Last updated: October 28, 2026
Your privacy is important to us. It is Enrichment.kids’ policy to respect your privacy and comply with applicable laws and regulations regarding any personal information we may collect about you, including through our website at https://enrichment.kids and any related services we operate (collectively, the “Service”).
Personal information is any information about you that can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and information about how you use a website or online service.
In the event our Service contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy. This Privacy Policy does not apply to any of your activities after you leave our Service.
If you register through an Enrichment.kids order form embedded on a Provider's website, that form is part of the Service and this Privacy Policy applies to what you submit in it. The Provider's own website is covered by the Provider's privacy policy.
By using our Service, you accept the terms of this Privacy Policy and our Terms of Service.
We collect various types of personal information to operate our Service effectively. Our goal is to be transparent about the data we collect and how we use it.
When you create an Enrichment.kids account, we collect personal details such as your name, email address, and password. If you register or sign in with Google, we receive your name, email address, and a Google account identifier from Google, which we use to recognize you when you sign in with Google again. If you change your email address, we keep the request until you confirm it from the new address, and we notify your previous address of the change. We use this information to create and manage your account, authenticate your identity, and communicate with you about the Service.
When you make a purchase or enroll in a Program through the Service, payment information is collected and processed by our third-party payment processor, Stripe. Enrichment.kids does not store your full credit card number, bank account number, or other sensitive payment credentials. We store only Stripe-generated reference identifiers and limited card details, such as the card brand, the last four digits and, for a card a Provider is authorized to charge, its expiration month and year. These let us show you which card was used and process later charges you have authorized, such as the later payments of a payment plan or the monthly charges of a monthly enrollment.
We also keep the record of each payment, scheduled payment, refund, and payment dispute connected to your registrations, and of any application fee you pay. If a Provider gives you account credit, we record it with that Provider, along with when it was given, used, or removed and any reason the Provider gave.
If you save a payment method on the Service, it is held by Stripe on your account's Stripe customer record; Enrichment.kids does not store the card or bank account number. A saved payment method is charged only as you have authorized: for the later payments of a payment plan or monthly enrollment you chose at checkout, and, if you approve a Provider's request to keep a card on file, for charges that Provider makes when you ask it to. For each card-on-file authorization we keep the words you agreed to, when you agreed, your IP address and browser, and the card's brand, last four digits, and expiration date. The Provider sees which card it may charge, never the card number. You can view, add, or remove your saved payment methods, and withdraw a card-on-file authorization, through your account dashboard at any time.
If you are a Provider, we collect additional information to operate the Service, including your business name, contact information, business address, tax identification number (EIN) where you provide one, and Stripe Connected Account details. All payment processing for Providers is handled through Stripe Connect, and you should review Stripe’s Privacy Policy (https://stripe.com/privacy) for how they handle your data. Stripe may send us risk signals about your Connected Account, including fraud-risk levels, which we use to protect customers and which may lead us to pause new payments to your organization. Your organization's own saved payment methods, used for your subscription and fees, are held by Stripe.
If a Provider invites you to its team, we keep your name, email address, your role (owner, admin, staff, or finance), the sessions you are assigned to, and the invitation. We record the actions you take on the Provider's behalf, such as attendance entries, refunds, notes, and corrections, with your name.
When you register a child for a Program, we collect information you provide during the enrollment process. This includes your child's name and date of birth, which we ask for each child you add to your account. A child's date of birth is stored encrypted. We use it to check the child's age against a session's age range, and Providers see the child's age rather than the date of birth, unless a form they ask you to sign shows it. It also includes other details requested by the Provider's registration forms, such as emergency contacts, health or medical information, allergies, and dietary restrictions, and any files a form asks you to upload, such as photos or PDF documents (for example, a vaccination record or an insurance card). If you apply for a place in a session or for a scholarship, we keep your application, your child's name at the time, and its outcome. If you join a waitlist, we keep the contact name, email address, phone number, number of participants, and any note you give. This information is collected on behalf of the Provider and is shared with them to facilitate enrollment and program administration. See Section 3 (“How We Share Your Information”) and Section 6 (“Children’s Privacy”) for more details.
When you accept our Terms of Service and agree to sign forms electronically, we record which account agreed, to which version, when, and the IP address and browser (user agent) used. Each form you then submit to a Provider is your electronic signature on it. For each submission we keep the form's questions, your answers (including any signature you draw), the account that signed, the time, your IP address, your browser, and the time zone your browser reports, so the signed form can be reproduced later. We email you a copy of each signed form. We also record each download of a signed form and each opening of a file uploaded to a form: who it was, when, and from which IP address and browser.
A Provider's team can keep information about its customers in the Service, on the Provider's behalf: notes about you or your child (which the team can mark important or show to its staff at pickup), labels (tags), corrections of your form answers (your own answer is kept as you submitted it), absences it plans for your child, and a record of the messages it sends you. Notes, tags, and corrections are visible only to that Provider's team. A note reaches you only if the Provider chooses to email it to you.
