Trust Center
How we look after your family’s data, explained without small print. It’s the page a technical parent or a school will ask for.
Architecture
Everything runs on a dedicated server in the European Union, which is backed up in full with Veeam. The only way out to the Internet is a proxy that lets through only the services in the provider list, and none of them receives child data except chat moderation.
Providers
Who helps us run the service, with what data and where. It is the same list as in our privacy documentation.
| Provider | Purpose | Data | Where | Status |
|---|---|---|---|---|
| Proveedor del servidor dedicado (OVH) | Hosting the app, database and files, and storing their backups (daily server backup in OVHcloud Object Storage, Strasbourg) | All app data; backups encrypted and kept for 30 days | EU (backups: France) | Pending |
| Resend | Sending sign-in links and the weekly report | Adult email and language | EU (Ireland) | Pending |
| Stripe Payments Europe | Payments and subscriptions | Adult billing details (never the child’s) | EU (Ireland) | Planned |
| Anthropic (API de Claude) | Creating challenges from worksheets and moderating chat | Worksheet content (no child data) and chat messages for moderation | USA | Planned |
| Google LLC («Entrar con Google») | Optional adult sign-in | Email and name of the adult who chooses it | USA | Planned |
How long we keep each thing
- Chat messages
- 90 days
- Chat moderation log
- 12 months
- Security log
- 12 months
- Uploaded worksheets (originals)
- A few days after publishing the challenge
- Deleted account
- Truly deleted within 30 days
- Backups
- Database copies: 7 days. Daily full-server backup: 30 days, and nobody can delete it in the first 14
Backups and drills
A copy of the database every 6 hours, kept for 7 days, and a daily encrypted backup of the whole server in another OVH data centre in the EU (Strasbourg), kept for 30 days and impossible to delete for the first 14. Every week the latest copy is restored automatically to check it works, and every quarter we run a full drill on a clean machine. Target: back up and running in under 4 hours.
How chat is moderated
Chat is off until the family turns it on. Every message goes through an automatic filter (phone numbers, addresses, social networks, meeting up…) and an AI classifier before delivery; if anything fails, it is not delivered. Held-back messages are seen by the writer’s family, and both families can read every conversation.
How to report
In the chat, every message has a “Report” button and anyone can be blocked instantly. For anything else, write to us.
Security changelog
- Chat moderation before each message is delivered, closed on failure.
- Injection test battery for AI challenge generation.
- Antivirus and real file-type checks on every upload.
- Strict content security policy (CSP) with nonce.
- Rate limits per IP and per account on sign-in, uploads and play.
Contact for researchers
Found a security issue? Tell us before publishing it and we will fix it with you. We don’t ask for anyone’s data.
Or write to privacidad@retoverso.com.