[{"data":1,"prerenderedAt":647},["ShallowReactive",2],{"navigation-en":3,"trust-en":109},[4,23,102],{"title":5,"path":6,"stem":7,"children":8,"icon":22},"Getting Started","/docs/getting-started","docs/1.getting-started/1.index",[9,12,17],{"title":10,"path":6,"stem":7,"icon":11},"Introduction","i-lucide-house",{"title":13,"path":14,"stem":15,"icon":16},"Setting Up Your Household","/docs/getting-started/installation","docs/1.getting-started/2.installation","i-lucide-settings",{"title":18,"path":19,"stem":20,"icon":21},"Managing Tasks & Hours","/docs/getting-started/usage","docs/1.getting-started/3.usage","i-lucide-list-checks",false,{"title":24,"icon":25,"path":26,"stem":27,"children":28,"page":22},"Features","i-lucide-sparkles","/docs/features","docs/2.features",[29,33,38,43,48,53,57,62,67,72,77,82,87,92,97],{"title":30,"path":31,"stem":32,"icon":21},"Tasks","/docs/features/tasks","docs/2.features/1.tasks",{"title":34,"path":35,"stem":36,"icon":37},"Export & Documents","/docs/features/export","docs/2.features/10.export","i-lucide-download",{"title":39,"path":40,"stem":41,"icon":42},"Notifications","/docs/features/notifications","docs/2.features/11.notifications","i-lucide-bell",{"title":44,"path":45,"stem":46,"icon":47},"Reference Letters","/docs/features/references","docs/2.features/12.references","i-lucide-file-heart",{"title":49,"path":50,"stem":51,"icon":52},"Feedback","/docs/features/feedback","docs/2.features/13.feedback","i-lucide-message-square-heart",{"title":54,"path":55,"stem":56,"icon":16},"Settings","/docs/features/settings","docs/2.features/14.settings",{"title":58,"path":59,"stem":60,"icon":61},"Calendar Sync","/docs/features/calendar-sync","docs/2.features/15.calendar-sync","i-lucide-calendar-sync",{"title":63,"path":64,"stem":65,"icon":66},"Hour Tracking","/docs/features/hours","docs/2.features/2.hours","i-lucide-timer",{"title":68,"path":69,"stem":70,"icon":71},"Calendar & Scheduling","/docs/features/calendar","docs/2.features/3.calendar","i-lucide-calendar",{"title":73,"path":74,"stem":75,"icon":76},"House Rules","/docs/features/house-rules","docs/2.features/4.house-rules","i-lucide-scroll-text",{"title":78,"path":79,"stem":80,"icon":81},"Leave Management","/docs/features/leave","docs/2.features/5.leave","i-lucide-tree-palm",{"title":83,"path":84,"stem":85,"icon":86},"Children","/docs/features/children","docs/2.features/6.children","i-lucide-baby",{"title":88,"path":89,"stem":90,"icon":91},"Emergency Information","/docs/features/emergency","docs/2.features/7.emergency","i-lucide-shield-alert",{"title":93,"path":94,"stem":95,"icon":96},"Expenses & Receipts","/docs/features/expenses","docs/2.features/8.expenses","i-lucide-wallet",{"title":98,"path":99,"stem":100,"icon":101},"Weekly Check-ins","/docs/features/check-ins","docs/2.features/9.check-ins","i-lucide-message-circle",{"title":103,"path":104,"stem":105,"children":106,"icon":108},"FAQ","/docs/faq","docs/3.faq/1.index",[107],{"title":103,"path":104,"stem":105,"icon":108},"i-lucide-circle-help",{"id":110,"title":111,"body":112,"description":637,"extension":638,"meta":639,"navigation":640,"path":641,"seo":642,"stem":645,"__hash__":646},"trust_en/en/7.trust.md","Trust & Security",{"type":113,"value":114,"toc":611},"minimark",[115,123,126,140,145,255,259,264,267,271,280,284,291,294,315,322,326,329,333,340,366,372,376,385,389,392,396,403,407,414,418,421,425,432,436,439,443,446,450,459,463,466,561,564,568,586,590,593,603],[116,117,118,122],"p",{},[119,120,121],"strong",{},"Last updated:"," February 28, 2026",[116,124,125],{},"At Opairly, we take data protection seriously. This page explains what data we collect, how we secure it, and what rights you have.",[116,127,128,129,134,135,139],{},"Also