Some Providers take attendance through the Service. For those Providers, we collect and keep, on the Provider’s behalf:
We use this information only to let the Provider take attendance, release children to the people authorized to collect them, keep the record of each day, and inform parents and guardians where they have chosen to be informed. Photos are used only to help the Provider’s staff recognize a pickup adult. We do not use facial recognition.
We automatically collect certain information when you use the Service, including your IP address, browser type, device information, pages visited, and how you interact with the Service. We use your approximate location, which Cloudflare derives from your IP address, to show activities near you, and your browser may keep it to speed up later visits. If you allow your browser to share your precise location, we send it to our search and map providers for that search but do not store it. To manage very busy periods, such as a popular registration opening, our edge service gives your browser a random visitor identifier and keeps your place in line and the networks your requests come from. We also keep security logs, such as sign-in attempts and rate-limit events, which include IP addresses. This data helps us analyze usage patterns, improve the Service, and maintain platform security.
We keep a log of each email we send, including the recipient, the subject, and whether it was delivered, but not its content. Enrichment.kids also keeps a copy of most transactional emails it sends, but not of the emails that carry your signed forms. If an email to you bounces permanently or is reported as spam, or you unsubscribe from a Provider's messages, we keep your email address on a suppression list so those messages are not sent to it again.
If you interact with our platform through social media, we may receive data based on your privacy settings with that network.
When you use our Service, cookies and similar browser storage may be used to uniquely identify your session, enable authentication, and enhance navigation. We use them for essential Service functions including keeping you logged in, maintaining your shopping cart, protecting the Service, holding your place during very busy periods, and keeping a Provider's kiosk device signed in. We also use analytics cookies and advertising measurement cookies, which are on by default and which you can turn off at any time. Our Cookie Policy describes the cookies and browser storage we use and how to control them.
We use third-party analytics and session recording tools to understand how users interact with the Service. These tools may record interactions such as mouse movements, clicks, page navigation, and scrolling behavior. The purpose of this data collection is to identify usability issues, understand user behavior patterns, and improve the Service.
We take measures to ensure that sensitive personal information is excluded from session recordings. Everything typed into form fields is masked, and our analytics tool is configured to redact other sensitive text shown on screen, such as children's names and dates of birth. When you are signed in, analytics data is linked to your account. Analytics do not run in order forms embedded on Provider websites or on a Provider's kiosk devices. This data is used exclusively for service improvement and is not used for advertising purposes or user profiling unrelated to service optimization.
You may opt out of analytics, including session recording, at any time by selecting the “Your Privacy Choices” link in the site footer and turning off Analytics & performance, or by contacting us at [email protected]. Opting out will not affect your access to the Service.
If you arrive at the Service from one of our Google ads and advertising measurement is on, we keep the ad-click identifier in a cookie for up to 90 days. If you sign in, we link it to your account. If you then sign up as a Provider, finish setting up as a Provider, or buy a Provider subscription or listing promotion, we report that conversion to Google with the click identifier so we can measure whether our ads work. Ad personalization is disabled. We clear the identifier from your account 120 days after the click, and we delete the cookie if you turn advertising measurement off.
We use automated tools, including artificial intelligence, to generate and enhance listing content such as program descriptions. These tools process publicly available information from Provider websites, which may include business contact details a Provider publishes there, such as a business email address or phone number, to create and maintain accurate listings. They use AI models from third-party providers [TO CONFIRM: name the AI model providers currently serving the listing-content routes], reached through Cloudflare. This processing does not involve the personal information of parents, guardians, or children.
We currently do not respond to Do Not Track browser signals, as there is no consistent industry standard for this. We do honor the Global Privacy Control signal: if your browser sends it, analytics and advertising measurement are turned off automatically.
For mobile users, we may collect device-related information depending on your device settings. Photographs uploaded to the Service may contain metadata, including location data, which may be accessible to others if you share content on the Service.
We may share the personal information you provide in the ways described below.
When you register for or enroll in a Program, information you provide during the enrollment process — including your name, email address, and registration form responses (which may include your child’s personal information) — is shared with the relevant Provider to facilitate enrollment and program administration. Providers are independent third parties with their own data practices. We encourage you to review a Provider’s privacy practices before sharing information with them. Providers are contractually required to handle personal information, particularly children’s information, in compliance with applicable laws.
Within a Provider, what each team member sees depends on the role the Provider gives them. Owners and admins can see the Provider's customers, registrations, and forms. Staff see only the customers, registrations, forms, and attendance of the sessions they are assigned to. Finance members see the Provider's sales, payout, and billing reports. A Provider sees only its own relationship with you, never your registrations, forms, or notes with other Providers.
Attendance and pickup information is shared only with the Provider whose Program it concerns. A pickup list is shared only with the Provider whose form asked for it, and its photos are not included in any export.
We share information with third-party service providers who help us operate the Service. These include:
These service providers access personal information only as necessary to perform their functions and are obligated to maintain confidentiality.
We use internal business tools, including Zoho, for customer relationship management, sales operations, and business analytics. Information such as Provider business details and contact information, including contact details published on a Provider's website, may be processed through these tools for operational purposes.
