Children Data Safety
Built for families. Focused on safety.
Encryption & Transport
All data is encrypted at rest by Supabase and encrypted in transit via HTTPS/TLS.
Row-Level Isolation
Row-level security (RLS) ensures parents can only access their own data, or shared family data when invited.
API Protection
Rate limiting and input sanitisation protect against abuse, spam, and injection attempts.
Browser Security
Strict Content Security Policy (CSP) headers, clickjacking protection, and locked-down permissions keep the app secure in-browser.
No Tracking
No third-party tracking, no analytics cookies, and no advertising pixels.
AI Processing Transparency
Event extraction uses OpenAI for document/image processing. Data is not retained or used for training.
Parent Control
Parents can view, edit, export, and delete their data any time from Settings.
Data Location
All data is stored in Australia (Supabase region).