Little BirdsSecurity and privacy
You are trusting us with records about children. This page explains, in plain words, how they are kept safe. We only list what is true today.
Each school's data is kept apart
Every school's records are separated inside the database itself, with row-level security that the database enforces on every query. The application's own database account cannot get around it, so one school can never see another school's data.
People see only what their role allows
Each member of staff has a role with its own permissions, such as teacher, accountant or administrator. Parents see only their own children's records, and students only their own.
Encrypted connections and protected sign-in
Every connection to Little Birds uses HTTPS. Passwords are stored only as Argon2id hashes, sign-in attempts are rate-limited, public forms are protected against bots, and sessions end after a period without activity.
Changes leave a trail
Corrections to attendance, marks, invoices and payments need a reason, and the change is kept in an audit log, so you can always see who changed what and why.
Our support team needs your permission
When you ask for help, our team can act as one of your users only after your administrator approves it, and only for a limited time. Every grant, active or past, is listed in your settings.
Where your data is hosted
Little Birds runs on Google Cloud in the Mumbai region (asia-south1), the closest Google Cloud region to Nepal.
Your data belongs to your school
We store and process school data only to run the service for that school. We do not sell data and we do not show ads. Student, fee and results reports can be downloaded as CSV files at any time.
Backups
Your school's data is backed up automatically every day, and each backup is kept for 7 days, so it can be restored if something goes wrong. Uploaded files such as photos and documents are kept in separate, durable storage.
Report a security concern
If you think you have found a security problem, please tell us straight away. hello@littlebirds.cloud