Privacy policy

Last updated: October 19, 2026

The Gully Goose Co, LLC(“we,” “our,” or “us”) provides Clear Day, software for daycare centers, preschools, and private pre-K programs (the “Service”). This Privacy Policy explains what information we collect, how we use it, who else receives it, how long we keep it, and what rights you have.

1. Who Uses Clear Day

Clear Day is a business-to-business service. Our customers are the childcare programs that use the Service. The Service is used by:

  • Staff: directors, teachers, and administrators at the program.
  • Parents and guardians: the families enrolled at, formerly enrolled at, or evaluating the program.
  • Visitors: people who use a program’s public website, forms, or links, or our childcare directory or connectors, without an account.

Children themselves are not users of the Service. Information about children is entered by the program’s staff and by parents and guardians through the program’s forms and apps. We process the information in a program’s account (“customer data”) on the program’s behalf and as described in section 3.

2. Information We Collect

  • Account information for staff and parents: name, email address, role, relationship to the child, and the credentials needed to sign in, including multi-factor sign-in details.
  • Family and caregiver contact information: names, phone numbers, email and home addresses, and photos of parents, guardians, emergency contacts, and others authorized to pick up a child, and records of pickups.
  • Information about children: name, date of birth, gender, race and ethnicity, home address, photos shared by teachers, attendance, daily activity logs (food, naps, toileting, mood, incidents), milestones and progress notes, and notes the program chooses to record. Health information is described below.
  • Enrollment informationfrom families and visitors: inquiries, tour requests, waitlist entries, registrations, and applications sent through a program’s website, forms, and links, which can include a child’s name and date of birth or due date, and conversations with a program’s website assistant.
  • Staff employment information: certifications and training, schedules, time clock records, and time off.
  • Billing and payment information: invoices, payments, and subsidy and scholarship records. Full card and bank account numbers are entered directly with Stripe and are never stored on our infrastructure; we keep only the card brand, the last four digits, the bank name, and a Stripe reference.
  • Signed documents and consents: documents and consent forms that families sign, with the typed signature, the date, and the signer’s IP address and browser details.
  • Messages and family communications: the content of messages exchanged through the Service between staff and families, including files (such as images and PDFs) that staff attach, and reactions and comments on shared photos.
  • Information the Service generates: drafts and summaries written with AI, such as progress narratives and summaries of a child’s behavior patterns, and facts about a family that staff save or that are drawn from staff notes, such as a parent’s work schedule or a family tradition.
  • Support requests: the messages you send our support team.
  • Technical and usage data: device type, browser, IP address, push notification tokens, and first-party interaction events used to operate the Service and diagnose issues.

Health information and HIPAA

Programs may record health-related information about children that they need for care, such as allergies, medications, immunizations, doctor details, accommodations, and incident reports. We are not a covered entity or a business associate under the Health Insurance Portability and Accountability Act (HIPAA), and the Service is not HIPAA compliant. Programs must not use the Service to store or transmit protected health information on behalf of a HIPAA covered entity, and we do not sign business associate agreements.

3. How We Use Information

We use the information above to:

  • Operate the Service for the program: maintain attendance and daily records, send messages and updates between staff and families, provide the AI features in section 4, process tuition payments through Stripe, and surface tasks for staff (such as a quiet family or an upcoming tour follow-up).
  • Bill programs for their Clear Day plans.
  • Provide customer support.
  • Protect the Service and prevent unauthorized access.
  • Understand how the Service is used and improve it, through product analytics, error monitoring, and statistics about programs’ use of the Service.
  • Comply with legal obligations.

We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use customer data to train AI models.

4. AI and Drafting

Some Service features use AI models to draft routine communications, surface families needing attention, write summaries and progress narratives from existing records, translate messages between staff and families, answer staff questions about their program’s records (including a child’s allergies and medications), answer families’ questions about a program’s published policies, sort enrollment inquiries and support requests, help a program build its public website, and answer visitors’ questions on that website. The same models extract structured fields from a document a staff member uploads, photographs, or pastes (for example, an application, enrollment form, or immunization record, which can include health details such as allergies and medications), map the columns of a spreadsheet a program imports using its column headings and a few sample rows, and clean up the dictated or typed text of a quick call recap into a log entry. These features run on Anthropic’s API.

