Privacy Policy

1. Data controller and data collected

AuPair Connect is the controller of the data described in this policy. We collect the following categories of data: identification and account data (e-mail address, login identifiers), profile and matching data, content you publish, messages and associated metadata, verification data (identity documents, proof of address, referee contact details), purchase and subscription data, technical and security data, and aggregated or pseudonymised audience-measurement data.

We apply the principles of minimisation and purpose limitation: only data necessary to operate the service and to perform the requested verifications is collected. No special category of data within the meaning of Article 9 GDPR (religious beliefs, ethnic origin, health, sexual orientation, etc.) is collected or used for matching.

2. Purposes of processing

Your data is used to: provide and secure the Platform and the application; enable account creation, authentication, matching and messaging between members; carry out trust verifications and certification; manage purchases and access to paid features; send you the notifications you have accepted; prevent fraud and abuse; respond to your requests; and measure and improve the quality of the service.

Sign-up reminders. If you create an account without finishing your profile, we may send you, by e-mail or notification, the reminder you requested and up to 3 reminders over 14 days to help you finish it. These messages contain no commercial offer. They use your first name, your language, your time zone and your profile’s progress, never your profile’s content. You may object at any time: the “Stop receiving these reminders” link in every e-mail, the “Sign-up reminders” setting in the app, or the “Don’t remind me” choice. An account whose profile is not finished is deleted after 90 days of inactivity; we notify you by e-mail 14 days beforehand. Legal basis: the reminder you requested is based on your consent (Art. 6.1.a GDPR); automatic reminders are based on our legitimate interest (Art. 6.1.f GDPR) and on pre-contractual steps taken at your request (Art. 6.1.b GDPR).

One-off catch-up reminder. For accounts created before 20 October 2026 whose profile has never been published, a single catch-up e-mail, counted within the cap of three automatic reminders, may be sent beyond the 14-day period, once only and with no further reminder, to help you finish your profile. This catch-up reminder contains no commercial offer and you may object to it at any time under the conditions above.

Data used by the reminders. In addition to the above, these reminders use your role, the last chapter reached and the number of remaining steps, the sending channel (your account’s e-mail address or confirmed contact e-mail address, notification token) and the sending history. They never use data about children, free text, date of birth, photos, video, pocket money or location.

2 bis. Public display of the “light” version of the profile (home page and public pages)

Purpose. When you publish your profile, its “light” version (first name, age, city, country, spoken languages, profile facts and main photo) may be presented on the site’s public pages — including the home page and the application presentation pages — and, in the future, on AuPair Connect’s social media accounts. The video, surname and any personal contact detail are excluded.

Legal basis. The display of the “light” version is inherent to the matching service you request: it is based on performance of the contract (Art. 6.1.b GDPR). As regards the use of your image, it is based on your consent (Art. 6.1.a GDPR), given through the free act of publication and withdrawable at any time (see the right to withdraw below). No profiling or automated decision follows from it.

Information and rights. You are informed of this purpose when you publish. You may object to this display or request its erasure at any time by unpublishing the profile from the application or by writing to [email protected]. Withdrawal takes effect (removal from the public page and cache/CDN purge) within 72 business hours, followed by a de-indexing request sent to the main search engines. You retain your rights of access, rectification, erasure, restriction, objection and portability (section 14).

Retention and minors. The “light” version elements are kept for the whole time the profile is published and removed on unpublishing, account deletion or on request. Only adult persons (18 or over) may be the subject of this public display.

2 ter. Profile photos and presentation video: purpose, visibility, retention and moderation

Your profile photos are used to present you to other members. If you publish your profile, only your main photo may appear in the online “light” version described in Article 8 bis of the Terms; the presentation video is excluded from it. Photos and the video are accessible to users with an authenticated session on the Platform — including a temporary anonymous session created during sign-up, which does not give access to your identity — and are not accessible to the public.

