Every school is isolated
Separation is enforced in the database itself, on every table, not by application code that could forget. One school can never read another's records - we test this as a matter of routine.
Trust
Children's data, handled like it matters.
This is the part we'd want to ask about if we were choosing software for our own child's nursery.
People see only their own
A parent sees their own children. A teacher sees the classes they're assigned to. Admin screens are closed to everyone else. Same rules for the app and the office console.
Photos aren't public links
Images live in private storage and are served through short-lived signed links, so a URL that leaks doesn't become a permanent window into your nursery.
Backed up every night
Every school's records are exported nightly to private storage, photos included, each school on its own so a restore never touches anybody else. A separate watchdog checks each morning that the backup actually happened, rather than assuming it did.
Hosted in the EU
Your school's data is stored and processed on EU infrastructure, which keeps GDPR a much shorter conversation.