see our ",[130,131,133],"a",{"href":132},"/privacy","privacy policy"," and ",[130,136,138],{"href":137},"/terms","terms of service"," for the full legal documentation.",[141,142,144],"h2",{"id":143},"what-data-we-collect","What data we collect",[146,147,148,164],"table",{},[149,150,151],"thead",{},[152,153,154,158,161],"tr",{},[155,156,157],"th",{},"Category",[155,159,160],{},"Examples",[155,162,163],{},"Classification",[165,166,167,188,203,221,236],"tbody",{},[152,168,169,175,178],{},[170,171,172],"td",{},[119,173,174],{},"Personal data",[170,176,177],{},"Name, email address, profile photo",[170,179,180,181,187],{},"Personal data (",[130,182,186],{"href":183,"rel":184},"https://gdpr-info.eu/art-6-gdpr/",[185],"nofollow","GDPR Art. 6",")",[152,189,190,195,198],{},[170,191,192],{},[119,193,194],{},"Household data",[170,196,197],{},"Household name, work hours, tasks, schedules, house rules, leave requests",[170,199,180,200,187],{},[130,201,186],{"href":183,"rel":202},[185],[152,204,205,210,213],{},[170,206,207],{},[119,208,209],{},"Children's medical data",[170,211,212],{},"Allergies, medications, blood type, doctor, medical conditions",[170,214,215,216,187],{},"Special category data (",[130,217,220],{"href":218,"rel":219},"https://gdpr-info.eu/art-9-gdpr/",[185],"GDPR Art. 9",[152,222,223,228,231],{},[170,224,225],{},[119,226,227],{},"Emergency information",[170,229,230],{},"Home address, GP, hospital, pharmacy, emergency contacts",[170,232,180,233,187],{},[130,234,186],{"href":183,"rel":235},[185],[152,237,238,243,246],{},[170,239,240],{},[119,241,242],{},"Financial data",[170,244,245],{},"Subscription details via Stripe",[170,247,248,249,254],{},"Processed by ",[130,250,253],{"href":251,"rel":252},"https://stripe.com/privacy",[185],"Stripe"," (PCI-DSS)",[141,256,258],{"id":257},"how-we-protect-your-data","How we protect your data",[260,261,263],"h3",{"id":262},"encryption-in-transit","Encryption in transit",[116,265,266],{},"All traffic between your browser and our servers is encrypted via TLS (HTTPS). Data cannot be intercepted during transport.",[260,268,270],{"id":269},"encryption-at-rest","Encryption at rest",[116,272,273,274,279],{},"Our database (",[130,275,278],{"href":276,"rel":277},"https://supabase.com/security",[185],"Supabase",") encrypts all data at rest. This protects against unauthorized physical access to the servers.",[260,281,283],{"id":282},"application-level-encryption","Application-level encryption",[116,285,286,287,290],{},"Medical and emergency data is ",[119,288,289],{},"encrypted before it is stored"," using AES-256-GCM. This means that even with direct database access, these sensitive fields are unreadable — they appear as encrypted ciphertext. Each household has its own derived encryption key.",[116,292,293],{},"Specifically, the following fields are encrypted:",[295,296,297,303,309],"ul",{},[298,299,300,302],"li",{},[119,301,83],{},": allergies, medical conditions, medications, blood type, doctor name, doctor phone, medical notes",[298,304,305,308],{},[119,306,307],{},"Household",": home address, GP (name, phone, address), hospital (name, phone, address), pharmacy (name, phone, address)",[298,310,311,314],{},[119,312,313],{},"Emergency contacts",": name, phone number, email address",[116,316,317,318,321],{},"Decryption only happens through a controlled server process when you or your household members access the data. Learn more about how emergency data works in the ",[130,319,320],{"href":89},"emergency contacts documentation",".",[260,323,325],{"id":324},"household-isolation","Household isolation",[116,327,328],{},"Every database query is scoped to your own household via Row Level Security (RLS). Household members