Photos and the video are retained for as long as your profile exists and are deleted with your account, subject to temporary backups and legal retention obligations. You may replace or remove them at any time. Removing the main photo or the video may reduce your profile’s visibility; if the profile no longer contains either a photo or a video, it is unpublished and you are informed.

Profile photos are subject to automated analysis (detection of sensitive content and embedded personal contact details). An alert is sent to the moderation team, which carries out a human review before any removal or suspension; no sanction is imposed solely on the basis of automated processing. Presentation videos are not currently subject to automated content analysis; they may be reviewed following a report. Images extracted from the video are not used as the main photo on the web.

3. Cookies and trackers

See our Cookie Policy for details of the trackers used and the related consents.

4. Hosting and sub-processors

AuPair Connect uses a cloud hosting provider acting as a data sub-processor to host and secure your data and to manage account authentication, storage and hosting of the website and application. These services process your data under our instructions, within the framework defined by our processing agreement, in accordance with the GDPR.

When you write to us at a public contact address (hello@, help@ or partners@), your message may be processed using automated customer-support request-management assistance tools. These tools only assist us: no reply is sent without systematic human review and approval, no automated decision is taken about you, and they receive only the text of your message, stripped of your contact details, links, attachments and any data relating to a child. This processing is governed by our contractual commitments and the technical measures described in our processing register.

AuPair Connect notably uses the following sub-processors: Resend (Plus Five Five, Inc., United States) for sending e-mails, whose transfers outside the EEA are governed by the European Commission’s Standard Contractual Clauses and certification under the EU-U.S. Data Privacy Framework; Google Firebase (Firestore and Cloud Functions, europe-west1 region) for hosting data and processing; Firebase Cloud Messaging for Android notifications; and Apple Push Notification service (APNs) for iOS notifications.

5. Video calls

Video calls between members rely on a real-time communication provider acting as a data sub-processor. During a call, the audio and video streams are transmitted in transit through its infrastructure to establish and route the communication. These streams are neither recorded nor retained by AuPair Connect after the call ends. The provider only receives the technical data required to set up the link (channel identifier, temporary access tokens, media streams).

6. Purchases, subscriptions and app stores

Purchases and subscriptions are handled through the Apple App Store and Google Play app stores, which process the payment and never pass us your banking details. To manage access to paid features, we use an entitlement-management provider acting as a data sub-processor, which receives a purchase identifier and the purchase / subscription history associated with your account (product purchased, status, validity dates, any trial). This information is used solely to activate and maintain your entitlements. Subscriptions are firm commitments with no automatic renewal; see our Terms / EULA.

7. Push notifications

To alert you about new messages and incoming calls, we register a push notification token unique to your device, provided by the operating system’s notification service (Apple / Google). This token is stored server-side, linked to your account, and passed to the relevant provider solely to deliver the notifications you have accepted. You can disable notifications at any time in your system settings; the corresponding token is then no longer used.

8. Messaging: confidentiality and access

The content of your private conversations is encrypted in transit (HTTPS/TLS) and at rest on our hosting provider’s servers (Google Firebase). However, messaging is not yet end-to-end encrypted: at this stage, AuPair Connect is technically able to access the content of messages in order to operate, secure and moderate the service.

Such clear-text access is strictly framed and limited to the following cases: handling a report or complaint (fraud, harassment, unlawful content or endangerment of a minor), a legal obligation or a request from a competent authority, and security maintenance of the service. It is never used for commercial purposes or for mass reading. We also keep the metadata strictly necessary to operate the service (participant identifiers, timestamps, sent and read status).

End-to-end encryption, in which only the correspondents hold the decryption keys, is being studied but is not active as of today. When it becomes active, this section will be updated accordingly and you will be informed.

9. Automatic translation of your profile

To allow other members to read your profile in their own language, the narrative sections you write may be transmitted to an automated translation service. The resulting translations are kept in secure cached storage on our servers to keep transfers to a minimum, and are erased when the corresponding profile is deleted. Only actually written sections that are missing in the reader’s language are processed; no identity documents are involved.

