| Education and development documentation | Observations, learning stories, portfolios, observation forms (PERIK, LISEB, SELDAK, SELSA, SISMIK). | High. The IFP rates development profiles as especially sensitive, even within the Art. 9 categories (IFP 2025). | Digitally fillable observation forms with extensive health data can trigger a data protection impact assessment under Art. 35 GDPR (IFP 2025). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025)Verordnung (EU) 2016/679 (DSGVO), Art. 9 (2016) |
| Parent communication (organisational) | Messages, notice board, calendar, sick notes and absences. | Medium. Parents' contact data; sick notes touch health data. | Communication about one's own child rests on Art. 6 and Art. 9 GDPR with national law; general parent information with photos generally needs consent (IFP 2025). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025) |
| Team communication | Internal chat, team calendar, file upload. | Medium. Staff data and content about individual children. | US-based cloud tools such as Slack, Google Drive or Dropbox cannot be recommended per the IFP; for EU providers the processing agreement must be checked (IFP 2025). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025) |
| Parent survey and quality management | Survey responses, quality metrics. | Low to medium, depending on anonymisation. | A distinct single-purpose category (parent survey) in the IFP, often also a module in complete solutions (IFP 2025). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025) |
| Attendance, check-in and staffing ratio | Arrival and pick-up times, presence lists, terminal or QR capture. | Medium. Biometric capture falls under Art. 9 GDPR (GDPR Art. 9). | Recording duties differ by state and by country; see the records and reporting section. Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025)Verordnung (EU) 2016/679 (DSGVO), Art. 9 (2016) |
| Child, parent and group administration (master data) | Profiles of children, parents and groups; allergies, vaccination status, sick notes. | High. Almost all apps also process health data under Art. 9 GDPR per the IFP (IFP 2025). | In Germany, per the IFP, children's and parents' data in childcare is always treated as social data because of section 61(3) SGB VIII; using an app is commissioned processing with prior notification under section 80 SGB X (IFP 2025). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025)SGB VIII, Paragraf 61 Anwendungsbereich (Sozialdatenschutz) (2026)Verordnung (EU) 2016/679 (DSGVO), Art. 9 (2016) |
| Registration and place allocation | Waiting lists, applications, contracts. | Medium. Family data, partly social data. | The IFP means the childcare waiting list here, not municipal statutory place allocation (IFP 2025 via IFP_CRITERIA_TO_BEREICH). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025) |
| Staff administration and scheduling | Staff profiles, rosters, working hours. | Medium to high. Employee data. | Legal basis typically Art. 6 and Art. 9 GDPR with national employment data protection (IFP 2025). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025) |
| Financial administration and billing | Parent fees, invoices, SEPA mandates. | Medium. Payment and family data. | Per the IFP only present in complete solutions (IFP 2025 via IFP_CRITERIA_TO_BEREICH). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025) |
| Meal planning and catering | Menus, meal cancellations, allergies and intolerances. | Medium to high. Allergies are health data under Art. 9 GDPR (GDPR Art. 9). | Mostly a calendar function; ordering and billing often sit with separate providers (IFP 2025 via IFP_CRITERIA_TO_BEREICH). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025)Verordnung (EU) 2016/679 (DSGVO), Art. 9 (2016) |
| Photos, video and audio recordings | Photos of children, video and audio recordings in digital portfolios. | High. Digital portfolios with video or audio can trigger a data protection impact assessment (IFP 2025). | GDPR-compliant handling of photo, audio and video recordings of children is an open legal question per the IFP; a separate IFP expertise was announced for late 2025 or early 2026 (IFP 2025). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025)Verordnung (EU) 2016/679 (DSGVO), Art. 9 (2016) |
| Interfaces and statutory reporting | Data exports to statistics and funding portals (KiBiG.web, KiBiz.web, Destatis, ISBJ, KiDz), accounting (DATEV, SEPA), open APIs. | Medium. Aggregated facility and occupancy data, partly personal. | Interface entries are provider self-reports per the IFP (IFP 2025). Expertise KitaApps. Apps und Softwarelösungen für mittelb... (2025) |