Draft — not yet reviewed by an attorney. This policy was
written as a starting point covering the data Maggie's List actually
collects and how it's actually used. Before this goes live for real
users, it should be reviewed by a lawyer — especially the sections on
minors' data, since caregivers on this platform may themselves be
teenagers, and booking notes may reference the children being cared
for. State and federal rules here (including COPPA where relevant)
should be checked against your specific setup.
Who this policy covers
This policy explains what information Maggie's List ("we," "us") collects
from families and caregivers who use this website, and how that
information is used, stored, and shared.
Information we collect
When you create an account or use the site, we collect:
Account information: your name, email address, and password, and whether you're signing up as a family or a caregiver.
Referral information: for families, the name of the person who referred you to Maggie's List.
Booking information: the service requested, date and time, which caregiver (if any) was requested, and any notes you add — which may include details like a child's age, home address, or allergies, if you choose to include them.
Caregiver profile information: for caregivers, the bio, skills, and availability shown on your public profile, which is set up by Maggie's List directly.
We do not currently collect payment information through this site.
How we use this information
To create and manage accounts, and to review and approve new accounts.
To connect families with caregivers and process booking requests.
To send account and booking-related emails (approval notices, booking confirmations, and similar updates).
To maintain the security and integrity of the platform.
We do not sell personal information, and we do not use booking or account information for advertising.
Who we share information with
We use a small number of outside services to run this site, and they process data on our behalf:
Supabase — our database and authentication provider. Account and booking data is stored on Supabase's infrastructure.
EmailJS — used to send account and booking emails (approvals, confirmations, and similar notices).
We do not otherwise share personal information with third parties, except
where required by law.
Minors and children's information
Some caregivers on Maggie's List are teenagers. Caregiver accounts are
manually reviewed and approved before they're active. Separately, the
families who book caregivers may include information about their own
children in booking notes (such as a child's age or allergies) — this
information is provided voluntarily by the family and is visible only to
the requested caregiver and to Maggie's List administrators.
[This section needs specific legal review — particularly whether any
additional consent, disclosure, or data-handling requirements apply given
that caregiver users may be minors, and that children's information may
appear in booking notes even though children themselves do not create
accounts.]
Data security
We use industry-standard tools to protect information, including
encrypted password storage and database-level access rules that
restrict who can see what data. No system is perfectly secure, and we
can't guarantee absolute security of information transmitted to or
stored on the site.
How long we keep information
We retain account and booking information for as long as an account
remains active. [Add specific retention
period and deletion process once decided.]
Your choices
You can request a copy of the information we have about you.
You can request that we correct inaccurate information.
You can request that we delete your account and associated data, subject to any records we're required to keep.
To make any of these requests, contact us at
[contact email].
Cookies and local storage
This site uses your browser's local session storage to keep you logged
in. We do not currently use tracking or advertising cookies.
Changes to this policy
We may update this policy as the site changes. We'll update the "last
updated" date above when we do.
Contact us
Questions about this policy can be sent to
[contact email].