10. Subtitling and translation of your pitch videos

To make your pitch videos accessible in all languages, the voice track may be processed by automated transcription and translation services (subtitle generation). The audio is processed ephemerally: the extracted file is hosted temporarily and automatically erased at the end of the operation, and intermediate transcription data is deleted once consumed. Your voice is used only to subtitle your own video and never for any other purpose.

11. Automatic reading of your proof of address

When you submit a proof of address as part of the certification programme, the document is analysed by an automated text-recognition (OCR) service for the verification of the proof of address, in order to extract the issuer, address and date and compare them with the declared address. The document is processed confidentially, in a restricted-access storage space, for the retention periods described in the “Trust verifications” section below.

12. App stability and audience measurement

To ensure the stability of and improve the application, we use crash-reporting tools (error type, technical stack trace, device model, OS version) and audience-measurement tools producing aggregated and pseudonymised usage events. A pseudonymous user identifier may be associated with these measurements to link an incident to an account without exposing your identity. These data are never used for automated decisions about you and are not used for advertising purposes.

12 bis. Internal pseudonymised measurement (data warehouse)

We measure internally, using pseudonymised data (technical identifier, dates, steps, statuses, country, language, age band of au pairs), the number of published profiles, progress through sign-up and the proper functioning of the application. These measurements are reserved for the company’s management. Internally, counts may be viewed even at low volume (for example, the number of published profiles); however, no detailed result is disclosed outside that circle, and rates and tables intended for analysis tools are produced only from 20 accounts, with rounding. We do not read the content of your messages and do not retain the details of your criminal record. We do not retain your contact details and do not use them for these measurements; the email address and technical identifier are read in memory solely to exclude test and demonstration accounts and automated end-to-end (E2E) test accounts, then immediately deleted. Legal basis: our legitimate interest in managing and improving the service, based on a documented balancing test. This data is deleted when you delete your account, and at the latest within the periods indicated. You may object to this processing by writing to us: your pseudonymised data will then be excluded from the warehouse within a maximum of one month.

Objection. To exercise your right to object, write to [email protected] with the subject “Objection — internal measurement”. Requests are received and handled by the data protection team. The technical identifier (uid) is found from your account’s e-mail address, then converted into a pseudonymised key; that key is added to the warehouse’s exclusion list, which prevents any further collection and purges the data already present. No message content is used to find the uid.

13. Retention periods

Data is retained only for as long as necessary for the purposes described above. Cached translations are erased when the corresponding profile is deleted. Periods specific to trust verifications are set out in section 15.

14. Your rights (GDPR)

In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, objection and portability of your data. To exercise these rights, contact us at [email protected]. The account deletion procedure in the app and by e-mail is described on the Account deletion page. You may also lodge a complaint with the competent supervisory authority.

15. Trust verifications (criminal record, address, references)

As part of the voluntary trust certification programme, we may process the documents and contact details you send us. Their retention is strictly limited to what is necessary for the requested verification:

• Criminal record check: the document is retained only for as long as necessary for review by our team (human review), then deleted immediately after the decision, whether positive or negative. Only the decision (date and result) is retained, never the document itself. Any review without a decision after 60 days is automatically closed and the corresponding document is deleted.
• Proof of address: after validation, the document is retained for the lifetime of the account in order to maintain the profile’s certification. It is deleted immediately upon rejection and together with all your data if you delete your account.
• References: your referee’s contact details (name and e-mail address) are used only to send the confirmation request. They are never shared with other members or reused for other purposes. The referee, a non-user third party, is informed of the purpose of the request; the confirmation link is single-use and expires after 30 days.

16. Security and final provisions

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration or disclosure (encryption in transit and at rest, access segregation, logging). The verifications comply with the principles of data minimisation and storage limitation (Art. 5 GDPR). Documents relating to a specific category (criminal record) are subject to particularly restrictive processing: access limited to authorised review, immediate destruction after the decision, minimal retention with no copy or archiving. Data is never retained beyond what is necessary for the purposes described.