Kinderbase Access starts with responsibility.

Roles and permissions

The built-in roles are Administrator, Teacher, Employee and Parent. Teachers work with their own groups, employees who do not work with the children see their own hours, leave and documents, and parents only see information about their own children.

Permissions are set per role, not per person. For each section (posts, chat, children, staff, billing, menu, cameras, documents and more) you choose a level, from no access to full administration. Your institution can also create its own roles.

Roles also decide who can start a chat conversation with whom.

The administration tools ask for a 6-digit PIN each time they are turned on. An administrator can hand over their phone without also handing over administration.

Two-factor authentication

With two-factor authentication turned on, after the password the app asks for a 6-digit code sent to the account’s email address, valid for 10 minutes. Someone who learns the password still cannot get in.

Each user turns it on or off from Profile, confirming with their password.

New passwords have at least 12 characters, with upper- and lower-case letters, numbers and symbols.

Devices and sessions

In Profile, under Devices, each user sees the devices where the account is signed in, with their latest activity. They can sign out one device, all the others, or everywhere.

Administrators see each family’s sign-in methods and active sessions in the family’s account and can sign out the family’s devices.

The number of devices a family can use may be limited. In that case, signing in on a new device asks for a code sent by email.

Your institution decides how data is used

For the data your institution enters (child and parent profiles, attendance, meals, photos), the institution is the data controller. Kinderbase is the data processor and processes the data only on the institution’s instructions and under the data processing agreement.

Data is hosted on servers in the European Union and encrypted in transit. Sensitive documents are kept in private storage, with regular backups.

We do not sell or rent personal data. App usage statistics are collected only with the user’s consent, which they can withdraw at any time.

Publishing takes care

Posts are seen only by families in the chosen groups. Every new post is reviewed first and only administrators publish it; until then, families do not see it.

Comments can be turned off on any post. Your institution decides whether a parent can comment, whether parents can share photos and videos, and how much post history new families see.

A post appears outside the app only if an administrator makes it public on the institution’s web page, after confirming consent for the people in the photos.

A technical feature does not replace institution procedures: check permission for photos and other materials before publishing.

Questions and requests

For access to data, correction, deletion or your other GDPR rights, contact your institution (for the data it manages) or write to us at contact@kinderbase.ro. We reply within one month.

A parent can delete their own account from Profile. The account and profile data are deleted; documents the law requires to be kept, such as invoices, remain without identifying them.

Problems in the app can be reported directly from Profile with a screenshot; the report goes to the Kinderbase team.