Privacy Policy
Last Updated: 10-Jan-2025
Introduction
At Smile2Steps, we respect your privacy. This Privacy Policy explains how we collect, use, and protect personal data when you use our Services. By using our Services, you agree to the terms of this Policy. If you do not agree, please discontinue use.
A. Privacy Policy for Parents
1. Types of Information Collected
- Child-Related Data: Name, date of birth, developmental milestone logs, and other information you voluntarily provide.
- Parent Contact Information: Name, email address, and login credentials.
2. How We Use Your Information
- Platform Functionality: To personalize content, track milestones, and deliver relevant resources.
- Support & Communication: To send updates, respond to inquiries, and provide customer support.
- Analytics & Improvements: We may analyze user trends to enhance our offerings.
3. Data Sharing & Disclosure
- Third-Party Services: We may share limited data with trusted service providers (e.g., hosting, analytics) under confidentiality obligations.
- Legal Compliance: We may disclose information if required by law or to protect our rights.
4. Data Retention & Security
- Retention: We keep data as long as necessary to fulfill the purposes outlined or comply with legal requirements.
- Security Measures: We use industry-standard practices (encryption, restricted access) to safeguard data, but no method is 100% secure.
5. Your Choices
- Access & Correction: You may access or update personal information in your account settings.
- Opt-Out: You can opt out of certain emails or request deletion of your account data.
B. Privacy Policy for Providers
1. Information We Collect
- Professional Data: Name, email, practice details, and credentials.
- Patient-Related Data (If Entered): You may input or transmit limited patient data (e.g., name, age, or milestones) as permitted by applicable law.
2. How We Use Your Information
- Service Delivery: To provide dashboards, analytics, and communication tools for better patient engagement.
- Account Management: To verify your professional identity and maintain secure access.
- Compliance: Where required, we may process data to meet legal or regulatory obligations.
3. Data Sharing & Patient Confidentiality
- Third-Party Services: We may use secure third-party vendors for data storage or processing.
- Responsibility: You are responsible for ensuring that any patient data you enter is handled in compliance with relevant privacy regulations.
4. Data Protection Measures
- Encryption: Sensitive data may be encrypted in transit and at rest.
- Access Controls: We limit who on our team can access personal data and use multi-factor authentication where possible.
5. Your Privacy Rights
- Access & Rectification: You may review and correct your professional or patient data, subject to applicable law.
- Deletion: You can request deletion or anonymization of patient data if permissible by law and aligned with your professional obligations.
General Provisions (Applicable to Both Parents & Providers)
1. International Data Transfers
If you access our Services from outside our primary operating location, your data may be transferred to and processed in that country.
2. Children’s Privacy
Parents must consent to collecting child data. We do not knowingly accept data from minors without parental consent.
3. Changes to Privacy Policy
We may update this Policy. The “Last Updated” date indicates the most recent changes. Ongoing use of our Services implies acceptance of updated policies.