Security

Short answers for your ICT team, in the style of the Julkri criteria.

The answers describe the Early Years editions as designed. Each edition is confirmed for a named build on the data protection page.

Security answers for TinyFingers Early Years
Item	Answer
Updates and signing	The iPad and Android apps reach you as private builds of the Early Years edition and are signed through Apple’s and Google’s own distribution. Updates arrive through the same private channel. The Windows MSIX package is to be signed, and we will tell your ICT team which certificate it uses before the first installation.
Distribution channel	Apple: a custom app in Apple School Manager. Android: a private app in Managed Google Play. Windows: an MSIX package for Intune as a line-of-business app.
Supported operating systems	iPadOS 17 or later. Android 8.0 or later. Windows 10 (1809) or later.
Vulnerability contact	Report security issues to support@halfskypublishing.com
Support hours	On weekdays. We reply within two working days.
Updates policy	We check the apps against each new iPadOS, Android and Windows version at least twice a year, and fix what breaks within the licence term.
End of life	We give at least 12 months’ notice before an Early Years app is withdrawn. Installed Early Years apps keep working, because they need no network.
Network	Not applicable: the Early Years apps are designed to make no network connections.
Identity and accounts	Not applicable: the Early Years apps have no accounts and no sign-in.

The table follows the Julkri criteria in style only. It is our own statement: it is not a Julkri assessment and claims no certification or audit.