Privacy Policy

Last updated 27 October 2026

This policy explains how Kode Kreations Inc. collects, uses, shares and protects personal information in Wiglo, and the choices available to you. Because Wiglo holds information about young children, we limit what we collect, who can see it, and how long we keep it.

1. About this policy

In this policy:

• "We", "us" and "our" mean Kode Kreations Inc., a company incorporated in Canada and based in Markham, Ontario.
• "Wiglo" means our child-care management service, including the Wiglo and Wiglo Staff apps for iOS and Android, the web apps at app.wiglo.ca and staff.wiglo.ca, and the website at wiglo.ca.
• "Daycare" means a daycare, school, child-care centre or other child-care organization that uses Wiglo.
• "Personal information" means information about an identifiable individual.
• "You" means a parent, guardian, emergency contact, or daycare owner or staff member whose personal information is in Wiglo, or a visitor to our website.

This policy does not cover the services of Apple, Google or other companies that you use alongside Wiglo, which are governed by their own privacy policies.

2. Our role and your daycare's role

Information entered by a daycare and its families. Each daycare uses Wiglo to record attendance and daily reports, message families, and manage its billing. The daycare decides what information it collects and why, and is responsible for that information. We process it as the daycare's service provider (a "processor" in some privacy laws), on the daycare's instructions, and only to provide Wiglo.

Information we are responsible for. We are responsible for the personal information we handle for our own purposes: sign-in accounts, technical information such as error reports and server logs, visits to our website, and privacy requests sent to us. This includes the email address of the owner who registered a daycare, which we keep after the daycare closes (see section 8).

Consent. Before entering a child's information in Wiglo, the daycare is responsible for informing the child's family and obtaining any consent its enrolment requires, including for photos. The daycare turns on a child's "Share photos" setting only after a parent or legal guardian has agreed that the daycare and the family may share photos and videos of the child with each other through Wiglo. Turning it on is the daycare's confirmation that it has that agreement, and we record who turned it on and when. The agreement covers sharing through Wiglo only; it does not cover social media, the daycare's website or any other use. It includes group photos and videos, in which other children also appear and which are also shown to those children's families. If you turn sharing off, your child's own photos and videos and profile photo are deleted, and your child is untagged from group photos and videos; group items stay visible to the other families in them. After the child is added, the child's parents control the setting in Wiglo and the daycare cannot change it there. To withdraw photo consent, turn the setting off in the Wiglo app or contact your daycare. You may withdraw consent at any time, subject to legal and contractual limits, as described in section 10. Our terms of use describe the same arrangement.

Requests about a child's records are usually best handled by the daycare. You may also contact us directly, and we will respond or refer your request to the daycare.

3. Information we collect

Parents, guardians and emergency contacts

• Name, email address and phone number, used for sign-in and so the daycare can reach you.
• The children you are linked to, and whether the daycare permits you to pick them up or send messages.
• Emergency contacts for a child: name, contact details and relationship to the child.
• Preferred language.
• Each child's "Share photos" setting, with who changed it, when, and the version of the words shown.
• The version of the Wiglo terms of use you accepted, and when.

Daycare owners and staff

• Name, email address and phone number.
• Role, location and classrooms.
• A record of actions taken in Wiglo, such as signing a child in, marking an invoice paid, or confirming that a parent has agreed to photo sharing, so the daycare has an accurate history.
• For owners, supervisors and teachers, the version of the Wiglo terms of use accepted, and when.
• Notification preferences.
• Information about the daycare itself, such as its name, logo, locations, hours and fees.

Messages

Messages exchanged between families and staff in Wiglo, including the sender, the time sent, and the child a message concerns.

Reports of posted content

A family member can report a photo, video or message that a daycare's staff posted, and a staff member can report a message from a parent. If a family member reports a photo or video as not their child, only the tags of that family's own children are removed from it, and the photo or video is deleted only when those were its only tags; if it is reported as not shareable, it is deleted for every family. A report notifies the daycare's staff by a notification that carries no names and no content, and puts a row in the staff notifications list of each person told; the person who reported is not named in it. For a photo or video, the staff member who posted it and the supervisors of the location are told, or the daycare's owners if the location has no supervisor; for a reported message, the daycare's owners and the child's location supervisor are told, and the message is not changed. The row in the staff notifications list holds no names and no content, and is kept 30 days (section 8). Our server logs also keep a line for each report, which holds internal numbers and the reason chosen, never names or content, and is kept as long as other server logs (section 8).

