Privacy Policy
The short version: Wondy is built for families. Parents create the account; children never share personal details with anyone. Conversations are private, visible to you (the parent) at any time, never sold, and never used to advertise to your child. You can erase everything, in the app, whenever you want.
Who we are
Wondy ("we", "us") is a safe AI learning companion for children, operated by Santhej Kallada. This policy explains what we collect, why, and the controls you have. It applies to the Wondy app and wondy-api.santhej.workers.dev.
What we collect
- Parent account: your email address and a password (stored hashed). Accounts are created and managed by a parent or guardian — not by children.
- Child profile (entered by the parent): a first name or nickname, age, and interests. We never ask for a child's surname, contact details, photos of the child, or location.
- Activity content: the questions your child asks Wondy, stories and artwork they create, quiz results, badges and learning progress. This exists so the app works and so you can review everything in the Parent Area.
- Photos you choose to share: if your child picks a photo from your library (for example a homework worksheet or a drawing to turn into art), that image is sent to our AI providers to create the reply or artwork, and the result is saved to your account so you can review it. We never ask for photos of the child themselves.
- Purchases: subscription status is processed by Apple and RevenueCat. We never see your payment card.
We do not collect precise location, contacts, advertising identifiers, or browsing history, and the app contains no third-party advertising and no ad tracking.
How AI processing works
Wondy uses third-party AI services to generate its replies. When your child types a question, speaks, or shares a photo, that content — plus the child's first name, age and interests, so replies are age-appropriate — is sent over an encrypted connection to our servers and passed to our AI providers, OpenRouter (which routes to models including Google Gemini and OpenAI) and Google AI (Gemini, used for text-to-speech and voice transcription), solely to generate that reply. Voice input is transcribed to text for the same purpose and is not kept as audio. Photos your child chooses (for example a homework worksheet or a drawing) are sent only to create that one reply or piece of artwork and are not used for any other purpose. We obtain the parent's consent during onboarding before any of this data is sent, and we use API services whose terms prohibit using this content to train their models. Every reply passes through kid-safety rules, and flagged topics generate an alert you can see in the Parent Area.
Children's privacy (COPPA / GDPR-K)
Wondy is designed for children used with a parent's consent. The parent creates the account, consents to AI processing during onboarding, and holds the keys: a PIN-protected Parent Area shows every conversation, everything Wondy remembers, and every creation — each deletable individually or all at once. We collect from children only what is needed for the app to function, and we never use children's data for marketing, profiling, or advertising.
Where your data lives
- Supabase (database & authentication, hosted in the USA) — accounts, profiles, transcripts, creations.
- Cloudflare Workers — our API backend; requests pass through, nothing is stored there.
- Google AI / OpenRouter — process messages to generate replies; not used to train models.
- Apple & RevenueCat — subscription billing and receipts.
All traffic is encrypted (TLS). Access to production data is limited to the operator.
Your controls
- See everything: Parent Area → Transcripts, Memories, Creations.
- Delete anything: individual memories, transcripts, or child profiles.
- Delete everything: Parent Area → Account → “Delete account & all data” permanently erases your account, every child profile, and all content. You can also email us and we'll do it within 30 days.
Data retention
We keep your data while your account exists so the app can work. When you delete your account (or ask us to), all of it is permanently removed. We may keep minimal billing records where the law requires.
Changes & contact
If we change this policy in a way that matters, we'll note it in the app. Questions or requests: santhej@kallada.com.