can only see their own data — never that of other families.",[141,330,332],{"id":331},"childrens-data","Children's data",[116,334,335,336,339],{},"Children's medical data falls under ",[119,337,338],{},"GDPR Article 9"," as special category data. We take extra measures to protect it:",[295,341,342,348,354,360],{},[298,343,344,347],{},[119,345,346],{},"Explicit consent (Art. 9)",": Medical data is only stored after you provide explicit consent per child through a dedicated consent form. The consent states which data is stored, the legal basis (GDPR Art. 9), and how to withdraw consent.",[298,349,350,353],{},[119,351,352],{},"Encryption",": All medical fields are encrypted before storage using AES-256-GCM (see above).",[298,355,356,359],{},[119,357,358],{},"Restricted access",": Only members of your own household can view medical data.",[298,361,362,365],{},[119,363,364],{},"Audit trail",": Changes to medical data are recorded in an internal log (retained for 90 days). This log is not currently visible in the app, but can be provided upon request.",[116,367,368,369,321],{},"Learn more about managing child profiles in the ",[130,370,371],{"href":84},"children documentation",[141,373,375],{"id":374},"your-gdpr-rights","Your GDPR rights",[116,377,378,379,384],{},"As an Opairly user, you have the following rights under the ",[130,380,383],{"href":381,"rel":382},"https://gdpr-info.eu/",[185],"GDPR",":",[260,386,388],{"id":387},"right-of-access-art-15","Right of access (Art. 15)",[116,390,391],{},"You can view your personal data, household data, tasks, hours, house rules, and leave requests in your dashboard. For a complete overview of all stored data, you can use the export function (see Art. 20 below) or contact us.",[260,393,395],{"id":394},"right-to-rectification-art-16","Right to rectification (Art. 16)",[116,397,398,399,402],{},"You can update your profile name, household data, child profiles, emergency contacts, tasks, and house rules via the dashboard and ",[130,400,401],{"href":55},"settings page",". Contact us to change your email address.",[260,404,406],{"id":405},"right-to-erasure-art-17","Right to erasure (Art. 17)",[116,408,409,410,413],{},"You can permanently delete your account and all associated data via ",[119,411,412],{},"Settings > Members > Delete account",". This is an irreversible hard deletion — all data is permanently erased.",[260,415,417],{"id":416},"right-to-restriction-of-processing-art-18","Right to restriction of processing (Art. 18)",[116,419,420],{},"Contact us if you wish to temporarily restrict the processing of your data.",[260,422,424],{"id":423},"right-to-data-portability-art-20","Right to data portability (Art. 20)",[116,426,427,428,431],{},"You can export your data as a JSON file via ",[119,429,430],{},"Settings > Privacy > Export data",". For family members, this includes: profile, children (with decrypted medical data), emergency contacts, tasks, task assignments, hours, house rules, leave requests, and expenses. Au pairs can export their own profile, hours, leave requests, and task completions.",[260,433,435],{"id":434},"right-to-object-art-21","Right to object (Art. 21)",[116,437,438],{},"Contact us if you wish to object to the processing of your data.",[260,440,442],{"id":441},"right-to-withdraw-consent-art-73","Right to withdraw consent (Art. 7(3))",[116,444,445],{},"You can withdraw previously given consent at any time. For medical data, you can do this by removing the medical information for a child in the settings.",[260,447,449],{"id":448},"filing-a-complaint","Filing a complaint",[116,451,452,453,458],{},"You have the right to file a complaint with the ",[130,454,457],{"href":455,"rel":456},"https://www.autoriteitpersoonsgegevens.nl/",[185],"Autoriteit