Billing records

Invoices, receipts and deposits that the daycare records for each child. These are the daycare's own billing records. Wiglo does not process payments from parents and does not collect parents' card or bank details. When the daycare records a payment, Wiglo emails a receipt to each parent linked to the child, showing the child's name, the receipt number, the period and the amount.

Sign-in

You sign in with a one-time code sent to your email address, with your Google account, or with your Apple account (Sign in with Apple, offered in the iOS apps, the Android apps and on the web). Wiglo has no passwords, and we never receive your Google or Apple password. If you sign in with Google, Google provides your name, email address and profile picture. If you sign in with Apple, Apple provides an identifier for your Apple account, your email address and, the first time you sign in, the name you choose to share. If you choose Apple's Hide My Email, we receive an address that Apple creates and that forwards our emails to you, not your own address. Anyone who signs in, in the family apps, the staff apps or on the web, may create a sign-in account before a daycare has invited or added them; we keep the name and email address used so the account can be matched to an invitation, until it is matched or you delete the account from the screen that tells you we cannot find your daycare. An account that uses an Apple forwarding address is matched only when your daycare uses that address.

Technical information

• Error reports. When an app encounters a problem, it sends a report containing technical details of the problem, the device type, operating system and app version, an internal account number, and your role and daycare. Error reports do not contain your name or email address. After a crash, you may choose to add a description of what happened, which is sent with the report.
• Notification tokens. If you allow notifications, your device provides a code that we use only to send you Wiglo notifications.
• Server logs. Short-lived records of requests, such as the time and whether a request succeeded. They do not contain names, email addresses, message text or children's details.

What we do not collect or do

We do not sell, rent or trade personal information. We do not show advertising or use advertising or analytics trackers. Wiglo does not use facial recognition and does not access your location, contacts or microphone. A video includes any sound recorded in it. We do not use technology that identifies, locates or profiles you.

4. Children's information and photos

Children do not use Wiglo; there are no child accounts. A child's information is entered by the daycare's staff and the child's parents or guardians, and may include:

• name, date of birth and gender;
• classroom, location, enrolment status and dates;
• attendance, including sign-in and sign-out times and who recorded them;
• daily events recorded by staff, such as meals, sleep, toileting, activities, health notes, incidents, supply requests and notes;
• photos and videos, and a profile photo, when photo sharing is on;
• fees, invoices, receipts and deposits;
• emergency contacts.

Within Wiglo, a child's information is visible only to the daycare's staff, according to their role, and to the parents and guardians linked to the child. This includes health and incident notes, which we treat as sensitive information. The one exception is a group photo or video that the daycare shares, with the families' agreement, which is also seen by the other families of the children in it.

Photos and consent

Each child has a "Share photos" setting, which covers photos and videos. The daycare turns it on when it adds your child, and only after a parent or legal guardian has agreed, outside Wiglo, that the daycare and your family may share photos and videos of your child with each other through Wiglo. The agreement includes group photos and videos, in which other children also appear and which are also shown to those children's families. It does not cover social media, the daycare's website or any other use; ask the daycare about those. While photo sharing is off, staff cannot add a photo of your child. Our terms of use describe the same arrangement for daycares and for families.

Photos and videos are delivered through unlisted links that cannot be guessed, and Wiglo shows them only to people with access to the child. Anyone who has a photo's or video's exact link can view it, so these links should not be shared outside Wiglo. When a photo or video is replaced or removed, the previous one is deleted.

