Privacy Policy
Effective date: August 14, 2026
Totlio is a childcare management and tuition payments app for family daycares. This policy explains what information Totlio collects, how it’s used, who can see it, and how to delete it. We’ve written it in plain English on purpose. If anything is unclear, write to hello@totlio.com and we’ll explain.
Who we are
Totlio is operated by Totlio LLC, a California limited liability company (“Totlio,” “we,” “us”), with a mailing address at 3400 Cottage Way, Ste G2 #23981, Sacramento, California 95825 US. You can reach us anytime at hello@totlio.com.
What Totlio collects
Totlio has three kinds of adult users: childcare providers, parents and guardians, and facility staff. What we collect depends on your role:
- Account information: your name, email address, and password (stored by our authentication provider, never by us in readable form), plus your role and facility or family links.
- Facility information (providers): facility name, rooms, enrollment records, and tuition rates you set.
- Children's information: described in full in its own section below, because it's the most important part of this policy.
- Messages and activity entries: messages between providers and families, and the daily activity entries providers record.
- Payment records: described under “Payments” below. We never see or store card or bank account numbers.
- Device information: a push-notification token if you enable notifications, so we can deliver them. Totlio does not use third-party advertising or analytics SDKs.
We do not run ads, we do not sell personal information, and we do not share personal information for cross-context behavioral advertising or with data brokers.
Children's information
Totlio is built for adults. Providers, parents, guardians, and facility staff hold the accounts; children never sign up, log in, or use Totlio themselves.
Because Totlio helps adults run childcare, those adults record information about children in their care. Depending on what your provider and family use, this can include a child's name, date of birth, photos, enrollment and attendance records, room assignment, activity entries (like meals, naps, and notes), and tuition status.
Who puts it there. Only a child's provider, authorized facility staff, and parents or guardians enter information about that child. Totlio does not collect information directly from children.
Who can see it. A child's records, photos, and activity entries are visible only to the facility's provider and staff, and to the parents, guardians, and co-parents the family itself has invited. Authorized pickup contacts are different: naming someone as an authorized pickup lets the provider verify that this person may pick your child up; it does not give that person access to your child's records, photos, or activity feed. We do not use children's information for advertising, and we never sell it.
How long we keep it. A child's records stay available while the child is enrolled and while authorized adults need access to them. When the relevant family account relationships and the child's enrollment are closed, the child's personal information is deleted or anonymized as described under “Deleting your account and data” below, subject to the limited retention described there.
Parents' rights. Parents and guardians can review and correct their child's information at any time through their own account, and can request deletion by deleting their account or by writing to hello@totlio.com.
A note on COPPA. Totlio is designed for adult users. Children do not create accounts, log in, or submit information directly to Totlio. Information about children is entered by parents, guardians, childcare providers, and authorized facility staff responsible for their care.
Payments
Payments in Totlio are processed by Stripe. When you pay tuition or set up payouts, your payment credentials are entered on Stripe-hosted pages and processed by Stripe; Totlio does not receive or store full card numbers or bank account credentials. Stripe's handling of your payment information is governed by Stripe's privacy policy.
What Totlio keeps is the payment record: who paid, for which child and week, the amount, the fee, and the settlement status. The full amount, including any service fee, is always shown before you confirm a payment. Payments appear on bank statements as TOTLIO.
Where your information lives
Totlio runs on Google Firebase (Firestore, Authentication, and Storage), hosted in the United States. Push notifications are delivered through Firebase Cloud Messaging. Data is encrypted in transit, and access is restricted by per-role security rules; the same circle rules described in the children's section apply to the underlying database, not just the app's screens.
Deleting your account and data
You can request deletion of your account at any time from Settings in the Totlio app. Deletion is completed within 7 days of your request.
What is deleted. Your login, profile, family links, and personal identifiers are deleted or anonymized, subject to the limited retention described below.
What is kept. We may retain limited payment, transaction, security, fraud-prevention, dispute, and compliance records for as long as reasonably necessary for those purposes or as required by law. Retained information is restricted to those purposes and is not used for unrelated purposes.
Children's information is not automatically deleted when one adult deletes an account if another linked parent or guardian remains authorized or the child remains actively enrolled with a provider. Deleting your own account removes your account and access. The child's personal information is deleted or anonymized when the relevant family account relationships and enrollment are closed, subject to the limited retention described above.
Providers: if your facility has children on its roster, those enrollments must be closed out before your account can be deleted, so families keep access to their own records during the transition.
Questions about deletion? Write to hello@totlio.com.
Your rights
Wherever you live, we honor the same basics: you can see the information tied to your account, correct it, request a copy of information you've provided by writing to hello@totlio.com, and delete it as described above. California residents: Totlio does not sell personal information or share personal information for cross-context behavioral advertising.
Changes to this policy
If we change this policy in a way that matters (new data types, new sharing, new retention), we'll notify account holders in the app or by email before the change takes effect, and we'll update the effective date above. Continued use after the effective date means the updated policy applies.
Contact
hello@totlio.com · Totlio LLC · 3400 Cottage Way, Ste G2 #23981, Sacramento, California 95825 US