Privacy notice
For the Wondria website and the Wondria app. Last updated: [[EFFECTIVE_DATE]]
The short version
- Wondria is for children aged 7–12. A parent creates their child’s profile. We never ask a child for an email, surname, date of birth, school or address.
- Parents see how long their child uses Spark, the topics they explore, their projects and how their learning is going. Parents do not see their child’s conversations. We built it that way so children can ask honest questions.
- We do not sell data, show adverts, or use what a child writes to train AI models.
- Conversations are deleted after the period the parent chooses. A parent can delete their child’s profile at any time.
- Trained staff may read a conversation only for a recorded safety reason. Where a child may be at risk, we may contact the parent or the appropriate authorities.
- The website itself has no forms, no analytics and no cookies, and loads nothing from other companies.
This notice has two parts. Part 1 covers this website. Part 2 covers the Wondria app, where parents create an account and children use Spark. A shorter version written for children is being prepared.
Who we are
Wondria is a product of WINIQ AI LTD (“we”, “us”). We run the website and the app, and we are the controller of the personal information described here.
- Registered address: 86-90 Paul Street, London, England, EC2A 4NE
- Company number: 16951431
- Registered with the Information Commission (ICO): ZC109190
- Privacy contact: info@wondria.ai
- Data protection officer: [[DPO_NAME_OR_STATEMENT_THAT_NONE_IS_REQUIRED]]
Part 1: The website
When you visit the website
Like any website, ours is delivered by a server. Each time a page is requested, our hosting provider, Namecheap, automatically records:
- your IP address
- the date and time
- the page or file requested
- your browser and device type, as your browser reports them
- the address of the page that linked to ours, if any
We use these logs only to deliver the website, keep it secure, and find and fix faults. We do not use them to build a picture of you, and we do not combine them with other information. Our legal basis is legitimate interests: running a working, secure website. We keep them for 30 days.
If you join the early-access list
You can ask for an early-access place on our early-access page. We ask for your first name, surname and email address, how many children would use Wondria, and two ticks: that you live in the United Kingdom, and that you would like us to email you about early access. If you choose, you can also tell us which age groups your children are in (7 to 9, 10 to 11 or 12) and how you heard of us. We do not ask for any child’s name, date of birth, school or address.
- Why: to tell you when your place is ready, to plan for the size and ages of the families who join, and to give early-access families their longer free trial.
- Our legal basis: your consent. You can take it back at any time by emailing info@wondria.ai, and we will remove you.
- Checking your address: we email you once, with a link, to check that the address is yours. You join the list only when you press the button on that page. An address that is not confirmed within 7 days is deleted.
- Where it is kept: in a private file on our website hosting, Namecheap, which cannot be fetched from the website. The confirmation email is sent from our own mailbox, which is also at Namecheap (Private Email). Only we can open the file. We do not pass it to anyone else and we do not use it for anything else.
- How long: until early access opens. Then we delete the list.
- Keeping the form safe: the page sets no cookies. To stop misuse it checks that a form comes from our page, limits how often one device can send it, and keeps a count of tries that is not linked to what you typed.
Links to our social media pages
The footer of our pages links to our pages on Instagram, X and YouTube. These are ordinary links. We do not put those companies’ buttons, plug-ins, embedded posts or tracking code on our pages, so visiting our website does not send them anything. If you follow a link, you leave our website. That company’s own privacy notice and cookies apply there, and its sites are not made for children, so please follow the links yourself and do not ask a child to.
When you email us
If you write to us, we receive your email address, your name if you include it, and whatever you write. We use it to reply to you, and keep it for 24 months from the last time you contact us.
- To answer your question, our legal basis is legitimate interests: replying to people who contact us.
- If you ask us to tell you when Wondria opens to more families, our legal basis is your consent. We will email you about that and nothing else, and you can ask us to stop at any time.
Please do not send us information about your child that we have not asked for. We do not need it to answer your question.
What the website does not collect
The website has no forms, no analytics, no advertising, no social media buttons and no embedded videos or maps. Fonts and images are served from our own site, so visiting a page does not send your information to any other company. See our cookies notice.
