Privacy Policy

Last updated: 21 August 2026

KiddoCapture ("KiddoCapture", "we", "us") provides workflow software for childcare photography companies. We operate from Melbourne, Australia, and handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy covers two very different kinds of data, and it's important to distinguish them:

• Customer data — information about you and your company when you enquire about, trial or subscribe to KiddoCapture.
• Service data — information your photography company loads into KiddoCapture to run photo days, which can include children's names, rooms, attendance days, and parent contact details.

1. Customer data — what we collect from you

When you contact us, book a demo or subscribe, we collect your name, company name, email, phone number and billing details. We use this to provide the service, arrange demos, send service communications and process payment. We do not sell this information, and we do not use it for third-party advertising.

2. Service data — children's information

KiddoCapture is used to organise photography of children in early learning settings. Rosters, children's names, room placements, sibling links, parent contact details and photo-day consent flags are entered into KiddoCapture by our photography company customers (or by parents through a registration link those customers share).

• Your company owns this data. We process it only to provide the service to you — never for marketing, profiling or any other purpose.
• Access is isolated per company. Every company's data is separated and access-controlled at the database level. One customer can never see another customer's data.
• Parent-facing pages are minimal. Registration links are token-protected and rate-limited, and expose only what a parent needs to manage their own child.
• We delete on request. When your subscription ends, you can ask us to export and then delete your company's service data.

3. Where data is stored

KiddoCapture data is stored in secure cloud infrastructure located in Australia (Sydney region), with encrypted connections in transit and encryption at rest. Backups are retained for disaster recovery and rotated automatically.

4. Cookies and analytics

This marketing website uses only essential cookies. The KiddoCapture application uses cookies and local storage strictly for signing you in and for offline capability — not for advertising or cross-site tracking.

5. Third-party services

We use a small number of infrastructure providers (cloud hosting, database, email delivery) to operate the service. Each is bound to process data only on our instructions. Where you enable an optional integration (for example, Netlife PhotoSuite), data flows to that system only because you configured it to.

6. Security

Access to production systems is limited to authorised personnel, protected by strong authentication. Role-based permissions inside the app control what each of your team members can see and do. If we become aware of a data breach likely to result in serious harm, we will notify affected customers and the OAIC as required by the Notifiable Data Breaches scheme.

7. Your rights

You may request access to, correction of, or deletion of your personal information at any time. Parents whose details were entered via a registration link should contact the photography company that photographed their centre — they control that data; we will assist them in fulfilling any request.

8. Contact

Privacy questions or requests: contact us or write to us via the details provided in your service agreement.

9. Changes

We may update this policy from time to time. Material changes will be notified to subscribed customers by email. The "last updated" date above always reflects the current version.