Privacy policy

Draft — requires review before public launch. The operator must confirm its identity, contact details, hosting arrangements, legal responsibilities and retention schedule before using this policy.

Information used by the platform

Accounts contain a display name, email address, password hash and optional role and state. Service accounts may contain child identifiers, preferred names, age ranges, room details, observations, support plans and resource collections. Do not enter unnecessary identifying information.

Free tools

Free observation and plan previews are produced in your browser and are not saved to the server. Use fictional information only. Printed or downloaded files are your responsibility.

Service records

Service administrators control membership and child-record assignments. Educators and viewers access assigned records according to their role. The service is responsible for authority to collect information, family communication and its retention decisions.

Hosting, email and logs

The operator must identify the hosting and email providers, hosting locations and any overseas processing before launch. The platform uses session cookies for sign-in and security, and stores rate-limit hashes and administrative audit events. Hosting systems may separately log network and request information. No advertising trackers or external AI processing are built into child-record pages.

Access, correction, export and deletion

Contact your service administrator about service records. Account holders can update their profile and request account removal after service responsibilities are transferred. Service administrators can export and delete service data after checking retention obligations. Hosting backups may retain prior copies until the operator’s backup retention period ends.

Security and incidents

Access controls, secure connections and private exports reduce risk but do not eliminate it. The operator must establish incident response, breach assessment, backup and recovery procedures before handling real records.

Questions and complaints

Use the contact form for privacy enquiries without including sensitive child information. The operator must publish its legal identity, direct privacy contact and complaint handling process before launch.