Children and the website
The website is written for parents, guardians and other adults. We do not knowingly collect personal information from children through it.
If you are a child reading this: you can look around this website safely. It does not ask for your name or anything about you. If you want to know more about Wondria, please ask a grown-up to get in touch with us for you.
If a child does write to us, we will reply kindly, suggest that a parent or carer contacts us instead, and then delete their message. If anything in a message makes us worried about a child’s safety, we will act to protect them, which may include contacting the appropriate authorities.
Part 2: The Wondria app
This part is for parents and guardians who create a Wondria account. It explains what we collect about you and about your child when your child uses Spark.
What we collect
About you
- Your email address and sign-in details
- Your timezone
- Your subscription status. Card details go straight to our payment provider; we never see or store them
- The record of what you agreed to when you signed up, and which version of this notice it was
- Emails you send us
About your child
- First name and age group
- What they type or say to Spark, and Spark’s replies
- Photos or files of homework they choose to share
- Interests and how they like things explained
- Projects
- Learning records: the kind of task, how much help was given, whether they tried first, whether an attempt was right, whether they asked Spark to do the work for them, whether they seemed frustrated, the subject and the concept practised
- Usage: when and for how long they use Spark, and time requests
- Safety records: the category and risk level our safety system gave each message and, where a message suggested a child might be at risk, a record that staff were alerted and what they decided. These records do not contain the message itself
Automatically
- IP address and device details, for security
- Product events from a short fixed list, linked to an ID and not to a name
- Cookies that keep you and your child signed in. They are listed in our cookies notice
No page a child uses carries advertising or third-party tracking. Pages for parents use only what is needed to sign in and pay.
Why we use it and our legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Run your account and take payment | Your account and billing details | Contract with you; legal obligation for tax records |
| Provide Spark to your child | Profile, conversations, homework, voice, memory, learning records, usage and time requests | Your consent, given for your child when you create their profile |
| Apply the rules you set | Your family rules and their history | Contract with you |
| Keep responses safe and age-appropriate | Each message, checked automatically; safety records | Legitimate interests: keeping children safe |
| Respond to a possible risk to a child | The conversation concerned, read by trained staff | Legitimate interests: keeping children safe |
| Show you how Spark is being used | Usage, topic labels, projects, learning signals | Contract with you |
| Improve the product | Pseudonymous product events | Legitimate interests |
| Answer your questions and complaints | Your emails | Legitimate interests; legal obligation |
| Protect accounts and investigate faults | IP address, device and request details; technical error reports | Legitimate interests |
Children sometimes mention sensitive things, such as health. We do not ask for this information and do not copy it out of the conversation. Where the law requires a further condition for such data, we rely on your explicit consent, and on the legal provisions for safeguarding children where staff need to review a conversation.
You can withdraw consent at any time by turning a feature off or deleting your child’s profile. Withdrawing consent does not affect what was done before.
How Spark uses AI
Spark’s replies are written by an AI model and checked automatically before your child sees them. Each message is classified for safety and for how much help to give. These automated steps shape a reply; they make no decision with a legal or similarly significant effect on your child. What your child writes is never used to train or improve AI models, by us or by any provider.
What you can and cannot see
| Information | Can you see it? |
|---|---|
| Time used | Yes |
| Topics explored, as labels such as “Space” | Yes |
| Project titles, goals and progress | Yes |
| Your child’s interests | Yes |
| Concepts practised and hints needed | Yes |
| How often your child asked Spark to do the work, and how often they tried first | Yes |
| Your child’s conversations | No |
Your child is shown the same list. Nothing you can see is hidden from them.
When we are worried about a child
Every message is checked by an automated safety system. If it indicates a serious risk, such as self-harm or abuse:
- Spark stops, gives a careful fixed response, and encourages your child to talk to a trusted adult.
- A trained member of our safeguarding staff may read that conversation. Each time, they must record why.
- If they are concerned, they may contact you. Where there is a risk to a child’s safety, they may contact the police or children’s social care. Where telling a parent could put a child at greater risk, we follow safeguarding practice and take advice first.
Staff may also read a conversation when you report that Spark said something unsafe or wrong, or when we are investigating a fault. The same rule applies: a named role, a recorded reason, and a log of every read.
