SECURITY

Security policy

Protecting local practice records, parent controls and the public website.

Updated October 11, 2026

Practice records stay local

Practice records are stored on the user’s device. We do not maintain a database collecting children’s practice records. Manage access to shared devices and backups through device locks and OS settings.

Parent controls

Purchase, restore, stage changes, record deletion and external links are grouped in the parent area. On iOS it opens through a long press and arithmetic check. This reduces accidental child interactions; it is not password-based identity authentication.

Public website protection

Cloudflare serves pages over HTTPS with browser security headers. Introduction, guides and support are static pages without login, payments or file uploads.

Purchases and test mode

Purchase entitlements rely on Apple-verified transactions. Temporary development test mode is distinct from a real purchase and does not save trial data to regular practice records. Distribution builds do not display this development switch.

Reporting a security issue

Report suspected security issues privately to the support email below. Include the action, app and OS versions, and reproduction steps. Do not send real children’s records or another person’s private data.

After a report

We review reports and reproduce, fix and update as needed. We consider the timing and method of public disclosure after assessing the impact.

Support

ドレミーツ運営 / Doremeets

support@doremeets.com