Privacy Policy
Last updated: September 1, 2026
Who this is for
Wonderkin is a learning companion set up by a parent or guardian for a child. A grown-up creates the account, provides consent, and controls the child's data.
What we collect
Parent account details (email and login credentials), your recorded parental-consent (date and version), each child's profile you create (name, date of birth, avatar), the messages exchanged in chat, usage counters, safety events flagged by our safety systems, your subscription and payment status (plan, current period end, and the date of your first payment), study materials you upload to the Reviewers feature — see "Reviewer documents you upload" below — and, only if you turn on phone notifications, the anonymous delivery address your browser issues for push messages. If you pay by GCash, we also keep what you submit as proof of payment — see "Payment proof screenshots" below. We do not ask children for personal information beyond what you provide.
Your password
Passwords are hashed by our authentication provider and are never visible to us. If you forget yours, use the reset link on the login page; support staff can trigger that same email to your address, but cannot see or choose your password, and will never ask you for it. Accounts created with Google have no password at all.
How we use it
To provide the service: powering age-appropriate answers, enforcing daily limits, keeping children safe, processing subscriptions, and communicating with you as the parent. We do not sell your data and we do not use it for third-party advertising.
Service providers
We share limited data with providers that run the service on our behalf: Supabase (authentication and database), Anthropic (AI responses and image understanding), OpenAI (content moderation and voice transcription), Resend (email), and Vercel (hosting). Each processes data only to provide their part of the service. Payments are a direct GCash transfer between you and us — there is no third-party payment processor, and none of your data passes through one.
Payment proof screenshots
When you pay by GCash, we ask for the transaction reference number and, optionally, a screenshot of the receipt so we can confirm the payment by hand. That screenshot can show your sender name, the last few digits of your mobile number, the reference number, the amount, and the date — nothing else. It is stored privately, seen only by the admin confirming your payment, and is deleted as soon as your payment is confirmed. If a submission is rejected (for example, a reference number we can't match), we keep it for up to 90 days in case you need to resubmit or query it, then delete it automatically.
Pictures your child shares
If your child shares a photo in chat, it is screened for safety and read by the AI to answer their question, then discarded. We do not store the picture. The transcript keeps only a note that a picture was shared, plus the text of the conversation.
Your child's voice messages
If your child taps the microphone to talk instead of type, the recording is sent to OpenAI for transcription only. The words it hears come back as text in your child's message box for them to review and send, and the recording itself is never stored by Wonderkin.
Reviewer documents you upload
If you use the Reviewers feature, the PDFs or photos of study materials you upload are stored privately and read by the AI to build reviewer summaries and practice quizzes for your child. Unlike chat pictures, these files are kept — they belong to the reviewer set you created. Once we have extracted a file’s text, we delete the original six months after you uploaded it to save space, and keep the extracted text — so your reviewer and the quizzes built from it keep working. Upload the file again if you ever need a fresh read of it. A file we never extracted still has nothing kept in its place, so we leave that original alone until you delete it. Deleting a reviewer set hides it immediately and permanently erases its files after a 30-day recovery window, the same window as a deleted child profile. Please upload school materials, not documents containing personal information.
Who can see your child's messages
You can. Ordinary conversations are read by nobody at Wonderkin. When our safety systems flag a message as a possible self-harm, abuse, or danger concern, that flagged event — including a short excerpt of the message that triggered it — enters a review queue visible to a small number of authorised staff, so we can confirm the safety system behaved correctly. Alerts we send to ourselves about serious events contain only a severity level: never your child's name, and never their words. For serious events we may also alert you directly by push notification or email; those alerts name your child and the type of concern so you know to look, but never include what your child said — that stays behind your login.
Children's data
Children's information is collected under your verifiable parental consent and used only to provide Wonderkin to your child. You can view their chats in the app, export their profiles and an activity summary, and delete everything at any time from your Account page. Deleting a single child's profile hides it immediately and permanently erases it after 30 days — contact us within that window if it was a mistake. Deleting your account erases your and your children's data right away.
Retention & your rights
We keep your account data while your account is active. We automatically delete chat messages older than 6 months. For study materials, once we have extracted a file’s text we delete the original file six months after you uploaded it and keep the extracted text, so your reviewers and quizzes are unaffected; a file we never extracted is kept until you delete it. A deleted child profile is hidden immediately and held for up to 30 days (so an accidental deletion can be undone), then permanently erased along with its chats and usage history. From the Account page you can export a copy of your account details, your children's profiles, and an activity summary (message counts and dates), or permanently delete your entire account and all children's data. To request anything else, contact us.
Contact
Questions about privacy? Email [email protected].