Clear Day’s mobile app transcribes speech on the device, and the web app uses the browser’s built-in speech recognition, which some browsers process through the browser maker’s own service. Either way, Clear Day’s apps send our servers text, not audio recordings.

The photos teachers share with families are never sent to an AI model. When a staff member attaches an image to a question or scans a form, that image is sent to Anthropic to answer that request, and an image attached to a question can be sent again with later messages in the same conversation. When a school builds its website, screenshots of the draft site, including any photos the school placed on it, are sent to Anthropic to review its design.

Drafts of outreach to a family are presented for staff review, and no such message is sent without a staff member sending it. Two AI-written communications to families are sent automatically rather than by a staff member: the end-of-day report, sent to a child’s parents when the child is checked out (or later that day if no report has gone out) and subject to each parent’s own notification preferences, and the weekly family digest, sent to families with an enrolled child (and skipped in quiet weeks), where each parent can unsubscribe from the digest email with one click. Both are on by default, and a school admin can turn each one off on the web, in School profile under Family communications.

5. Children’s Privacy

The Service is not directed to children, and we do not knowingly collect personal information directly from children. The program (our customer) is responsible for obtaining any consents required to enroll a child and to use the Service on the child’s behalf.

A parent or guardian who believes information about their child has been collected or used improperly can contact us at [email protected] or contact their program directly. We will work with the program to correct, restrict, or delete the information.

6. Subprocessors

We use the following service providers to operate the Service. None of them receive roster or child records for advertising.

  • Railway: application hosting, managed Postgres database hosting, and encrypted S3-compatible object storage, United States.
  • Stripe: payment processing for tuition and other parent payments, and billing for programs’ Clear Day plans, United States.
  • Anthropic: AI inference for the features described in section 4 and for internal tools our staff use, under commercial terms that prohibit training on customer data, United States.
  • Resend: transactional email delivery, and processing of replies to our notification emails, United States.
  • Expo: push notification delivery to mobile devices and delivery of app updates. Push notifications can include a child’s name and are delivered through Apple’s push service, United States.
  • Cloudflare: content delivery and DDoS protection, custom domains for school websites, and a bot check on school websites’ assistant and on connector sign-up, which receives the visitor’s IP address, global edge.
  • Sentry: application error and performance monitoring. Request bodies, cookies, and sign-in tokens are stripped before sending, and the web app’s occasional session replays mask all on-screen text and form inputs and block images, United States.
  • PostHog: product analytics and monitoring of AI features. In the apps, events use a pseudonymous numeric ID and carry no message, record, or AI prompt content and no child personal information. Web-app session replays show the app’s own interface text, such as menus, headings, and buttons, so we can see which screen someone was on; they mask form inputs and the text of records about children and families, such as names, messages, and health and incident details, and block images. The one exception is feedback you choose to send from the apps: what you type, the category you pick, and the screen you were on are sent to PostHog, with that ID, so our team can read it. We ask people not to include children’s names or other personal details. Clear Day for Parents uses a pseudonymous ID derived from the caller’s IP address and user agent under a key that changes every day, and its events carry no conversation content (section 14). Analytics on this website and on the school websites we host are described in section 13. Internal tools used only by our staff also report the staff member’s request and the tool’s result, which can include an account’s email address or a website visitor’s IP address when staff look one up. United States.
  • DocuSign: e-signature provider for enrollment agreements and other documents a school sends for signature. Schools connect their own account via OAuth, United States.
  • Dropbox Sign: e-signature provider for the same documents, with the same per-school OAuth model as DocuSign, United States.
  • Giphy: GIF search in the message composer. Only the typed search term is sent, and no roster or child records. A GIF added to a message is loaded from Giphy, which receives the IP address of each person who views it, global.
  • Apple: WeatherKit forecasts for the staff morning view and the parent home screen, which receive the school’s approximate coordinates (from its city, state, and ZIP code) and time zone only, and, in the iPhone app, address suggestions as a staff member types the school’s address, United States.
  • OpenStreetMap / Nominatim: geocodes a school’s city, state, and ZIP code to coordinates for the forecast (no roster or child records), and serves the map tiles for the public childcare directory, which receive the visitor’s IP address, global.
  • Google: web fonts for the app and for school websites, which receive the visitor’s IP address and browser details, global.
  • Pexels: stock photos in the school website builder. The photo picker loads previews from Pexels, which receives the signed-in user’s IP address; published school websites do not load images from Pexels, global.

