, and photos already uploaded under that consent are removed. Automatic removal of existing photos is still being built; until then, ask your daycare or email us and we will remove them.

Staff may add their own profile photo, and a daycare may add its logo.

4. How we use information

We use information only to run Wiglo for your daycare: to sign you in, show attendance, daily reports, messages and billing records to the right people, send the notifications you have turned on, keep the service secure, and find and fix problems. We do not use it for any other purpose.

When notifications are on, a message notification may show the sender's name and the start of the message on your lock screen. You can turn notifications off in your phone's settings.

Messaging is not for emergencies. For anything urgent, phone your daycare or the family directly.

5. Who can see it and who helps us

Inside Wiglo, information stays inside your daycare. Staff see the children and families at their daycare, each according to their role. Parents and guardians see only their own children. One daycare can never see another's information.

We use a small number of service providers to run Wiglo:

• cloud hosting, which runs our servers, apps and website and stores the database, photos and logos;
• a sign-in service, which handles sign-in and sends sign-in codes;
• an error-monitoring service, which receives the error reports described in section 2;
• a web font service, which receives your internet address and browser details when a page loads.

They may use information only to provide their service to us, under contract, and must protect it at least as well as this policy describes. Daycares receive the full list of these providers with their data processing agreement, and anyone can ask us for it at info@kodekreations.io.

If you sign in with Google, download our apps from the App Store or Google Play, or receive notifications, Apple and Google handle the information involved under their own privacy policies.

We share nothing with anyone else, except where the law requires it, such as a valid court order, or to protect someone's safety. If our company is ever sold or merged, personal information may be transferred as part of that, and we will tell you before it becomes subject to a different privacy policy.

6. Where it is stored

We are based in Canada, and our main database is in Canada. Some information is stored or processed outside Canada, including in the United States: sign-in and error reports are handled in the United States, photos and logos are stored in eastern North America (which may be the United States or Canada), our servers run on a global network that handles each request close to the person using the app, and Apple and Google deliver notifications through their own systems. Information held outside Canada is subject to the laws of that country, and authorities there may be able to access it.

We may move our database to the United States in future. If we do, we will tell daycares and users before the move and update this page.

7. How long we keep it

We keep information only as long as your daycare needs it and the law requires. Nothing is kept indefinitely.

• Attendance and daily events: as long as your daycare needs them and the law requires, then deleted on a schedule. Provincial child-care rules can require some records to be kept for several years.
• Invoices, receipts and deposits: 7 years while your daycare uses Wiglo, to meet tax and record-keeping rules.
• Messages: while your daycare uses Wiglo. A deleted message is erased, not hidden.
• A child who is removed: their photo and emergency contacts are deleted straight away; their other records follow the periods above.
• A parent, guardian or staff member who is removed and has no other role at any daycare: their sign-in account is deleted.
• A daycare that stops using Wiglo: it has 60 days to export its data, including its billing records, which it is then responsible for keeping. After that, all of its data is deleted, and backup copies are gone within a further 30 days.
• Error reports, server logs and database backups: 30 days at most.

Two of these steps are still being built: scheduled deletion of attendance and daily events, and the export for a departing daycare. Until then, attendance and daily events are kept while your daycare uses Wiglo, and a departing daycare can ask us for a copy of its data before we delete it.

8. How we protect it

Information is encrypted when it travels and when it is stored, including backups. Each daycare's information is separated from every other daycare's in the database itself, not only in the app, and people see only what their role needs. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you, your daycare and the Privacy Commissioner of Canada, and Quebec's Commission d'accès à l'information where it applies, as the law requires.

9. Your rights, including deleting your account

You can ask to:

• see the information held about you or your child;
• correct information that is wrong or incomplete;
• delete your account and your information, except records your daycare must keep by law;
• withdraw consent, for example to photos;
• receive your information in a common, structured format, where the law gives that right.

Your daycare can handle most requests directly. You can also email info@kodekreations.io from the address you use with Wiglo. We may ask you to confirm who you are. We reply within 30 days, free of charge.

Deleting your Wiglo account

This applies to the Wiglo and Wiglo Staff apps and the Wiglo web apps. To delete your account, email info@kodekreations.io with the subject "Delete my Wiglo account", from the email address you use with Wiglo. Deleting your account from inside the apps is not available yet. We will delete your account and confirm by email within 30 days. Records your daycare must keep by law, such as your child's attendance and invoices, stay with the daycare for the periods in section 7.

10. Canadian and Quebec privacy law

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, the Act respecting the protection of personal information in the private sector, as amended by Law 25.

• Person in charge of personal information: Ahmed Khalifa, Chief Executive Officer, reachable at info@kodekreations.io.
• Information outside Quebec. Some information is stored or processed outside Quebec, including in the United States (section 6). Quebec law requires a privacy impact assessment before personal information is communicated outside Quebec. We have not yet done this assessment.
• No automated decisions. Wiglo makes no decisions about you based only on automated processing.
• Language. French and Spanish versions of this policy are being prepared.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

11. Changes and contact

We update this policy when our service or the law changes, and the date at the top shows the last change. Before a significant change takes effect, such as a new kind of information, a new service provider, or moving information to another country, we will tell you in the apps or by email.