The platform's privacy policy for private childminders

Version 1.0 · Last updated: 21.08.2026

This is an English translation of our Danish privacy policy, provided for your convenience. In case of any discrepancy, the Danish version applies. Please note that the data processing agreement is available in Danish only, and the Danish text is the legally binding version.

This privacy policy describes how the Min Børnepasser platform processes personal data about you as a childminder when you create an account and use the app.

1. Who is responsible?

The platform is operated by:

Ukrudtskrigeren ApS
CVR (Danish company reg. no.): 45779971
Email: apps@ukrudtskrigeren.dk
Address: Kløvervænget 37, 6100 Haderslev, Denmark

In this privacy policy we are referred to as "the platform", "we", "us" or "Min Børnepasser".

2. What is the platform's role?

Min Børnepasser provides a digital platform for private childminders.

As a childminder/childcare arrangement you are responsible for your own relationship with parents and children, including the privacy policy you show to the parents.

When the platform processes information about children and parents on your behalf in the app, the platform acts as a data processor for you/the childcare arrangement. You/the childcare arrangement are the data controller for this information.

You must therefore accept a data processing agreement with the platform before you use the app to process information about children and parents.

3. What information does the platform process about you?

We may process the following information about you:

  • Name
  • Email address
  • Phone number, if you enter it
  • Role in the app, e.g. childminder or admin
  • The name of the childcare arrangement
  • Link to a childcare arrangement/organisation
  • Login and user details
  • Technical information about your use of the app
  • Acceptance of the platform's privacy policy
  • Acceptance of the data processing agreement
  • Creation and editing of the childcare arrangement's privacy policy
  • Support enquiries and technical information during troubleshooting
  • Subscription and billing information, including the selected plan, billing interval, invoice and payment status, and necessary transaction details

Providing the information is voluntary, but certain information (such as name and email address) is necessary in order to create and use an account. Without it you cannot use the app.

4. What information is processed on your behalf?

When you use the app, the platform may process information on your behalf about children and parents, for example:

  • The child's name
  • Date of birth
  • Basic details
  • Absence records: sick, absent, holiday, day off and well again
  • Drop-off and pick-up times
  • Contact details for parents
  • Contact details for approved pick-up persons
  • Doctor/medical practice and phone number (for use in emergencies)
  • Messages between you and parents
  • Announcements
  • Calendar information
  • Notices and practical messages
  • Acceptance status for parents' acceptance of your privacy policy
  • Photos of children, if your arrangement's plan includes the photo feature

The app only records that a child has been reported sick or well — that is, a practical absence status. The platform does not process information about what is wrong with the child, diagnoses, symptoms or other health details.

The processing is therefore deliberately limited to what is necessary for the practical running of the childcare.

This information is processed on your behalf and under the data processing agreement between you/the childcare arrangement and the platform.

If your arrangement's plan includes the photo feature, the platform processes photos of children on your behalf. Photos on the notice board ("from the day") are shared with the parents in the arrangement and are deleted automatically after 7 days. On plans that include the child's own folder, photos may be stored during the childcare period; when a child leaves, the photos are made available to the parent via a download link valid for 30 days, after which they are deleted. The photos are stored in the EU (Frankfurt). As data controller, you are responsible for obtaining the necessary consent for photos of the children through your own privacy policy to the parents (Article 6(1)(a) of the GDPR).

5. What is the information used for?

The information is used to:

  • Create and administer your user access
  • Link you to your childcare arrangement
  • Enable the app's features
  • Administer children, parents, calendar, messages, absence and basic details
  • Send relevant notifications
  • Document acceptance of privacy policies and the data processing agreement
  • Allow you to create your own privacy policy for the parents
  • Ensure technical operation, security and troubleshooting
  • Provide support
  • Administer subscriptions, invoicing, payments and bookkeeping

6. Legal basis

For the platform's own processing of information about you, the processing is typically based on:

  • Contract (Article 6(1)(b)) — the steps necessary to create your account and provide the app to you.
  • Legitimate interest (Article 6(1)(f)) — our legitimate interest in operating and administering the platform, protecting it against misuse and errors, maintaining operational stability and developing the service further. We assess that this processing does not override your rights.
  • Legal obligation (Article 6(1)(c)) — where we are required to retain certain information, for example documentation of agreements entered into.

When the platform processes information about children and parents on your behalf, this is done under the data processing agreement and your documented instructions as data controller.

