WonderLearn Privacy Policy

Welcome to WonderLearn (www.wonderlearn.kids), a platform that generates personalized, multilingual children's stories for parents to share with their children. This Privacy Policy explains how we collect, use, and protect information about you (the parent or guardian) and your child when you use our services. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), the Children's Online Privacy Protection Act (COPPA), and the Kids Online Safety Act (KOSA). This policy is designed for parents, as you are the direct users managing accounts on behalf of children under 13.

We collect only the information necessary to provide our services: • Parent/Guardian Information: Email address, password (encrypted), and subscription details (if applicable) for account creation and management. • Child Information: First name, age, and story preferences (e.g., favorite genres or themes) provided by you to personalize stories. • Usage Data: Analytics on stories generated, time spent reading, and quiz responses (e.g., comprehension scores) to improve the service and track progress. • Technical Data: IP address, browser type, and device information for security and performance monitoring. We do not allow children under 13 to create accounts or directly access our services.

• Directly from You: When you sign up, set up your child's profile, or interact with our platform (e.g., selecting story themes or answering quizzes). • Automatically: Through cookies and analytics tools (e.g., Vercel Analytics) to understand usage patterns, with your consent where required. • Parental Consent: We require verifiable parental consent (via email verification) before collecting or processing any child-related data.

We use your and your child's information to: • Generate personalized stories using AI (Claude 4 Sonnet). • Provide narration for paid tiers (Azure Text-to-Speech). • Track learning progress (e.g., vocabulary growth, comprehension scores) for parent dashboards. • Improve our services through anonymized analytics. • Ensure security and comply with legal obligations (e.g., COPPA, GDPR).

As a parent or guardian, you have full control over your child's data: • Access: View your child's data via the parent dashboard. • Delete: Request deletion of your child's data at any time through the dashboard or by emailing support@wonderlearn.kids. • Consent Withdrawal: Revoke consent for child data processing, which will disable story generation and delete associated data. • Review: See all collected data, including story preferences and progress, in the parent dashboard.

We do not sell or share your or your child's personal information with third parties, except: • Service Providers: We use trusted providers (Anthropic for Claude, Microsoft Azure for TTS, Supabase for storage/auth, Vercel for hosting) who process data under strict Data Processing Agreements (DPAs). • Legal Requirements: We may disclose data if required by law (e.g., court orders) or to protect our rights and safety.

We protect your and your child's data with: • Encryption at rest and in transit (via Supabase and Vercel). • Secure cookies (HTTPS, sameSite: strict). • Row-Level Security (RLS) in Supabase to restrict data access to authorized parents only. • Regular security audits using free tools (e.g., Snyk).

• Parent Data: Kept as long as your account is active or as needed for legal compliance. You can request deletion at any time. • Child Data: Deleted automatically if your account is inactive for 12 months or upon your request via the parent dashboard. • Usage Data: Anonymized and retained for analytics unless you opt out.

• UK/EU (GDPR): We provide clear privacy notices, minimize data collection, and offer robust parental controls. A Data Protection Officer (DPO) will be appointed at 100,000+ MAUs. • US (COPPA, KOSA): Verifiable parental consent (email-plus) is required before collecting child data. We use age-appropriate design for parent-facing interfaces and filter content for safety. • India (DPDP Act, 2030): We will implement geo-blocking for India until compliant with parental consent and data minimization requirements.

We use cookies for essential functions (e.g., login sessions) and analytics (e.g., Vercel Analytics) to improve performance. You can manage cookie preferences via our consent banner (GDPR-compliant). No tracking cookies are used for children's data.

Under GDPR and UK GDPR, you have the right to: • Access, correct, or delete your and your child's data. • Request data portability (export in a structured format). • Withdraw consent for data processing. • Lodge a complaint with a supervisory authority (e.g., ICO in the UK). Contact us at support@wonderlearn.kids to exercise these rights.

For questions or concerns, email support@wonderlearn.kids or write to: WonderLearn [Your Address, TBD] United Kingdom

We may update this policy to reflect legal or service changes. We will notify you via email or the parent dashboard. Last updated: July 20, 2025. Disclaimer: This is a general template and not legal advice. Consult a qualified lawyer to ensure compliance with all applicable laws.