Gotita terms for nurseries and centers

Last updated: October 20, 2026

This is a translation. If there is any discrepancy, the Spanish version prevails.

These terms apply to nurseries, preschools, nannies and other centers or professionals (“the center”) that use Gotita with a center account to log what they do with the children in their care. By creating the center account or subscribing to Gotita Centers, the center accepts them. Families are covered by the privacy policy and the terms of use.

Gotita is provided by Jaime Gutiérrez Martín, a private individual resident in Spain (“we”). Contact: hello@gotita.app.

1. The service

• With a center account, the center can register children, organize them into groups, log feeds, diapers, sleep, meals, tummy time and medicines, write the daily note, keep attendance and, if the family allows it, send photos.
• Without a paid plan, a center can have up to 3 children at a time. For more, it subscribes to a Gotita Centers plan in the app. Prices, renewal and cancellation are managed by Apple in the App Store, under its terms. If the plan ends, the center keeps what it already has, but can't add children beyond 3.
• A center with more than 100 children subscribes by writing to us.
• Gotita is a tool for logging and sharing information with families. It isn't a medical records system and doesn't replace the judgment of the center's professionals, doctors or the family.

2. What the center agrees to do

• Use Gotita only to care for the children and communicate with their families.
• Have a legal basis for processing the data of the children it logs (usually, the contract with the family and, for health data, the family's consent) and inform families that it uses Gotita.
• Move children to their families using the app's codes, and not share codes with anyone who isn't part of the child's family.
• Take photos only of children whose families have given permission in the app, and only of the child concerned whenever possible.
• Protect access to its iPhones and its account, and only let staff who need them use them.
• Not log data that isn't needed to care for the child.
• Decide how long it keeps the data of children it no longer cares for, according to its obligations, and delete it from the app (“Delete the copy”) when it no longer needs it or when a family entitled to do so asks. Gotita doesn't delete it on its own while the center has the account.

3. Data processing agreement (art. 28 GDPR)

3.1. Roles. For the data of the children that the center keeps in its account (what it logs, the child's details, the groups and attendance), the center is the controller and we are the processor. For the data of the center's own account (email, name, plan) and for babies' data in families' accounts, we are the controller under the privacy policy.

3.2. Subject matter, duration and nature. Storing, syncing, displaying and deleting the data the center logs in Gotita, and sending notifications to families, for as long as the center has the account (section 3.9).

3.3. Data and data subjects.

• Data subjects: the children the center cares for, their relatives and the center's staff who use the account.
• Data: the child's name and date of birth; group; attendance; feeds, diapers, sleep, meals, tummy time and medicines; daily notes and alerts; photos, if the family gives permission; who logged each item.
• Some of it is health data (medicines, reactions, alerts such as “has a fever”).

3.4. Instructions. We only process the data on the center's instructions, which are its use of the app and these terms. If an instruction seemed to us to be against the law, we'll tell the center. We don't use the data for anything else: no advertising, no profiling and no training of artificial intelligence models.

3.5. Confidentiality. The people who may access the data on our side are bound by confidentiality. Today, that person is only the person responsible for the service, who only accesses it when needed to provide support or fix a problem.

3.6. Security. We apply the measures of art. 32 GDPR appropriate to the risk: data encrypted in transit (HTTPS/TLS) and stored encrypted; access rules that only let each baby's members read its data and the center read its own; Firebase App Check to reject connections that don't come from the app; codes checked on the server with a limit on attempts; photos without location data, without public links and deleted after 10 days; servers in the European Union (Madrid) wherever the provider allows it.

3.7. Sub-processors. The center authorizes us to use these providers, which process the data under contract with equivalent safeguards:

Transfers outside the European Economic Area are covered by the EU-U.S. Data Privacy Framework and/or the standard contractual clauses. If we add or change a sub-processor, we'll update this page at least 30 days in advance; the center can object by writing to us and, if we can't reach an agreement, stop using the service.

RevenueCat, which manages the center's plan, doesn't receive any children's data.

3.8. Assistance to the center. We'll help the center, as far as we're able:

• To handle requests from families (access, rectification, erasure…). Many can be handled in the app: editing or deleting entries and “Export what I logged”.
• To meet its obligations on security, breach notification and impact assessments, by giving it the information we have.
• If we suffer a security breach affecting its data, we'll tell the center without undue delay and, wherever possible, within 48 hours of becoming aware of it, with the information available.

3.9. Retention and end of the service.

• What the center keeps in its account (what it logged, the child details, attendance and groups) is kept for as long as the center has the account, including when a child leaves the center or their family deletes them from Gotita. The center can delete each child's data whenever it wants with “Delete the copy”.
• The photos and what the family logs aren't part of the center's copy: they follow the family's rules. Photos are deleted after 10 days, or sooner if the family removes the permission.
• If the center deletes its account, everything it keeps is deleted straight away. Before that, it can download what it logged for each child with “Export what I logged”.
• We don't keep copies after the center deletes the data, unless the law requires us to.

3.10. Information. We'll make available to the center the information needed to show that we comply with this agreement, starting with these terms and the privacy policy. If the center needs anything else, it can ask us in writing.

4. Liability

We take all reasonable care to make sure Gotita works and keeps the data, but we can't guarantee that it will always work without interruption. The center is responsible for what it logs and for how it cares for the children. Nothing in these terms limits any liability that can't be limited by law.

5. Changes and leaving

If we change these terms, we'll update the date at the top and, if the change is important, we'll announce it in the app in advance. The center can stop using Gotita whenever it wants: cancel the plan in the App Store and, if it wishes, delete the account from Settings.

6. Governing law

These terms are governed by Spanish law. If there are any differences between languages, the Spanish version prevails.