SECURITY AND DATA
The security of your daycare's data and your children's photos
Where your data is, who sees it, how long it stays, and what we never do: everything is explained here, simply.
- Application and data hosted 100% in Algeria
- Every daycare isolated, every role limited to its own scope
- Photos targeted before sending, links that expire, nothing on social media
On this page
Where your data is hosted
The application and your daycare's data are hosted 100% in Algeria, on a dedicated server.
Children's records, attendance, photos, messages and payments are stored on this server, in Algeria. Every connection runs over HTTPS, from the phone all the way to the server.
The server is in Algiers, with an Algerian hosting provider: your data falls under Algerian law (Law 18-07), and the app responds quickly from anywhere in Algeria.
- Application, database, photos and videos: hosted 100% in Algeria.
- Dedicated server, with an Algerian hosting provider.
- Connections over HTTPS, from the phone all the way to the server.
- Each daycare has its own space, isolated from the others.
- Law 18-07: your rights of access, rectification and deletion apply.
Who sees what at your daycare
Each person sees only what their role gives them, and each daycare is isolated from the others.
The administration sees its own daycare. The educator sees the classes assigned to her. The parent sees their children. This separation is enforced by the server, not just on screen: what's outside your scope is never sent to your device.
Two daycares using Yaoumy never see each other. If your children are enrolled in two different daycares, you switch between them from the same account, and each daycare only sees its own records.
- Administration: their whole daycare — children, classes, staff, attendance, payments.
- Educator: the classes assigned to her, and nothing beyond that.
- Parent: their own children, on the mobile app.
- Isolation by daycare: no daycare can access another's data.
Photos and videos: who receives them
Every post is addressed before it's sent, and it stays inside the app.
The educator first chooses the recipients: one child, several children, a class, or all classes. Only the families targeted receive the photo. There's no public link to share: the links that display files expire automatically.
Photo consent and social media consent are recorded on the child's record. If a child without consent is added to a post, the app warns the educator before sending and offers to send only to the families who have given consent. Photos and videos are kept for a limited time, with an expiry date shown.
- Targeting before posting: one child, several children, a class or all classes.
- Private gallery inside the app, no public link that anyone could open.
- Photo consent and social media consent recorded on the record, with a warning before sending if one is missing, and the option to send only to consenting families.
- Limited retention, with a visible expiry date: save to your phone anything you want to keep.
- Yaoumy never posts a child's photo on social media, or anywhere else.
For concrete rules to display in your daycare, see our guide Children's Photos in Daycare.
Who picks up the child
Pickup time is a safety moment: Yaoumy records who came to collect the child, and when.
The child's record lists the people authorized to pick them up, with their relationship and a mandatory ID document. At pickup time, the educator selects who is collecting the child, and the departure is timestamped.
For an unplanned pickup, the parent sends an authorization from their phone: the person's name, relationship, phone number, a photo of their ID, and the period covered. The daycare finds it among the day's authorized people.
- Authorized people recorded on the record, ID document mandatory.
- Selecting the person at departure, with the time recorded.
- Signature collected on the phone screen when the daycare asks for one.
- One-off authorization sent by the parent, for a day or for a period.
- History of authorizations and pickups viewable by the administration.
Accounts, passwords and access
No one joins Yaoumy on their own: the daycare sends the invitation.
Each person receives an invitation from the daycare and creates their own account, with their own password. No one shares an account. The invitation link has a validity period and can be resent by the administration.
When a staff member leaves the daycare, the administration archives their account: access stops, the related conversations close, and the history stays readable on the daycare's side. Archiving can be reversed if the person comes back.
- Access only by invitation from the daycare, via a time-limited link.
- One account per person, with their own password.
- Reset via an email link valid for one hour; after a password change, other devices must sign in again.
- An educator leaving: account archived, access cut off, conversations closed, history kept.
- Account deletion: the procedure is detailed on the dedicated page.
Your rights over your data (Law 18-07)
Law No. 18-07 of June 10, 2018 governs the processing of personal data in Algeria and gives you rights.
You can request access to your data, its correction, object to processing on a legitimate ground, or request its deletion once retaining it is no longer justified. One single address for all of this: contact@yaoumy.com. We commit to replying within a reasonable time.
Some information falls under the record kept by the daycare; in that case, we handle your request together with them. The site's privacy policy details what is collected on yaoumy.com, and the app's policy is presented to you when you create your account.
- Access: obtain confirmation that data about you exists, and a copy.
- Rectification: correct false or incomplete information.
- Objection: refuse processing on a legitimate ground.
- Deletion: request erasure, or delete your Yaoumy account.
- Write to contact@yaoumy.com, in French, Arabic or English.
What Yaoumy doesn't do
The list of what we don't do matters as much as the rest.
We don't use children's photos to talk about Yaoumy, and no daycare can access another daycare's data. The yaoumy.com site sets no cookies; its audience measurement is cookie-free, keeps no IP address and is hosted in Algeria.
These commitments apply to every daycare and every family that uses Yaoumy.
- No daycare can access another daycare's data.
- No child's photo reachable through a public link.
- No cookies or advertising trackers on yaoumy.com: audience measurement is cookie-free, keeps no IP address and is hosted in Algeria.
- No child's photo used for our own communications.
- No automatic posting of your content on social media.
Report a security issue
Noticed something unusual? Write to us: every report is handled.
Send the details to contact@yaoumy.com. Describe what you found and how to reproduce it. Please don't access other people's data, and give us time to fix it before any disclosure.
Our security contact details are also published in the standard format, in the site's security.txt file. A director who notices something unusual on her account can call us directly.
- Reporting address: contact@yaoumy.com.
- Public file: yaoumy.com/.well-known/security.txt.
- Describe the problem and how to reproduce it, without touching other people's data.
- Anomaly on your daycare account: call +213 554 992 993.
- Reply in French, Arabic or English.
Frequently asked security questions
Who can see photos of my child?
Only the families targeted by the post and the daycare's staff. Before sending, the educator chooses the child or children, the class, or all classes. Photos stay inside the app, behind links that expire, and your photo consent is recorded on your child's record. Yaoumy posts nothing on social media.
Where is the daycare's data hosted?
In Algeria, 100%. The application, the database, and your daycare's photos and videos are hosted on a dedicated server in Algiers, with an Algerian hosting provider. Every connection runs over HTTPS, from the phone all the way to the server.
What happens if an educator leaves the daycare?
The administration archives her account: she loses access to children, photos and messages. The conversations she had with parents close, but the history stays readable on the daycare's side. Archiving can be reversed: if she comes back, the administration reactivates her from the archives instead of creating a new account.
Can I get my data back or have it deleted?
Yes. Write to contact@yaoumy.com to request a copy of your data, correct information, or request its erasure. To delete your account and the data attached to it, follow the procedure described on the page set up for that. Some information falls under the record kept by the daycare: we then handle the request together with them.
Does Yaoumy comply with Algerian data law?
Law No. 18-07 of June 10, 2018 on the protection of natural persons in the processing of personal data governs this processing. We tell you what is collected, you can request access, rectification, objection or deletion of your data, and the daycare's data is hosted 100% in Algeria. The privacy policy details every point.
A question about your data?
Write to us: we reply precisely, and fast. In a fifteen-minute demo, a director sees exactly who accesses what at her daycare.
About Yaoumy and its publisher
The name of the publication director, the address and the phone number are on this site: the About page says who publishes Yaoumy, and from where.
Get the app
