Privacy Policy

1. Overview

Wonda is built for children ages 5–15. Because of that, privacy and safety are core to how the product works, not an add-on — every child account starts with a parent, and every piece of data below exists to run the learning experience or keep it safe.

2. Information we collect

• From parents: full name, email address, and country, used to create and secure the account.
• From children (added by a parent — children never sign themselves up): first name, age band, chosen avatar, a 4-digit PIN (stored as a one-way hash, never in plain text), preferred language, and any interests used to personalize what's recommended.
• Learning activity: lessons started and completed, quiz attempts and scores, badges earned, streaks, and time spent learning.
• AI tutor conversations: the questions a child asks and the responses given, scoped to the lesson they're in — stored so a parent can review them at any time.
• Billing information: subscription payments are processed by Paystack. We never see or store full card details ourselves.

3. What we don't do

• No advertising and no ad trackers.
• We never sell or rent personal data to anyone.
• No public profiles or leaderboards for children.
• The AI tutor never asks a child for personal information.

4. Who we share data with

A small number of providers process data on our behalf, strictly to run the product: our database and authentication provider, our AI provider (to generate tutor responses, scoped to the current lesson only), and Paystack for payment processing. None of them are permitted to use this data for their own purposes.

5. Parental consent & control

A child profile can only be created by a parent, after that parent gives consent. From their dashboard, a parent can at any time: see everything their child has done, read the child's AI tutor conversations, change settings like session limits, language, and whether the AI tutor is turned on, export their child's data, or delete the child's profile entirely.

6. Data retention & security

Data is kept for as long as the account stays active; deleting a child's profile removes their data from our systems. Passwords and PINs are hashed, not stored as plain text, and database access is scoped so a parent can only ever see their own children's records.

7. Changes to this policy

If this policy changes, we'll update the date at the top of this page.