Security & compliance: the Moiki EDU trust centre

Hosted in France, GDPR compliant, protection of minors, no advertising. Everything you need to know about security at Moiki EDU.

Trust is the foundation of our relationship with schools, teachers and families. This page sets out our commitments on data security, regulatory compliance and user protection, particularly for students who are minors.

Hosted in France

The whole Moiki EDU infrastructure is hosted in France, in datacentres located on French soil. That choice guarantees:

Data sovereignty: your content and your students' data never leave French territory.
Compliance with the European and French legal framework on data protection.
Optimal performance for users in France and its overseas territories.

Hosting and data storage are located in France. Only two third-party services operate outside that perimeter, for targeted functions: subscription payment (Stripe) and technical error monitoring (Sentry).

GDPR compliance

Moiki EDU is compliant with the General Data Protection Regulation (GDPR). That translates into concrete commitments at every level of the platform.

Principles applied

Data minimisation: we collect only the data strictly necessary to run the service. Through the French school access system, no identifying personal data (surname, first name, email) is transmitted.
Purpose limitation: the data collected serves only the educational operation of the platform (authentication, progress tracking, class management).
Limited retention: data is kept for the duration of the subscription. On cancellation, data is deleted within 90 days, unless a legal obligation says otherwise.
Right of access, rectification and erasure: users (or their legal guardians for minors) can exercise their rights at any time by writing to our data protection contact.

Legal basis for processing

Processing	Legal basis
Authentication through the school access system	Performance of the contract (school subscription)
Creating a teacher account (outside that system)	Consent
Tracking student progress	Legitimate educational interest
Sending information about the service	Consent (opt-in)

Processors

The list of our technical processors is available on request. All are located in France or in the European Union and are bound by contractual clauses compliant with the GDPR.

Protection of minors

Moiki EDU pays particular attention to protecting students who are minors, in line with the recommendations of the French data protection authority (CNIL) and the French legal framework.

Framework for minors

No collection of students' personal data through the school access system: the identifier transmitted is opaque and does not allow a student to be identified.
No named student accounts: students reach the content through a class code or through the school access system, without providing personal data.
No social features exposing students: no public profile, no messaging between students, no open comments.
Moderation of content published in the shared catalogue.

Parental consent

Where processing rests on consent (outside the school access system), the legal guardian's consent is required for students below the age of digital consent — 15 in France — in line with article 8 of the GDPR.

No advertising, no data resale

Moiki EDU is an educational tool, not an advertising product. Our commitments are firm:

No advertising is shown on the platform, either to teachers or to students.
No data resale to third parties, whoever they are, for any purpose whatsoever.
No advertising tracking: no third-party cookies, no Facebook tracking pixel, no Google Analytics or other profiling tool.
No recommendation algorithm based on user behaviour for commercial ends.

The Moiki EDU business model rests exclusively on subscriptions taken out by teachers and schools. That virtuous model allows us to guarantee a healthy digital environment that respects privacy.

No advertising tracking

To be entirely explicit: Moiki EDU includes no advertising tracking tool. That means:

No Google Analytics, Google Tag Manager or Google Ads
No Facebook / Meta pixel
No third-party cookies of any kind
No browser fingerprinting
No advertising SDK

The only analytical data we collect are aggregated, anonymised metrics on platform usage (number of sign-ins, number of stories created, and so on), used exclusively to improve the service.

Export: sovereignty over your content

We believe the content teachers create belongs to them. That is why a story can be exported in an open format, replayable outside Moiki EDU.

Exporting lets you:

Retrieve your content at any time, independently of your Moiki EDU subscription.
Replay your stories in a plain browser, with no account and no installation.
Keep control of your creations: your stories are not locked inside a proprietary ecosystem.

This commitment to openness is part of our support for the digital sovereignty of teachers and schools.

Technical security measures

Encryption

All communication between users and the platform is encrypted with HTTPS (TLS 1.2+).
Data at rest is encrypted on the hosting servers.

Authentication

Secure authentication with hashed passwords (bcrypt) for direct accounts.
Authentication through the school access system for connected schools.

Backups

Automatic daily database backups.
Backups retained on a rolling 30-day window.

Monitoring

Continuous monitoring of availability and performance.
Automatic alerts in case of an anomaly.
Access logging for security purposes.

Incident management policy

In the event of a security incident affecting personal data, Moiki EDU undertakes to:

Notify the supervisory authority within 72 hours, in line with article 33 of the GDPR.
Inform the schools and users concerned as quickly as possible if the incident is likely to create a high risk to people's rights and freedoms.
Document the incident and the corrective measures put in place.

To date, Moiki EDU has had no security incident resulting in a personal data breach.

Data protection contact

For any question about the protection of your personal data, to exercise your rights (access, rectification, erasure, portability) or to report an incident, write to us:

Email: dpo@moiki.app

We undertake to answer any request within 30 days.

About the publisher

ZWYK Studio Nantes, France Founded in 2020

Moiki EDU is published by ZWYK Studio, an independent studio specialising in digital tools for education and interactive creation. Our mission: to make interactive storytelling accessible to every teacher, within an ethical and secure framework.

This page was last updated in May 2026