Customer data is stored on US infrastructure.

We also use these service providers for our own business: Google Workspace, for our team’s email, including sales outreach; Slack, for our team’s notifications of new sign-ups, which include the program’s name and plan; and OpenAI, for sorting replies to our sales outreach and preparing sales research. Resend and Anthropic also handle our sales outreach (section 12).

The list of subprocessors, with regions and purposes, also lives on our security page. Email [email protected] to be notified when the list changes.

7. Data Retention

We keep customer data while the program uses the Service, except for the short-lived records listed below. Canceling a plan ends billing and does not delete data, apart from those records. You can delete your own account, and we delete data on request, as described below.

  • When a program cancels its plan: billing stops at the end of the period already paid for, or when a refund is issued. A program on Plus returns to the Free plan and keeps its website and leads. A program whose Run or Grow plan ends keeps its account and its data, and can choose a plan again. The program’s data stays in place until the program asks us to delete it, apart from the short-lived records below.
  • Short-lived records:
    • Absence reports that families send through a program’s absence line are deleted 7 days after they are sent, unless the program has an active Run or Grow plan.
    • Contact details given when booking a sign-up sheet are removed 30 days after the event, and the sheet is deleted 365 days after it.
    • The contact details in a free-waitlist entry are removed 30 days after the entry is taken off the list.
    • Family responses to a program’s custom tools are deleted 180 days after they are sent, and what staff enter in a custom tool is deleted 400 days after it last changes.
    • Call-recap transcripts and the summaries drafted from them are deleted 90 days after they are recorded; notes saved from them stay in the family’s record.
    • Data export files are deleted 7 days after they are ready.
    • The contact details in a report about a listing in our childcare directory are removed 90 days after the report is closed.
    • Sign-in sessions are deleted 90 days after they expire, and the IP addresses recorded with them are shortened after 30 days.
  • When someone deletes their own account: deletion takes effect the moment it is confirmed. We sign the account out everywhere, then replace the name and email address with a placeholder and disable the password in a single step. There is no grace period, no export window afterwards, and no way to restore the account. Content the person added, such as messages they sent, stays in the program’s records. Each parent and each staff member deletes their own login; a program’s only admin emails us instead.
  • What a program still holds: deleting a parent’s account does not delete their child’s records, which the program holds. To have those removed, ask the program or email us as described below.
  • Deletion on request: a program can ask us to delete its data, and anyone can ask us to delete the data we hold about them, by emailing [email protected]. We confirm the request and complete deletion within 30 days. We handle a request about records a program holds together with the program. Deleting a program’s data includes the photos, milestones, and messages its families read in their own accounts. A family’s own login is not deleted with the program.
  • Email suppression list: if an email we send bounces or is marked as spam, or the recipient unsubscribes, we keep the address on our suppression list so we do not send to it again.
  • Backups: deleted data remains in database backups until those backups expire on their regular cycle, and in our service providers’ systems until their own retention periods end.
  • Tour requests made through an AI assistant: see section 14.
  • Logs and security records: access logs are kept for up to 12 months. Records of failed sign-in attempts and audit records of administrative, billing, consent, and privacy-request activity, which can include IP addresses, are kept longer. Logs and security records are used only to operate and protect the Service.
  • Legal holds: where the law requires, we may keep limited information for the period it requires.

