Security and privacy
We work with the data of children aged 0 to 3 and their families. Protecting it is not just another feature: it is our first responsibility.
Data in the EU
Servers and storage in France.
Encryption
For connections and for stored files.
Private photos
Never public, always with consent.
GDPR and LOPDGDD
We comply with European and Spanish law.
Our commitment
- Your nursery's data belongs to you. We only process it to provide the service and following your instructions.
- We do not sell or share data with anyone, we show no advertising and we do not use data for any other purpose.
- Neither the platform, the apps nor this website use advertising trackers or third-party analytics.
- We tell you clearly where the data is and which providers are involved.
Where the data is
The platform, the database and all files (photos, videos and documents) are hosted by OVHcloud, a European provider, in its Gravelines data centre (France). Backups are kept in another OVHcloud data centre in Germany, so that an incident in one location does not affect the other. Children's and families' data never leaves the European Union.
Only two specific functions use services outside the EU, both certified under the EU-US Data Privacy Framework:
- Stripe, to charge the subscription by card or direct debit. It only receives the nursery's billing data, never children's data.
- Google Firebase, to send notifications to families' phones. The notification only carries a short text, such as the child's name and the date; the contents of the report, messages and photos never go through Firebase.
How we protect information
- Encrypted connections (HTTPS with HSTS) on the website, the platform and the apps.
- Photos, videos and documents in private storage: they only open through signed links that expire, never through a public address.
- Files also encrypted at rest (AES-256) in OVHcloud storage.
- Nightly backups in another EU country (Germany), encrypted before they leave the server and with tested restores.
- Passwords stored with one-way encryption: not even we can read them.
- Automatic lock-out after several failed password attempts.
- Role-based permissions: management decides whether each member of staff sees the whole nursery or only their own rooms.
- Each family only sees information about their own children.
- Consent for images, medication and outings for each child. Only children with image consent can be added to an album.
Laws we comply with
| Law | What it means for your nursery |
|---|---|
| General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) | The nursery is the data controller for its children's data and La Charca Software is the data processor (Article 28): we process data only on the nursery's behalf, with appropriate security measures and without transferring it to third parties for other purposes. |
| Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) | We apply Spain's implementation of the GDPR, taking particular care with children's data. |
| Protection of minors' images (Spanish Organic Laws 1/1982 and 1/1996) | The platform records image consent for each child and only allows photos of children with consent to be shared. |
| Spanish Law 34/2002 on Information Society Services (LSSI-CE) | We clearly identify who provides the service and comply with the rules on electronic communications. |
| Working time records (Article 34.9 of the Spanish Workers' Statute) | The platform's time clock records staff start and finish times and lets you download them to Excel, to keep them and produce them when required. |
Rights of families and staff
Anyone can ask their nursery for access to, rectification or erasure of their data, or write to soporte@mynurserymanager.com, and delete their account at any time (how to delete your account). The nursery can download the lists of children and families to Excel and delete old photos and files with the free-up-space tool.
Any questions?
Read our privacy policy or write to us at soporte@mynurserymanager.com. We will answer you personally.
Try it free for 30 days
No card, no minimum term, and every feature included.