Privacy and Security Hub

No. Toddle never uses school data to train AI models. The AI features inside Toddle run on self-hosted models that keep data within Toddle's trust boundaries, and any interaction with a third-party model is pseudonymized so no personally identifiable student information ever leaves the platform.

Toddle encrypts all school data both in transit and at rest by default. Access is governed by strict role-based controls, and secure APIs limit how data moves between systems. Regular audits verify that these protections hold.

Access is controlled by role-based permissions, so each user sees only what their role requires. A teacher, a coordinator, and an administrator each see a different scope of data. Detailed logs record who accessed or changed what, giving your school a full audit trail.

Toddle runs on AWS and offers global data residency, with data centers in the US, Europe, Australia, UAE, China, Hong Kong, Singapore and other regions. Your school chooses where its data is stored and processed, and it's encrypted in transit and at rest. You can write to us at support@toddleapp.com if your school has specific data-residency questions for your region.

*Note: For users in other regions, you can choose to store your data in any of the following locations: Australia, Hong Kong, Ireland, Singapore, the United Arab Emirates, or the United States of America.

Yes. Toddle runs regular independent security audits and follows the OWASP Top 10 throughout development. Current certification details are available in Toddle's Privacy and Security Guide for your team to verify directly.

Toddle works with a limited set of vetted service providers, each held to strict data-handling agreements. A current list of sub-processors and the data each one handles is available in the Toddle Trust Vault, so your team can review every party that touches school data before signing.

Your school owns its data and can export all of it before you leave. Toddle then deletes it after your contract ends, within the timeframe set in your agreement.

Yes. Toddle supports data subject rights, so families can request access to the information held about their child and ask for corrections or deletion through the school. The school stays in control of these requests, and Toddle provides the tools to fulfil them.

Toddle maintains 99.9% uptime with 24/7 support. All data is continuously backed up on Amazon Web Services, so school information stays protected and recoverable in the rare event of an outage.

Toddle's security team monitors systems continuously, with incident response and business continuity plans in place for fast detection and containment. If an incident affects a school's data, Toddle notifies that school in line with its agreements and applicable breach-notification laws.

Yes. More than 3 million teachers, students, and families use Toddle every day on infrastructure built to support that scale. The same encryption, access controls, compliance coverage, and uptime that protect every Toddle account apply to your school, from a single campus to a full district.