Wondria is not an emergency or counselling service, and staff do not watch conversations as they happen. If you are worried about your child’s health, contact your GP or your nation’s NHS urgent advice service. If you are worried a child is being harmed, the NSPCC Helpline is 0808 800 5000. In an emergency call 999.
How long we keep it
| Information | Kept for |
|---|---|
| Conversations and homework photos | 7, 30 or 90 days, as you choose. Default 30 days |
| Voice recordings | Not kept by us. Our speech provider processes them to produce the text and may hold them only as briefly as its contract allows |
| Profile, interests, projects, concept progress | Until you delete them or the profile |
| Learning, usage and safety records | 12 months |
| Your account | Until you close it |
| The record of what you agreed to | The life of your account plus 6 years |
| Billing records | As tax and company law require, normally 6 years |
| Backups | 30 days |
If your subscription ends, we keep your child’s data for 90 days in case you return, remind you at 60 days, and then delete it.
What remains after you delete a profile. Deletion removes your child’s conversations, photos, profile, projects and learning, usage and safety records from our live systems at once, and from backups within 30 days. We keep: the record of the consents you gave; the log of any staff access; records of any complaint, incident or safeguarding case; and billing records. If there is an open safeguarding case about your child, we may hold the relevant data until it is closed.
Who we share it with
We use a small number of providers who act only on our instructions and under contract:
| Provider | What it does | Where |
|---|---|---|
| Namecheap | Hosts this website, registers our domain and runs its DNS, and runs our info@wondria.ai mailbox (Private Email). It does not host the app | [[REGION]] |
| [[HOSTING_PROVIDER]] | Hosts the app, and stores data | [[REGION]] |
| [[MODEL_PROVIDER_PRIMARY]], [[MODEL_PROVIDER_FALLBACK]] | AI models that write and check Spark’s replies (the app) | [[REGION]] |
| [[SPEECH_PROVIDER]] | Turns your child’s voice into text (the app) | [[REGION]] |
| [[EMAIL_PROVIDER]] | Sends account emails and weekly summaries (the app) | [[REGION]] |
| Stripe | Takes payment for plans and runs the billing pages | [[REGION]] |
| [[ERROR_MONITORING_PROVIDER]] | Reports technical errors, with no message text or child names | [[REGION]] |
Our contracts do not allow providers to use your child’s data for their own purposes or to train models, and they limit how long a provider may hold it. The current list, with what each receives, is at [[SUBPROCESSORS_URL]]. We will tell you by email at least 30 days before a new provider starts handling your child’s conversations.
Where a provider processes information outside the UK, we rely on [[TRANSFER_SAFEGUARD, for each country, for example a UK adequacy regulation or the ICO’s International Data Transfer Agreement]].
We share personal information with the police, children’s social care or other authorities only where the law requires it or where it is necessary to protect a child. We do not sell personal information, and we do not share it for advertising.
Keeping it safe
The website and the app are served only over an encrypted connection (HTTPS). Passwords are stored in a form that cannot be read back. Staff can read a conversation only with a named role and a recorded reason, and every read is logged.
Your rights and your child’s rights
Under UK data protection law, you and your child have the right to:
- ask for a copy of your personal information
- have it corrected if it is wrong
- have it deleted
- withdraw consent at any time, where we rely on consent
- object to our use of it for analytics or on the basis of legitimate interests, or ask us to restrict it
- receive it in a portable form, where that applies
In the app you can do most of this yourself: edit a profile, turn features off, and delete a child profile or your whole account. For anything else, including a copy of your data, email info@wondria.ai. It is free, and we will reply within one month. We may need to check who you are before we act on a request.
Where a request concerns a child’s conversations, we consider the child’s views and best interests in how we respond.
Complaints
If you are unhappy with how we have handled personal information, please tell us first at info@wondria.ai so that we can try to put it right. We will acknowledge your complaint within 2 working days.
You can also complain to the Information Commission (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We will tell account holders by email before any change that affects how a child’s data is used, and ask for consent again where the law requires it. The date at the top shows when this notice last changed. Earlier versions are kept at [[NOTICE_HISTORY_URL]].