Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard information from parents and their children who use our children's storytelling application ("Service"). We are committed to protecting the privacy of children and comply with the Children's Online Privacy Protection Act (COPPA) and applicable data protection regulations.

We prioritize children's privacy and safety. We do NOT sell or rent children's personal information to third parties for marketing purposes.

2. Information We Collect

2.1 Information from Parents

• Account Information: Email address, password, subscription details
• Payment Information: Processed securely through Stripe (we do not store full credit card numbers)
• Contact Information: For customer support and service updates

2.2 Information About Children (With Parental Consent)

• Profile Information: Child's first name, age (2-10), favorite color
• Optional Photos: Profile photos or reference images for hero creation
• Created Content: Stories, heroes, and customization choices
• Usage Data: Stories read, favorites saved, medals earned

2.3 Automatically Collected Information

• Device Information: Device type, operating system, browser type
• Usage Analytics: Pages viewed, features used, time spent in the app
• Technical Data: IP address, cookies, and similar tracking technologies

3. How We Use Information

We use the collected information for the following purposes:

• Service Delivery: To create personalized stories and experiences for your child
• AI Story Generation: To generate age-appropriate stories featuring your child's heroes and preferences
• Account Management: To manage your subscription and provide customer support
• Service Improvement: To analyze usage patterns and improve app features
• Communication: To send service updates, subscription information, and support messages
• Safety and Security: To protect against fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do NOT sell or rent children's personal information. We may share information in the following limited circumstances:

4.1 Service Providers

• AI Providers: OpenAI, Anthropic, Replicate (for story and image generation) - data is processed according to strict data processing agreements
• Payment Processing: Stripe (for secure payment handling)
• Cloud Infrastructure: For secure data storage and app hosting
• Analytics: For understanding app usage (anonymized where possible)

All service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of our users or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred. We will notify you of any such change and give you the option to delete your data.

5. Parental Rights and Control

As a parent or guardian, you have the following rights regarding your child's information:

• Review: Access and review all personal information we have collected about your child
• Delete: Request deletion of your child's personal information at any time
• Refuse Further Collection: Refuse to allow further collection or use of your child's information
• Revoke Consent: Withdraw consent for your child's use of the Service

To exercise these rights, please contact us at contact@wondermoments.kids or through the Settings page in your account. We will respond to your request within 30 days.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication with PIN protection for parental controls
• Regular security audits and vulnerability assessments
• Limited employee access to personal information on a need-to-know basis
• Secure payment processing through PCI-compliant providers

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our safeguards.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account or request deletion of your child's information, we will delete or anonymize the data within 30 days, except where we are required by law to retain certain information. Backup copies may persist for up to 90 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Maintain your login session
• Analyze app usage and performance
• Provide personalized content

You can control cookies through your browser settings, though disabling cookies may affect app functionality.

9. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. International Users

Our Service is operated in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer and processing. We comply with applicable data protection laws, including GDPR for European users.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the app. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For COPPA-related inquiries or to exercise your parental rights, please use the email address above or the parental controls in your account Settings.