Safety and privacy
A pickup hands a child to an adult. Wildi is built so the right adult gets the right child, and every step can be checked afterwards.
The handover
Custody holds
Mark a child "do not release", or block a named person. A held child cannot move towards the gate. Teachers see "keep in class" and parents are asked to contact the school. Only reception can release, and must give a reason.
Approved collectors
Parents can add a driver, relative or nanny for a child. Nobody collects until the school approves them.
Gate codes
Each request has its own 4-digit code, unique for the day, and a QR. The gate can require it, make it optional or turn it off. After five wrong codes, the check pauses for ten minutes.
Confirmed by the parent
Minutes after a child is sent, the parent is asked to confirm. "Didn't arrive" goes straight to reception's flagged list.
Who can see what
Parents are approved per child
A parent registers with the child's name and QID and verifies their email. School staff approve each claim before the child appears in the app.
Masked QIDs
Only staff with permission see the full QID. Teachers, parents and the dismissal board never receive it.
Roles and permissions
Every staff screen and action is behind a permission. Staff can only grant what they hold themselves.
Two-factor for administrators
School super admins and Wildi Hub staff sign in with an authenticator app code.
Where the data lives
A server at your school
Each school has its own Wildi server and database. Schools never share a database.
Wildi Hub holds no student data
The Hub is a directory: school name, logo, code and address, so the apps can connect. Nothing about students or parents.
Nightly off-site backups
The school database is backed up every night to storage that is encrypted at rest. The school controls the schedule.
Support with a time limit
When Wildi support helps your team, it uses a signed session that expires after four hours. Every action is labelled as support in your audit log.
Qatar's data protection law (PDPPL)
Notice and consent
Parents read a versioned privacy notice in Arabic or English and consent before registering. A new version asks again.
Retention limits
Old pickup records, audit rows and identity numbers are removed on the schedule your school sets.
Deletion on request
Parents can delete their account from the app. Their details are removed; the school keeps the pickup history it must keep.
A full audit trail
Every change is recorded with who made it and when, and identifiers are masked in the logs.
Ready for a calmer dismissal?
We'll show you Wildi with your own grades and sections, and send you a quote.