Security

Built to keep children safe.

Parents and schools trust GANCE with children's learning. This is how we protect it, in plain words.

Children never use passwords

• Ages 2 to 8 sign in by choosing three pictures, and only on a device a parent or teacher has approved. Each approved device holds its own key; a stolen picture code is useless anywhere else.
• A child is signed out after 15 minutes without activity, and a parent can pause or remove a device at any time.
• The microphone and camera are switched off everywhere in GANCE except inside a lesson, and the camera only when a parent has turned it on.

Strong sign-in for grown-ups

• Parents and teachers can sign in with a passkey (Face ID, Touch ID or fingerprint), with Google, or with a password, and can add two-step verification under Security.
• GANCE staff and school administrators can see more than one family, so they must use a passkey or an authenticator app. Without one, they cannot open any child's record.
• Sensitive actions, such as giving consent or downloading a child's data, ask you to confirm it is you if you signed in more than 10 minutes ago.
• Passwords are handled by our sign-in provider, Clerk. GANCE never sees or stores them.
• The portal warns you and then signs you out after a period of inactivity.

Children's data is encrypted, one key per child

• Every child's personal details are encrypted with a key that belongs to that child alone, and that key is itself locked by a master key held outside the database.
• When a family deletes a child's account, we destroy that key. The encrypted data, including copies in backups, can never be read again.
• All traffic uses HTTPS with HSTS, so browsers refuse an unencrypted connection. GANCE pages cannot be embedded in other websites.

Consent comes first

• A child cannot start learning until a parent or guardian has given consent in the portal, and consent can be withdrawn at any time.
• Parents can download a copy of their child's data (the link works for 24 hours) or ask us to delete it; deletion is completed within 30 days.

We log what we do, not who you are

• Every staff action on an account is written to an audit log that GANCE leadership can review.
• Our server logs remove names, email addresses, phone numbers and keys, and keep only the first part of an IP address.
• Each error carries a reference number, so we can trace a problem without looking at anyone's personal data.
• We do not sell data, show advertising, or use third-party trackers in the children's app.

Found a problem?

If you think you have found a security issue, email info@ganceedu.com (subject "Security"). We acknowledge reports within two working days and will not take action against good-faith research. For privacy questions and the laws we follow in each country, see Trust and privacy.

Last reviewed 20 October 2026.