8. Sharing of Information

We do not sell personal information and do not share it for cross-context behavioral advertising. We disclose customer data only (a) at the program’s direction, such as content it publishes on its public website or calendar feed, (b) to the subprocessors listed in section 6, which process it to provide the Service, (c) where required by law or to respond to lawful process, (d) when a signed-in staff member has it returned to their own AI assistant account through a Clear Day connector (section 14), and (e) as part of a merger, acquisition, or sale of all or part of our business. We do not run advertising trackers on this website.

9. Security

Customer data is encrypted in transit and at rest on US-based cloud infrastructure with role-based access controls. Parents see only their own child’s records and the photos and posts shared with their family. Staff see only the schools they belong to, and no school’s data is visible to another school. Changes to billing, to billing policy, and to key parts of a child’s record (name, enrollment status, classroom, street address, allergies, medications, and immunizations) are recorded with who changed what and when. Full card and bank account numbers are entered directly with Stripe and never pass through our infrastructure. To provide support, authorized members of our staff can sign in as a user; each such session requires recent multi-factor authentication, ends within 30 minutes, and records each change made during it. More detail is on our security page.

10. Your Rights

Where applicable law gives you privacy rights, those rights apply. Under the California Consumer Privacy Act, as amended by the CPRA, you may exercise the following rights:

  • Right to know: request the personal information we hold about you or your child.
  • Right to delete: request deletion of that information.
  • Right to correct: request correction of inaccurate information.
  • Right to opt out of sale or sharing: we do not sell or share personal information. If your browser sends a Global Privacy Control signal while you are signed in to the Clear Day web app, we record an opt-out on your account and our servers stop sending analytics events about you; analytics sent by the apps themselves continue. You may also send us an opt-out request, and we will confirm it in writing.
  • Right to limit use of sensitive information: request that we limit our use of sensitive personal information.

We will not discriminate against you for exercising these rights. You may use an authorized agent to make a request for you; we may ask the agent for proof of authorization and verify your identity with you directly.

To submit a request, email [email protected]. You do not need a Clear Day account to submit a request. We confirm receipt within 10 business days and provide a full response within 45 days (15 business days for a request to opt out or to limit the use of sensitive information). We verify your identity before fulfilling a request, and we handle a request about records a program holds together with the program.

If you are a parent at a Clear Day program, you may also contact your program directly.

11. Updates

We may update this policy from time to time. Changes will be posted with a revised “Last updated” date at the top of this page. If a change materially affects how we use information, we will email account administrators in advance.

12. Prospective Customers

We contact childcare programs about the Service using the contact details they publish in public licensing records and information from their own public websites, such as the names and roles of staff listed there. We store the replies we receive. We send this outreach through Google Workspace and Resend, draft it with Anthropic, and sort replies with OpenAI and Anthropic.

If you start signing up for Clear Day and do not finish, we keep the email address you entered and how you reached the sign-up page (such as the referring page and campaign tags), and we may follow up about your sign-up.

Recipients can unsubscribe through the link in our bulk outreach emails, or by emailing [email protected]. We keep a record of each unsubscribe so we do not contact that address again. These records are not customer data.

13. Cookies and Similar Technologies

On this website, we use PostHog for analytics. Its browser library stores a random identifier in a cookie or in your browser’s local storage so that repeat visits can be recognized, and records the pages you view and interactions such as clicks (including which sign-up, demo or contact button you used), how far you scroll down a blog post, the number of results and the length, not the text, of a help-center search, and that a form showed an error (never what you type into a form or a search box), along with your IP address and browser details. Visitors stay anonymous: we do not build a profile for a visitor unless they sign in to the Clear Day web app. This website and the Clear Day web app use the same analytics project, and the cookie is shared across useclearday.com and app.useclearday.com, so if you sign in to the web app in the same browser, these visits can be linked to your pseudonymous Clear Day user ID. We do not use cookies or similar technologies for advertising.