7. Your own privacy policy for parents

As a childminder you must create or insert your own privacy policy for the parents.

The app may provide a template, but the template is only a suggestion.

You are responsible for:

  • Ensuring the privacy policy fits your specific childcare arrangement
  • Ensuring the parents receive the information they are entitled to
  • Ensuring the text is accurate and up to date
  • Ensuring you have a lawful basis for your processing of information

To limit the amount of sensitive information, we recommend that in your own privacy policy or guidelines you ask parents not to write unnecessary health details (such as diagnoses) in messages.

The platform does not provide legal advice and does not take responsibility for your own privacy policy.

8. Data processors and sub-processors

The platform uses suppliers for app operations, hosting, database, login, notifications, technical infrastructure, subscriptions, invoicing and payments.

Examples may include:

  • Google Firebase / Google Cloud (hosting, database, login) — with servers located in the EU/EEA (photos and files in Frankfurt, Germany; database in Google's EU region in Belgium and the Netherlands)
  • Apple and Google in connection with app distribution and push notifications
  • Alunta for subscription administration, invoicing, payment status and bookkeeping records
  • Stripe as payment provider for online and automatic payments. Stripe processes payment and transaction data and may act as an independent data controller for certain processing, such as legally required checks and fraud prevention
  • Any suppliers used for support

Alunta and Stripe only receive the customer, subscription, invoice and payment information necessary for these purposes. They do not receive information about children or parents from the app. We do not receive or store your full card details; they are handled directly by Stripe.

If the platform uses sub-processors in connection with processing on your behalf, this is set out in the data processing agreement or its appendices.

9. Data location and transfers to third countries

App information is generally processed and stored within the EU/EEA: photos and files are located in Frankfurt (Germany), while the database is located in Google's EU region (Belgium and the Netherlands). Alunta states that its servers are located in the EU.

In certain cases — for example support, operations, push notifications or payments through Stripe — a supplier may process information outside the EU/EEA. Where this happens, the transfer is based on a valid transfer mechanism, typically the European Commission's Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework.

10. Storage and deletion

Information is only kept for as long as necessary:

  • Account details are deleted no later than 30 days after your account is closed or you stop using the app.
  • Documentation of acceptances (privacy policy and data processing agreement) is kept for up to 5 years in order to document the agreements entered into.
  • Information we are legally required to retain is kept for the statutory period.
  • Customer, invoice and payment information is retained during the customer relationship and afterwards for the period required under bookkeeping and other applicable law.
  • Photos of children (where the photo feature is used): photos on the notice board are deleted automatically after 7 days; photos in the child's own folder are made available to the parent when the child leaves, via a download link valid for 30 days, and are deleted afterwards.

When a childcare arrangement ends, closure, export and deletion of the information processed on your behalf are decided in accordance with the data processing agreement.

11. Automated decisions

The platform does not use automated decision-making or profiling with legal effect or similarly significant impact on you.

12. Your rights

Under data protection law you have, among others, the right to:

  • Access to information about you
  • Rectification of inaccurate information
  • Erasure in certain cases
  • Restriction of processing
  • Object to processing
  • Data portability in certain cases

To the extent that processing is based on consent, you can withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

Contact: apps@ukrudtskrigeren.dk

13. Complaints

You can complain to the Danish Data Protection Agency (Datatilsynet) if you believe that your information is processed in breach of the rules.

Datatilsynet — www.datatilsynet.dk

14. Error and crash reporting

The app uses Firebase Crashlytics (Google) to record technical errors and crashes so we can find and fix them. A report contains technical information about the device (model, operating system, app version) and about the error — never names, email addresses, messages or photos.

The report is linked to a pseudonymous user ID so we can see whether the same user is affected repeatedly. The information is processed by Google as a data processor under the same terms as the app's other Firebase services and is not used for marketing or tracking.

Processing may involve transfer to Google servers outside the EU/EEA, protected by frameworks approved by the European Commission (the EU-U.S. Data Privacy Framework and standard contractual clauses) — see also the section on data location above.

15. Two-factor sign-in (SMS)

As a private childminder your account must be protected with two-factor sign-in. The mobile number you enrol is stored in our sign-in system (Firebase Authentication, Google) and is used solely to send one-time codes at sign-in.

The number is not used for marketing and is not shared. It is deleted together with your account.

16. Changes

We may update this privacy policy. If we make changes, you will be notified in the app, and if the changes require new acceptance, you will be asked to accept the new version before you can continue using the app.

← Back to the home page