Security Summary

Last updated: September 2026

Encryption

All data encrypted at rest and in transit (TLS 1.2+).

Password hashing

Passwords hashed with bcrypt (12 rounds). We never store plain-text passwords.

No tracking

No third-party ad tracking, analytics, or profiling scripts on this site.

Infrastructure

Hosted on secure, international cloud infrastructure with regular backups.

Who can access your data?

You (the parent): full access to your account, child profiles, questions, and summaries.
Stripe: handles payment processing. They receive your email and payment details. See Stripe's privacy policy.
No one else. We do not sell or share data with advertisers, data brokers, or AI training platforms.

Vulnerability disclosure

If you discover a security vulnerability, please email [email protected]. We will acknowledge within 48 hours and aim to resolve critical issues within 7 days.