If you choose to send feedback from the Clear Day web or mobile app, what you type is sent to PostHog, along with the category you picked, the screen you were on, and your pseudonymous user ID. We ask that you not include children’s names or other personal details.

On the school websites we host, at clearday.school addresses and on schools’ own domains, we also use PostHog, so the school and Clear Day can see how the website is used. Its browser library stores a random identifier in a cookie or in your browser’s local storage so that repeat visits can be recognized, and records the pages you view, where your visit came from (such as a search engine, the Clear Day directory or a QR code the school printed), and whether you tap the call, email or directions links, open the website’s assistant, or start or send an inquiry, along with your IP address and browser details. It does not record what you type and does not record session replays. These events are kept in a separate analytics project from the one for this website and the Clear Day app. If you send the school an inquiry, or the website’s assistant passes your details to the school, we link that identifier to a pseudonymous inquiry ID, never to your name, email address, phone number or anything about your child. The school sees totals, such as how many people visited and where they came from, not individual visitors. School websites honor Global Privacy Control and Do Not Track: when your browser sends either signal, analytics does not run.

Some pages include content from other providers that receive your IP address, such as the map tiles in our childcare directory (OpenStreetMap). Their practices are governed by their own policies.

In the Clear Day app, the web app keeps your sign-in refresh token in your browser’s local storage so you stay signed in, and stores interface preferences there, such as theme, recent searches, and dismissed tips. Public forms that families fill in, such as registration and absence forms, keep a draft in the browser’s local storage for up to 12 hours after the last edit. The mobile app keeps recently viewed information and drafts on your device and removes the recently viewed information when you sign out. In the web app, PostHog stores an identifier in a cookie. Sentry records session replays of about 10% of web-app sessions and of every session that hits an error, and those replays mask all on-screen text and form inputs and block images. PostHog session replays show the app’s interface text but mask form inputs and the text of records about children and families, and block images.

This website honors Global Privacy Control and Do Not Track signals: when your browser sends Global Privacy Control, analytics does not run, and when it sends Do Not Track, analytics does not record your visit. We do not currently offer a separate opt-out control. Clearing cookies and local storage resets the identifier.

14. AI Assistant Connectors

This section covers Clear Day’s two connectors for AI assistants such as Claude and ChatGPT. Clear Day for Directors lets signed-in school staff ask about their own school. Clear Day for Parents needs no sign-in and helps adults look for child care and ask for a tour. Neither connector returns a child’s name, birth date or exact age, and connector analytics carry no conversation content.

The assistant platform processes what you type and what a connector returns under your own account with that provider and under that provider’s terms and privacy policy. It is not our subprocessor, even when that provider is Anthropic.

Clear Day for Directors

A staff member connects their own assistant account by signing in to Clear Day, or by creating an account during sign-in. The connector then reaches only the schools that staff member belongs to, with what their role and the school’s plan allow. The school controls its lead and family data, and we process it for the school. The connector can return:

  • The school’s profile (such as contact details, hours, ages served, license details and programs), its plan and what it has used this month.
  • The school website’s status and what is blocking it, and its results: counts of inquiries, tour requests and waitlist sign-ups over the last 30 days.
  • Enrollment inquiries, with only the parent’s first name and the child’s age group (infant, toddler, preschool or pre-K), plus the inquiry’s stage, source, desired start month, program, any upcoming tour time, when it was created and moved to its current stage, and why it closed.
  • Tours (time, type, status and the parent’s first name), open tour times, the school calendar and closings.
  • On Run and Grow, and during a trial, school-wide aggregate summaries, such as headcount and capacity, staffing against ratio, billing health without per-family amounts, and paperwork and inspection readiness. Grow and trials add enrollment pipeline and withdrawal summaries.

It never returns children’s names, birth dates or exact ages, individual health or incident details, photos, inquiry messages, or notes and messages that families or staff write. It does return text the school publishes or schedules, such as the school’s description, program names, curriculum skill names, and calendar event titles.

