DayPostHR — Privacy Policy
Last updated: September 22, 2026
Valkyrie Labs Inc. (“we”, “us”, “our”) operates DayPostHR (the “App”), a workforce management application for licensed childcare centres. This Privacy Policy explains what personal information the App collects, how it is used, where it is processed, and what rights you have.
DayPostHR is used by staff and administrators of a licensed childcare centre under contract with their employer. The App does not collect or store information about children.
1. Information We Collect
- Account information — email address and password. Accounts are created by your organization’s administrator; there is no self-registration.
- Security information — if your organization requires or you enable multi-factor authentication, the information needed to verify your identity (e.g. a TOTP authenticator).
- Personal and contact information — your name, date of birth, mailing address, profile photo, phone/email contacts, and up to two emergency contacts. If you provide them, a family doctor’s name/office address and personal vehicle details (make, model, colour, plate — for parking and site identification).
- Employment and scheduling data — your role, work schedule, shift history, absence and leave records, wage or salary, and certification/qualification records (including uploaded certificate documents), required for your employer’s regulatory compliance and payroll processing.
- Device and diagnostic data — device type, operating system, app version, and crash/error reports. Diagnostic data is tied to an internal account identifier, not your name or email.
- Push notification token — if you enable notifications, a device token used to deliver them.
2. How We Use Your Information
- Authenticate you and secure your account, including multi-factor authentication.
- Provide the App’s scheduling, certification-tracking, leave, and payroll-export features to your employer.
- Maintain, secure, and troubleshoot the App (crash and error diagnostics).
- Communicate service-related messages (e.g. password reset, schedule notifications).
We do not use your information for advertising, and we do not sell, rent, or trade it.
3. Where Your Information Is Processed
The App relies on the following sub-processors. We update this table before a new service begins processing your data.
| Service | Purpose | Data processed | Region |
|---|---|---|---|
| Google Cloud / Firebase (Firestore, Cloud Functions, Storage) |
Core app data storage and backend logic | Account, profile, scheduling, certification, leave, and payroll-export data | Montreal, Canada |
| Firebase Authentication | Sign-in and identity | Email, password hash, MFA enrollment | United States (no Canadian region available) |
| Sentry | Crash and error reporting | Internal account identifier, device/app diagnostic data | United States |
| Resend | Transactional email (password reset, account notices) | Email address | United States |
4. Data Security
We use role-based access control and server-enforced authorization rules so staff can only access data within their own organization and site. Data is encrypted in transit (TLS) and at rest. Your organization can require multi-factor authentication for some or all roles.
5. Data Retention
We retain your information for as long as your account is active. If your account is deactivated by your administrator, your records are retained — not immediately deleted — for the periods required by Ontario’s Child Care and Early Years Act (O. Reg. 137/15, s. 82: staff records ≥ 3 years) and the Employment Standards Act, 2000 (s. 15(5)/15.1(5): payroll records 3 years, vacation records 5 years). After the applicable retention period, records are deleted. A history of your certification document versions is kept for the same reason, rather than overwritten.
6. Your Rights
You may request:
- Access to the personal information we hold about you, or a copy of it.
- Correction of inaccurate information.
- Deletion of your information once it is no longer subject to a legal retention requirement.
Your organization’s administrator can export your data directly. To request your own copy, or to exercise any of the above, contact us using the details below; we aim to respond within 30 days.
7. Children’s Privacy
DayPostHR is a workplace application used by adult childcare staff and administrators. It is not directed at children, does not collect information about children, and we do not knowingly collect personal information from anyone under 18.
8. Changes to This Policy
We will update the “Last updated” date above when this policy changes, and where a change is material, prompt you to re-accept it in the App before you can continue using it.
9. Contact Us
Valkyrie Labs Inc.
Email: garrison@valkyrielabs.ca