Children's Privacy

You hold the account. Under it, you create a small profile for each child — a name (a nickname is fine), and optionally a birth month and year so we can pitch stories at the right reading level. That's all your child needs. They never sign in, enter an email, or contract with anyone.

• The name you chose for them and, if you added it, their birth month and year
• Which stories they've opened, finished, or come back to
• Quiz answers and stars earned
• Words they've met that they might not have seen before
• Books they've favourited, sorted, or given a thumbs-up / thumbs-down to
• Reading streak days and any badges earned
• Any personalised story or narration you choose to create for them

• Their email or phone (they don't have one in the app)
• Where they are — no location, ever
• What's in their photos, contacts, or files
• Their voice or camera (we never ask for those permissions)
• Any advertising identifier — we don't track for ads
• Anything typed by the child in free text (there are no free-text fields for the child)

The child data listed above is stored by our two infrastructure providers — Supabase (database, UK/EU region) and Cloudflare (audio storage on global R2 infrastructure).

When youchoose to create a personalised story, the way your child's identity is used depends on what you order:

• Personalised text — we send an anonymous placeholder to OpenAI (US) along with the pronoun you chose, and swap in your child's real name on our own server. OpenAI never sees the real name.
• Personalised narration audio — currently unavailable, and cannot be enabled until the Wundaloom OpenAI project is confirmed for the required data-retention configuration. When it becomes available, the narrator will need to say the name out loud, so we would send it to OpenAI's voice service — only when you order narration, behind Parent PIN + billing data consent + payment authentication.

We don't send any other information about your child (age, reading history, quiz results — none of that leaves us).

No behavioural advertising. No tracking pixels. No selling. Ever.

Personalised stories exist as an option — a story with your child as the hero — but they only happen when you explicitly purchase one, behind the Parent PIN. Every curated story your child reads by default sends nothing about them to any AI.

• Change a child's name or birth details: Parent Zone → tap the profile.
• Delete one child's data:Open the “Who's reading?” screen → tap the small trash icon on that child. You'll be asked for the Parent PIN. Their profile, reading history, quiz results, favourites, vocabulary, and any personalised stories or narration audio created for them are permanently deleted; the account and other children remain.
• Delete the whole account and everything under it: Parent Zone → Account → Delete account. Or visit wundaloom.com/delete-account.
• Ask for a copy: email support@wundaloom.com from the email on your account.

While your account is active, we keep everything above. When you delete a child, we permanently delete that child's profile and all their reading data straight away; personalised audio files are removed from storage within 30 days. When you delete the whole account, we permanently erase your account, every child, every reading record, every personalised story and audio file within 30 days.

The full retention schedule — category by category, with purpose and deletion timeframe — is published at wundaloom.com/child-data-retention.

Before a child profile is created, we explain how Wundaloom uses the child's information and ask the adult to confirm that they are the parent or authorised guardian. For our core reading features, our UK GDPR lawful basis is legitimate interests, as explained in our Privacy Policy. Optional personalised features have their own separate parent choice. For US families, our COPPA parental- verification process applies before covered child information is collected.

You can stop the processing at any time by deleting the child profile or the whole account (Parent Zone → Privacy choices), or by objecting under UK GDPR — email support@wundaloom.com from the account address.

“Wundaloom is your reading room. It remembers which stories you've read and which ones you loved, so your reading room feels like yours. We don't use what you read for adverts, and we don't show it to other families. If you or your grown-up want Wundaloom to forget your reading history, your grown-up can ask us to delete it.”

support@wundaloom.com. You can also complain to the UK Information Commissioner's Office at ico.org.uk.