Privacy Policy
Protecting children's data is our highest responsibility. Here's how we handle it.
Last updated: April 2026
Overview
KinderConnect is a childcare management platform that processes personal data on behalf of kindergartens, nurseries, and childcare providers. We act as a data processor under GDPR, while the kindergarten organization is the data controller. This policy explains what data we process, how we protect it, and what rights you have.
What data we process
Children's data
We process children's names, dates of birth, group assignments, attendance records, daily activity logs, developmental notes, and photographs uploaded by authorized staff. This data is provided by the kindergarten and processed solely to deliver the service. We never use children's data for marketing, analytics, or any purpose beyond providing the platform.
Parent and guardian data
We process names, email addresses, phone numbers, and communication preferences for parents and guardians. This data is used for account authentication, in-app messaging, notifications, and invoicing. Parents can view and manage their data through their account settings.
Staff data
We process staff names, email addresses, roles, and activity logs within the platform. This data is used for authentication, access control, and operational features such as attendance recording and activity logging.
Organization data
We process kindergarten names, addresses, billing information, and configuration data. This data is used for account management, invoicing, and service delivery.
How we process data
All data is processed within the European Union. We use industry-standard security measures including 256-bit TLS encryption for data in transit, AES-256 encryption for data at rest, and strict access controls. Our infrastructure is hosted in EU-based data centers that comply with ISO 27001 and SOC 2 standards.
What we don't do
We don't sell personal data. We don't use children's data for advertising or profiling. We don't use third-party analytics trackers or advertising pixels. We don't share data with third parties except as necessary to provide the service (e.g., payment processing).
Cookies
We use only essential cookies required for authentication and session management. We don't use tracking cookies, advertising cookies, or third-party cookies. No cookie consent banner is needed as we only use strictly necessary cookies.
Third-party services
We use a limited number of third-party services to provide the platform: cloud hosting (EU-based), payment processing (Stripe, for invoicing features), and transactional email delivery. Each third-party processor is bound by a Data Processing Agreement and processes only the minimum data necessary.
Data retention & deletion
Kindergartens can delete individual child records, parent accounts, and staff accounts at any time through the platform. When an organization cancels its subscription, all associated data is permanently deleted within 30 days. You may also request full data export in a machine-readable format at any time. For deletion requests, contact us at contact@kinderconnect.online.
Children's privacy (special category data)
We recognize that children's data requires the highest level of protection. All processing of children's personal data is conducted under the lawful basis established by the kindergarten as data controller, typically parental consent or contractual necessity. Photographs of children are stored with strict access controls and are only visible to authorized parents and staff. We conduct Data Protection Impact Assessments (DPIAs) for any new feature involving children's data.
Your rights under GDPR
You have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to object to processing and to lodge a complaint with a supervisory authority. Parents can exercise most of these rights directly through the parent app. For any data rights request, contact your kindergarten or email us at contact@kinderconnect.online.
Changes to this policy
We may update this policy from time to time. We will notify all organization administrators by email of any significant changes at least 30 days before they take effect. The latest version is always available on this page.
Contact
Questions about privacy or data protection? Email us at contact@kinderconnect.online.