Open source

A promise about encryption whose source code nobody can read is a claim.

Why the AGPL

Nestklar promises families that nobody reads along. That can only be checked in the source. The AGPL keeps it that way: whoever offers Nestklar as a service – the normal case for a daycare app – has to publish their changes. A permissive licence would allow a closed variant where the encryption is quieter; families would see the same name and would not have the same promise.

What it means for providers

• Self-hosting is explicitly allowed – permanently, without licence fees.
• Modifying is allowed. Internal use only means nothing has to be published.
• Offering triggers the duty: as soon as others access it over a network, the source of that version must be available.
• The trademark is not licensed along: “based on Nestklar” yes, “Nestklar hosting by X” no.

Reporting security issues

Please not in public: security@nestklar.de. We answer within 48 hours and disclose together after 90 days at the latest.