Security & Trust
Your data — and the children you serve — protected.
Nonprofits trust KidsCircle with sensitive information. Here’s how we protect it. For full detail, see our Privacy Policy, Data Processing Agreement, and Sub-processor list.
Encryption in transit
All traffic to and from KidsCircle is served over HTTPS/TLS, and data at rest is encrypted by our infrastructure providers.
Role-based access & tenant isolation
Every request is scoped to your organization and checked against roles (Admin, User, Field, Viewer) with server-side authorization, so one organization can never see another's data. The database also has row-level security enabled as a deny-by-default backstop.
Passwordless sign-in
Everyone signs in with a one-time code sent to their email, so there are no passwords for us to store or for attackers to steal.
Reputable infrastructure
KidsCircle runs on established providers — application hosting, database, file storage, email, and payments — each maintaining its own security program. Card data is handled by Stripe; we never store full card numbers.
Written information security program
We maintain a documented security program covering access control, encryption, least-privilege, vendor review, logging, and regular backups, reviewed periodically.
Breach response
We have an incident and breach-response plan with defined roles and notification timelines, so if something goes wrong we act quickly and tell affected organizations without undue delay.
Careful handling of children's records
Children are not users of the platform. Organizations own and manage their own child and staff records, access is limited to their team, and we apply data-minimization and retention limits. Misuse of personal data is taken seriously.
Data retention & deletion
We keep data only as long as needed to provide the service and meet legal obligations, and we delete or de-identify it on a defined schedule after an account ends.
We don't sell your data
We never sell personal information and never use your data for advertising. We use it only to provide the service, as described in our Privacy Policy.
Common security questions
Where is our data stored?
In the United States. Your records are kept in a managed PostgreSQL database hosted by Supabase, and photos and documents in Cloudflare R2 storage. Both encrypt data at rest (AES-256), and everything travels over HTTPS. The full list of providers is on our Sub-processors page.
How do people sign in?
Only people your administrator invites can sign in. Each sign-in uses a one-time code sent to the person's email, so there are no passwords. A session ends after 7 days without use, and removing someone from your Team page ends their access. Because sign-in codes go to email, we recommend multi-factor authentication on your staff's email accounts.
Is our data backed up, and can we get it out?
Yes. The database is backed up automatically every day, and the last 7 days can be restored. You can export any list to Excel or CSV at any time, and if you ever cancel, you have 30 days to request a full export of your records.