Your information may be shared with third parties at your direction, such as when you sign up for a Program or interact with a Provider through the Service.
If you share content that is publicly visible on the Service (such as Provider listings or profile information), that content may be viewed by the general public and indexed by search engines. Public listing information is also made available to AI assistants through a read-only interface, which provides only what public listing pages show and no information about parents, guardians, or children.
In the event of a merger, acquisition, sale of assets, or similar business transaction, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Enrichment.kids, our users, or the public.
We may share aggregated or de-identified data that cannot reasonably be used to identify you.
To stop receiving promotional emails, use the “unsubscribe” link in those communications. Messages a Provider sends you through the Service include an unsubscribe link that stops that Provider's messages. You cannot opt out of service-related communications (such as billing notices, payment confirmations, enrollment confirmations, payment failure alerts, upcoming charge reminders, notices of a change to a monthly price, and yearly reminders of a continuing monthly charge) while you maintain an account or have active enrollments.
You can update your account information, including your name, email address, and password, through your account settings. A new email address takes effect once you confirm it from that address. You can view, add, and remove saved payment methods, and withdraw a Provider's card-on-file authorization, through your account dashboard.
Where a Provider chooses to email guardians about attendance, we email you when your child is checked in or picked up, or released to someone not on your pickup list, unless you turn those emails off in your account settings. You can update or remove the adults on a pickup list from your registration at any time.
If you are listed as a pickup adult and want your details or photo removed, ask the parent or guardian who listed you, or contact us at [email protected].
You may opt out of analytics, including session recording, at any time through the “Your Privacy Choices” link in the site footer, or by contacting us at [email protected].
You may request deletion of your account by contacting us at [email protected]. Upon account deletion, we will delete or de-identify your personal information, except as required to comply with legal obligations, resolve disputes, or enforce our agreements, and except for signed forms (including files submitted with them), records of your acceptance of our Terms of Service and consent to sign electronically, card-on-file authorization records, payment records, and attendance and pickup records, which we keep as described in Section 8. Information that has already been shared with Providers (such as registration form data) is subject to the Provider’s own data retention practices.
Your data is stored on servers located in the United States, hosted by DigitalOcean. If you access the Service from outside the United States, you consent to the transfer of your data to the United States.
We implement reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS/TLS), secure authentication (httpOnly cookies, CSRF protection), access controls, and regular security monitoring. Payment information is handled by Stripe, which maintains PCI DSS compliance; Enrichment.kids does not store sensitive payment credentials.
Children's dates of birth, form answers and signed forms, files uploaded to forms, Providers' corrections of form answers, pickup photos, pickup codes, signatures taken at check-in and check-out, do-not-release documents, and the personal details in attendance, pickup, and absence records are stored encrypted. Uploaded files, photos, and documents are opened only through links that expire after a short time.
No security measures are completely fail-proof. Should a data breach occur, we will investigate promptly and notify affected individuals in compliance with applicable laws.
Enrichment.kids is a service designed for use by adults — specifically parents, guardians, and enrichment activity providers. We do not knowingly allow children under 13 to create accounts or use the Service directly. If a child under 13 attempts to create an account, we will delete the account and associated information promptly.
In the course of providing the Service, parents and guardians may submit information about their children when registering for Programs. This includes the child's name and date of birth, and other details and files requested by the Provider's registration forms (such as health information, allergies, emergency contacts, dietary restrictions, or a vaccination record). This information is provided by the parent or guardian, not by the child.
If a child’s Provider takes attendance through the Service, we also keep the record of when the child arrived and left and who they were released to, as described in Section 1 (“Attendance and Pickup Information”). A Provider's team may also keep notes about a child, as described in Section 1 (“Information Providers Keep About You”).
Children's personal information is used solely to facilitate enrollment in Programs, to check a child's age against a session's age range, and to share with the relevant Provider for program administration and participant safety. We do not:
Children’s personal information is shared with the Provider for whom the child is being enrolled. Providers are contractually required to use children’s information only for program administration, to comply with applicable privacy laws including COPPA, and to implement reasonable security measures. We do not share children’s personal information with any other third parties except as described in Section 3 (service providers necessary to operate the platform).
Parents and guardians may at any time:
If you believe that information about a child under 13 has been submitted to Enrichment.kids without proper parental consent, please contact us immediately at [email protected] and we will take steps to remove such information.
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
To exercise any of these rights, please contact us at [email protected]. We will verify your identity before processing your request. Residents of other states may have similar rights under their state's law and may make the same requests in the same way.
Enrichment.kids does not knowingly sell or share the personal information of consumers under 16 years of age.
We retain personal information for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:
Our Service may contain links to third-party sites, including Provider websites and external services. We are not responsible for the privacy practices of these sites, which have their own privacy policies and terms. We encourage you to review the privacy policies of any third-party sites you visit.
For questions about this Privacy Policy, to exercise your privacy rights, or for concerns about your or your child’s data, please contact us at:
Enrichment.kids, Inc.
Email: [email protected]
We may update this Privacy Policy from time to time. If substantial changes occur, we will notify you by email or through the Service and update the “Last updated” date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.