A photo taken with the camera in Wiglo is held only inside Wiglo until it is sent, and is not saved to the phone's photo library. It is removed from the app once it is sent or discarded, and when the staff member signs out. The first names of the children chosen for a photo that is waiting to be sent are kept with it, in the same private storage on the phone, and are removed at the same times. Wiglo uses the camera and only the photos and videos that a staff member chooses to add. It does not look through the other photos or videos on the device. Wiglo never records a video: videos are chosen from the phone, not taken with Wiglo's camera. Wiglo's own prepared copy of a video is removed once the video is sent or discarded, and when the staff member signs out. If a staff member adds a photo or video that is already on their own phone, Wiglo deletes its own copy when it is deleted from Wiglo. Wiglo cannot delete the original on that phone, or any copy kept on a person's own device.

After your child is added, your child's parents can turn the setting on or off in the Wiglo app or at app.wiglo.ca; guardians can see it but not change it, and the daycare cannot change it in Wiglo. You can also contact your daycare about photo sharing. Everyone linked to your child sees the same setting, and the most recent change applies. We record who changed it, when, and the version of the words shown.

If you turn photo sharing off, your child's own photos and videos and profile photo are deleted at once, and your child is untagged from group photos and videos; group items stay visible to the other families in them. Deleted photos cannot be restored. A link to one of the deleted photos or videos that is already open on a device stops working within 60 minutes. A photo that is already showing on a device, or that the app or browser has kept temporarily, may stay visible there for a short time, until it is refreshed. Turning sharing back on does not bring back a deleted photo. A photo or video that a parent or guardian saved to their own device or downloaded is outside Wiglo; turning photo sharing off or deleting it does not delete those copies.

Photos that show more than one child. When a child graduates or is removed from the daycare, every photo and video in which that child is the only child tagged is deleted 60 days later (see section 8). A group photo, in which other children are also tagged, is kept for those children's families, and only the link between your child and the photo is removed. Your child may still be recognizable in a group photo that is kept, and the words staff wrote with it are not changed automatically. A caption that staff write with a photo is seen by every family the photo is shown to. To have a particular group photo deleted, ask the daycare; the staff member who posted it, or a supervisor, can delete it.

A daycare may add its logo.

5. How we use information

We use personal information only to provide Wiglo to daycares and their families, namely to:

• create and secure accounts and sign you in;
• show attendance, daily reports, messages and billing records to the right people;
• send the notifications you have turned on;
• keep Wiglo secure and prevent misuse;
• detect fraud and abuse and count how many daycares use Wiglo, using the email address of a daycare's owner kept after the daycare closes. We use it for nothing else, never for marketing, and we do not share it;
• diagnose problems and improve Wiglo's reliability;
• respond to your requests and meet our legal obligations.

Wiglo does not make decisions about you based solely on automated processing.

When notifications are on, a message notification may show the sender's name and the beginning of the message on your lock screen. A photo or video notification shows the child's first name and the daycare's name on the lock screen. You can turn notifications off in your device settings.

Wiglo messaging is not for emergencies. For anything urgent, contact the daycare or the family by phone.

6. How we share information

Within Wiglo. Information stays within the daycare that entered it. Staff see the children and families at their daycare according to their role. Parents and guardians see only their own children, except that a group photo or video the daycare shares, with the families' agreement, is also seen by the other families of the children in it. One daycare cannot see another daycare's information.

Service providers. We use a small number of service providers to operate Wiglo:

• cloud hosting, which runs our servers, apps and website and stores the database, photos, videos and logos;
• an authentication service, which handles sign-in and sends sign-in codes;
• an error-monitoring service, which receives the error reports described in section 3;
• an email delivery service, which sends receipt emails to parents;
• a web font service, which receives your internet address and browser details when a page loads.

Our service providers may use personal information only to provide their services to us, under contract, and we require them to protect it at least as well as this policy describes. A current list of our service providers is available on request.

Apple and Google. When you sign in with Apple or Google, download our apps from the App Store or Google Play, receive notifications, or receive our emails at an Apple Hide My Email address, Apple and Google handle the information involved under their own privacy policies.

Legal requirements and safety. We may disclose personal information where required by law, such as in response to a valid court order, or where necessary to protect someone's safety.

Business transfers. If our company is sold or merged, personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We do not otherwise share personal information with anyone.