Persoonsgegevens"," (Dutch Data Protection Authority).",[141,460,462],{"id":461},"third-party-processors","Third-party processors",[116,464,465],{},"We work with the following trusted partners:",[146,467,468,484],{},[149,469,470],{},[152,471,472,475,478,481],{},[155,473,474],{},"Processor",[155,476,477],{},"Function",[155,479,480],{},"Location",[155,482,483],{},"Certification",[165,485,486,504,524,542],{},[152,487,488,495,498,501],{},[170,489,490],{},[130,491,493],{"href":276,"rel":492},[185],[119,494,278],{},[170,496,497],{},"Database & authentication",[170,499,500],{},"EU (Frankfurt)",[170,502,503],{},"SOC 2 Type II",[152,505,506,515,518,521],{},[170,507,508],{},[130,509,512],{"href":510,"rel":511},"https://www.cloudflare.com/trust-hub/",[185],[119,513,514],{},"Cloudflare",[170,516,517],{},"Hosting & CDN",[170,519,520],{},"EU-US Data Privacy Framework",[170,522,523],{},"ISO 27001",[152,525,526,533,536,539],{},[170,527,528],{},[130,529,531],{"href":251,"rel":530},[185],[119,532,253],{},[170,534,535],{},"Payment processing",[170,537,538],{},"EU",[170,540,541],{},"PCI-DSS Level 1",[152,543,544,553,556,559],{},[170,545,546],{},[130,547,550],{"href":548,"rel":549},"https://resend.com/security",[185],[119,551,552],{},"Resend",[170,554,555],{},"Transactional email",[170,557,558],{},"EU/US",[170,560,503],{},[116,562,563],{},"We have a Data Processing Agreement (DPA) in place with each processor.",[141,565,567],{"id":566},"data-breaches","Data breaches",[116,569,570,571,574,575,580,581,321],{},"In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ",[130,572,457],{"href":455,"rel":573},[185]," (Dutch Data Protection Authority) within 72 hours in accordance with ",[130,576,579],{"href":577,"rel":578},"https://gdpr-info.eu/art-33-gdpr/",[185],"GDPR Art. 33",". If the breach poses a high risk, we will also inform affected users directly, in accordance with ",[130,582,585],{"href":583,"rel":584},"https://gdpr-info.eu/art-34-gdpr/",[185],"GDPR Art. 34",[141,587,589],{"id":588},"contact","Contact",[116,591,592],{},"Have questions about how we handle your data, or want to exercise one of your rights?",[116,594,595,598,599],{},[119,596,597],{},"Email",": ",[130,600,602],{"href":601},"mailto:hello@opairly.nl","hello@opairly.nl",[116,604,605,606,321],{},"We aim to respond within 30 days, in accordance with ",[130,607,610],{"href":608,"rel":609},"https://gdpr-info.eu/art-12-gdpr/",[185],"GDPR requirements",{"title":612,"searchDepth":613,"depth":613,"links":614},"",2,[615,616,623,624,634,635,636],{"id":143,"depth":613,"text":144},{"id":257,"depth":613,"text":258,"children":617},[618,620,621,622],{"id":262,"depth":619,"text":263},3,{"id":269,"depth":619,"text":270},{"id":282,"depth":619,"text":283},{"id":324,"depth":619,"text":325},{"id":331,"depth":613,"text":332},{"id":374,"depth":613,"text":375,"children":625},[626,627,628,629,630,631,632,633],{"id":387,"depth":619,"text":388},{"id":394,"depth":619,"text":395},{"id":405,"depth":619,"text":406},{"id":416,"depth":619,"text":417},{"id":423,"depth":619,"text":424},{"id":434,"depth":619,"text":435},{"id":441,"depth":619,"text":442},{"id":448,"depth":619,"text":449},{"id":461,"depth":613,"text":462},{"id":566,"depth":613,"text":567},{"id":588,"depth":613,"text":589},"How Opairly protects your data — from encryption to your GDPR rights.","md",{},true,"/en/trust",{"title":643,"description":644},"Trust & Security — How Opairly Protects Your Data (GDPR)","Learn how Opairly protects your au pair and family data with encryption, GDPR compliance, Row Level Security, and EU data storage. Read about your rights.","en/7.trust","Ud2FTPf832ZuNjArjgWhp-3AXQF_mq__b9Lw2yL1Log",1780497655725]