Security and data protection
How we handle photos and data
This page says what the platform does and where the data is kept. What is not written here, it does not do.
Principles
Eight rules anchored in the code
Each rule is a decision with its reasons in the repository and is held by tests.
Faces are never altered generatively
Cropping, tone values, sharpness and upscaling are allowed. No generative image model in the production path.
No face embeddings
The check neither computes nor stores biometric vectors. A photo cannot be used to recognise anyone.
One rule set for browser and server
The live check on the phone and the check on the server read the same file of thresholds.
A transit station, not an archive
After collection, photos and personal references are deleted after a fixed period. What remains is a log with identifiers and codes, without names and without images.
Separate stores
The database never holds image content; the image store never holds names, numbers or addresses. The two come together only at the moment of the download.
The link is the secret
Learners need no account. The link has a random key, expires and is protected against guessing.
Every school its own tenant
A school's data is filtered by school in every query; the database enforces the separation as well.
No trackers, nothing external
No external fonts, scripts or analytics. The pages load only from their own address.
Storage locations
Where the data is kept
The provider runs the platform in Europe. Two subprocessors, both named.
| What | Where | Note |
|---|---|---|
| Database, image store, check, cropping | Hetzner, Germany | One server, encrypted connections, access for the provider only. |
| Additional check (image understanding) | Infomaniak, Switzerland | Receives only a preview of 768 pixels edge length, never the original, never personal references. |
| Invitations by SMS and e-mail | Sending service of the school or the provider | The message contains the link and the name of the school, no photo. |
The privacy policy names retention periods, rights and contacts. A data processing agreement is concluded with each school.
Let us talk about your school
Write to us how many learners you expect and which formats you need. We will get back to you with the next steps.
No prices on this page: the terms are agreed per school.