7. Where information is stored

Our main database is located in Canada. Some personal information is stored or processed outside Canada and outside Quebec, including in the United States. Sign-in and error reports are processed in the United States; receipt emails are sent through an email delivery service in the United States; photos, videos and logos are stored in eastern North America, which may include the United States; our servers run on a global network that handles each request close to the person using Wiglo; and Apple and Google deliver notifications, and Apple forwards email sent to Hide My Email addresses, through their own systems.

Information stored outside Canada is subject to the laws of the country where it is held, and may be accessible to the courts, law enforcement and national security authorities of that country.

8. How long we keep information

We keep personal information only for as long as it is needed to provide Wiglo to the daycare and to meet legal requirements.

9. How we protect information

We use safeguards appropriate to the sensitivity of the information. Personal information is encrypted in transit and at rest, including in backups. Each daycare's information is separated from every other daycare's at the database level, not only in the apps, and access is limited to what each person's role requires.

No method of transmission or storage is completely secure. If a breach of security safeguards creates a real risk of significant harm, we will notify the affected daycare and individuals, the Office of the Privacy Commissioner of Canada and, where applicable, Quebec's Commission d'accès à l'information, as required by law.

10. Your rights and choices

Subject to the law, you may ask to:

• access the personal information held about you or your child;
• correct information that is inaccurate or incomplete;
• delete your account and personal information, except records the daycare must keep by law;
• withdraw consent, for example by turning off photo sharing for your child in the Wiglo app or by contacting your daycare;
• receive your information in a structured, commonly used format, where the law provides that right.

Your daycare can handle most requests directly. You may also email info@kodekreations.io from the email address you use with Wiglo. If you use Hide My Email with Sign in with Apple, you may write from any address you can read; tell us your name and your daycare, and the forwarding address (it ends in @privaterelay.appleid.com) if you can see it. We may need to verify your identity before acting on a request. We respond within 30 days, free of charge.

Deleting your Wiglo account

Wiglo and Wiglo Staff · Kode Kreations Inc.
To ask us to delete your account, email a deletion request to info@kodekreations.io from the email address you use with Wiglo. If you use Hide My Email with Sign in with Apple, you may write from any address you can read; tell us your name and your daycare, and the forwarding address if you can see it. We delete your account and confirm by email within 30 days.

In the app: open Settings and choose Delete account, then confirm. Your account is deleted in the app, without signing in again, and the app then tells you it was deleted. Without the app: sign in on the deletion page on our website and confirm there.

We delete your sign-in account; your name, email address, phone number and profile photo; your notification and language settings; your record of accepting the terms of use; and, if you are a parent or guardian, messages you sent. If you delete your own account after signing in with Apple on our website, we also ask Apple to end Wiglo's link to your Apple Account. Apple may not act on the request, and we make it only when you delete your own account. To be sure Wiglo is removed, open Settings on your iPhone, tap your name, then Sign in with Apple, then Wiglo, and follow the steps on screen to stop using Sign in with Apple.

What stays: a child's records stay with the daycare, as described in section 8. Records you made as daycare staff, and messages you sent as staff, stay with the daycare without your name, shown as "former user". If you were the first owner invited to set up a daycare that is still open, the daycare's sign-up record keeps the email address it invited. If you closed a daycare, the email address of its owner is kept until you ask us to remove it, as described in section 8. Copies in backups are removed within 30 days.

If you are the last owner of a daycare, deleting your account would leave the daycare without an owner, so close the daycare first (Settings, Close this school), or contact us.

Complaints

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

11. Cookies and similar technologies

The Wiglo web apps use cookies and similar browser storage only where needed for them to work: to keep you signed in, to remember the daycare you last used, and to hold a message on your device until it is sent. Our website and apps do not use advertising or analytics cookies.

12. Changes to this policy

We update this policy when our practices or the law change, and the date at the top shows the most recent update. Before a significant change takes effect, such as collecting a new kind of information, adding a new type of service provider, or moving information to another country, we will notify you in the apps or by email.

13. Contact us

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act and, for individuals in Quebec, the Act respecting the protection of personal information in the private sector. The person in charge of the protection of personal information at Kode Kreations Inc. is Ahmed Khalifa, Chief Executive Officer.