Four actions change something in Clear Day: booking a tour (which emails the parent a confirmation when an email address is on file), adding a calendar event (which families can see, and which also appears on the school’s public calendar feed if the school has one), moving an inquiry to another stage, and saving a draft change to the school website (which is not published until a staff member publishes it in Clear Day). We mark each of these as an action that makes changes and instruct the assistant to describe the change and wait for the staff member to confirm before it runs. We log each call with the staff member’s account, the school, and the tool used.

To disconnect, use Settings → Connected assistants in Clear Day on the web, which ends the assistant’s access on our side. Removing the connector only in the assistant’s settings may not end its access to Clear Day. Access also ends at once if you change or reset your password, change your email address, all your sessions are signed out (including by our staff), your account is suspended or deleted, or you are removed from the school.

Clear Day for Parents

Clear Day for Parents is for adults looking for child care, such as parents and guardians. It needs no sign-in and has no Clear Day account behind it. It can find licensed child care providers, show a provider’s details and compare providers, using public state licensing data; show open tour times at a school that uses Clear Day; and ask for a tour, as described below.

The search criteria you give, such as location, age group, schedule and whether you use a child care subsidy, are used to answer your request. Our logs can record which tool was used, and our analytics record the names of the inputs used, but neither records the values you give. If the assistant shares your approximate location, we keep only the city or region and discard anything more precise. The connector does not ask for a child’s name, birth date or exact age.

To disconnect, remove the connector in the assistant’s settings.

Tour requests

When you ask for a tour through an assistant, the assistant sends us your first name, last name, email address and the tour time you chose. We email you a link to confirm, through Resend. Nothing reaches the school until you open that link and confirm. On the confirmation page you choose your child’s age range (infant, toddler, preschool, pre-K, or expecting); you are not asked for your child’s name. When you confirm, the school receives your request as an enrollment inquiry with your name, email, the tour time and the age range. We control the request until then; after that, the school controls the inquiry and keeps it under its own practices.

The confirmation link expires no more than 24 hours after it is sent. A request you do not confirm expires and never reaches the school. Whether or not you confirm, a daily job removes your name and email address from our own copy of the request two to three days after you made it, and deletes the remaining record (the school, tour time, status and dates) 30 to 31 days after you made it.

To have a tour request deleted sooner, email [email protected]. After you confirm, you can also ask the school to delete your inquiry.

Connector analytics

We use PostHog to measure how the connectors are used: which tool was called, how long it took, whether it failed, which assistant app and version made the call, and the names, not the values, of the inputs used. These events carry no input values, no tool results and no error text. For Clear Day for Directors, events use your pseudonymous Clear Day user ID and, for a single-school account, your school’s numeric ID, and include the assistant app’s user agent string. For Clear Day for Parents, the ID is a keyed hash of your IP address and user agent under a key that changes every day, and the IP address and user agent themselves are not sent to PostHog.

Global Privacy Control:

  • Clear Day for Parents: a request that carries a Global Privacy Control signal sends no connector analytics.
  • Clear Day for Directors: no connector analytics are sent once your Clear Day account has an opt-out of sale or sharing on record (see section 10). That opt-out is recorded automatically when your browser sends a Global Privacy Control signal while you are signed in to the Clear Day app. A signal sent with the connector request itself is not recorded.
  • Tour requests: we record an event at each step of a tour request (made, email sent, email failed to send, link opened, time no longer available, confirmed, or refused). Each is tagged with the school and, depending on the step, a random request ID, the request’s status or the reason it was refused, never your name or email. These events are recorded regardless of a Global Privacy Control signal.

15. Contact

General privacy questions: [email protected]. Security and vulnerability reports: [email protected]. For everything else, [email protected].

By mail: The Gully Goose Co, LLC, 8401 Mayland Dr, Ste 11787, Richmond, VA 23294.

Last updated: October 19, 2026