This Privacy Policy describes how MU Works LLC ("we," "us," or "our") collects, uses, and discloses information when you use the Hayway childcare management platform, website, and associated applications (collectively, the "Service").
Because our Service operates as a business-to-business-to-consumer (B2B2C) platform, we process information on behalf of childcare providers ("Centers") as well as information directly from parents or guardians ("Parents").
1. Information We Collect
We collect information to provide, optimize, and secure our childcare management and billing services.
- Account and Profile Information: We collect names, email addresses, phone numbers, and physical addresses when Centers register for a subscription or when Parents are enrolled by a Center.
- Child and Family Data: Centers and Parents upload information necessary for daily operations, including child names, enrollment dates, attendance logs, scheduling requirements, and daily activity logs.
- Biometric Authentication Metadata (Passkeys): If you choose to enable Biometric Check-in, our system utilizes the WebAuthn standard. The Service never sees, accesses, or stores your actual biometric data (such as Face ID or fingerprint scans). Your device processes biometrics locally and only transmits a secure cryptographic public key and signature to our database to verify your identity.
- Payment and Transaction Information: Payment processing is securely handled by Stripe. Depending on your role, we collect transaction history, tuition invoice data, and the information necessary to facilitate bank transfers (ACH) or credit card processing. For Centers, this includes Stripe Connect account identifiers.
2. Information Related to Children (COPPA Compliance)
The privacy of children is of paramount importance.
Our Service is a tool used by adult childcare professionals and parents. We do not knowingly collect personal information directly from children under the age of 13.
All child data housed on the platform is entered directly by authorized Centers or Parents.
We protect this data with strict row-level database security to ensure it is only accessible to the specific Center and verified family members linked to that child's profile.
3. How We Use Your Information
We use the collected data for the following operational purposes:
- To facilitate child check-ins, attendance tracking, and staff scheduling.
- To process tuition payments, calculate transaction fees, and route funds securely via Stripe Connect.
- To generate operational logs, attendance records, and automation reports required for state childcare assistance and subsidy programs.
- To maintain, secure, and debug the infrastructure of the Service.
4. Sharing and Disclosure of Information
We do not sell your personal data. We only share information in the following circumstances:
- Between Parents and Centers: Attendance records, daily logs, and billing details are shared directly between the Center and the associated family accounts.
- With Service Providers: We share data with third-party vendors who perform critical infrastructure services for us, notably Stripe for payment processing and identity verification.
- Compliance and Legal Obligations: We may disclose information if required to do so by law, or to comply with state childcare assistance audit and verification procedures.
5. Data Security
We implement enterprise-grade security measures to safeguard sensitive childcare and financial data. This includes encryption of data in transit and at rest, alongside strict row-level database access controls. However, no internet transmission is entirely secure, and we cannot guarantee absolute security.
6. Contact Information
If you have any questions regarding this Privacy Policy, please contact us at:
MU Works LLC
jalil@haywayapp.com