Privacy Policy
Last updated: July 21, 2026
Who this is for
Wonderkin is a learning companion set up by a parent or guardian for a child. A grown-up creates the account, provides consent, and controls the child's data.
What we collect
Parent account details (email and login credentials), your recorded parental-consent (date and version), each child's profile you create (name, date of birth, avatar), the messages exchanged in chat, usage counters, safety events flagged by our safety systems, billing identifiers and the date of your first payment from our payment provider, and — only if you turn on phone notifications — the anonymous delivery address your browser issues for push messages. We do not ask children for personal information beyond what you provide.
Your password
Passwords are hashed by our authentication provider and are never visible to us. If you forget yours, use the reset link on the login page; support staff can trigger that same email to your address, but cannot see or choose your password, and will never ask you for it. Accounts created with Google have no password at all.
How we use it
To provide the service: powering age-appropriate answers, enforcing daily limits, keeping children safe, processing subscriptions, and communicating with you as the parent. We do not sell your data and we do not use it for third-party advertising.
Service providers
We share limited data with providers that run the service on our behalf: Supabase (authentication and database), our payment provider acting as merchant of record (checkout, billing and invoices), Anthropic (AI responses and image understanding), OpenAI (content moderation and voice transcription), Resend (email), and Vercel (hosting). Each processes data only to provide their part of the service.
Pictures your child shares
If your child shares a photo in chat, it is screened for safety and read by the AI to answer their question, then discarded. We do not store the picture. The transcript keeps only a note that a picture was shared, plus the text of the conversation.
Your child's voice messages
If your child taps the microphone to talk instead of type, the recording is sent to OpenAI for transcription only. The words it hears come back as text in your child's message box for them to review and send, and the recording itself is never stored by Wonderkin.
Who can see your child's messages
You can. Ordinary conversations are read by nobody at Wonderkin. When our safety systems flag a message as a possible self-harm, abuse, or danger concern, that flagged event — including a short excerpt of the message that triggered it — enters a review queue visible to a small number of authorised staff, so we can confirm the safety system behaved correctly. Alerts we send to ourselves about serious events contain only a severity level: never your child's name, and never their words.
Children's data
Children's information is collected under your verifiable parental consent and used only to provide Wonderkin to your child. You can view their chats in the app, export their profiles and an activity summary, and delete everything at any time from your Account page. Deleting a single child's profile hides it immediately and permanently erases it after 30 days — contact us within that window if it was a mistake. Deleting your account erases your and your children's data right away.
Retention & your rights
We keep your account data while your account is active, and we automatically delete chat messages older than 6 months. A deleted child profile is hidden immediately and held for up to 30 days (so an accidental deletion can be undone), then permanently erased along with its chats and usage history. From the Account page you can export a copy of your account details, your children's profiles, and an activity summary (message counts and dates), or permanently delete your entire account and all children's data. To request anything else, contact us.
Contact
Questions about privacy? Email [email protected].