Security & EYFS Compliance

Your data is our biggest responsibility. When you use KinderStart, you are trusting us with sensitive information about the children in your care, your business finances, and your team. We don't take that lightly.

"We built KinderStart not just to make your life easier, but to make your business safer and more compliant than a paper-based system ever could be."

Here is exactly how we protect your data in line with UK law and the EYFS Statutory Framework.

ICO Registered & GDPR Compliant

Registration Number: ZC105416

KINDERSTART LTD is fully registered with the Information Commissioner's Office (ICO). We adhere strictly to the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Your Data, Your Control

You own your data. We have strict processes in place allowing you to request the download or permanent deletion of your data at any time.

No Selling Data

We will never sell your or your parents' data to third parties. Ever.

EYFS Statutory Framework Compliance

KinderStart is specifically designed to help childminders meet the strict requirements set out in the Early Years Foundation Stage (EYFS) Statutory Framework.

1. Information About the Child and Record Keeping

The EYFS requires you to maintain accurate, confidential, and easily accessible records.

  • •
    The "Deep Archive": Even if a child leaves your setting or you cancel your subscription, we ensure you stay compliant. Cancelled accounts are switched to a "Read-Only" state, meaning you can still access your historical accident forms and registers for the required statutory retention periods (up to 21 years and 3 months for safeguarding records).
  • •
    Export Anytime: You can download your child records, learning journeys, and daily diaries directly from the app in secure PDF format to share with parents or store locally. (Note: To protect data integrity, KinderStart currently does not support automated direct sharing to other settings or schools).

2. Other Legal Duties (Safeguarding & Employment)

Managing a team requires robust audit trails to protect yourself and your assistants.

  • •
    The "Deactivate" Safeguard: If an assistant leaves your setting or there is a dispute, you do not just "change a password." With one tap, you can deactivate their access. Their login is instantly revoked, but their historical data (timesheets, accident signatures) is permanently preserved in your Admin archive for HMRC and Ofsted audits.

How We Protect Your Data

Your data is stored in the UK and encrypted, both while it travels to and from your phone and while it is stored.

Encryption at Rest & In Transit

All data stored on our servers is scrambled using advanced encryption. It can only be unlocked and read by authorized user accounts (You and your invited parents).

Secure Photo Storage

Photos taken in the KinderStart app are logically separated by user accounts and stored on our secure servers—never inside the app itself or on your personal phone's camera roll.

Time-Limited Access

When you view a photo, the app uses a temporary, time-limited "presigned URL" to display it, meaning links cannot be copied and shared publicly.

Admin Protection

Access to our backend servers requires strict Two-Factor Authentication (2FA) and is limited to essential maintenance only. Even our backend engineering team cannot simply browse your data.

Have questions about our security?

We believe in total transparency. If you or your parents have any specific questions about how your data is handled, we are always here to help.

Contact our Support Team
We’d like to use analytics and ad cookies. Learn more