Privacy Policy: Wonderloop

1. The short version

Wonderloop is a learning app for families with children in Grades 1 to 8.
Only parents and guardians have accounts. Children use profiles under a parent's account. They never sign in.
For a child we keep a first name, a grade, a state, your picks for them and their learning. We never ask for a last name, a birth date or a photo of a child.
You give consent, and we check it, before we collect anything from your child.
No ads. We never sell or share your family's information. No tracking or analytics tools from other companies.
You can see everything we keep, export it and delete it, at any time.

2. Who we are

Wonderloop is run by Mynde AI LLC ("we" and "us"). This policy covers the Wonderloop website and app. Wonderloop is for families in the United States.

Questions about privacy, or about your child's information, go to team@wonderloop.app.

3. Who has an account

Only adults have accounts: a parent or legal guardian, 18 or older.

Children do not have accounts. A child has no email, no password and never signs in. A child uses Wonderloop on a device after you have signed in and handed it over in kid mode. The way back to the parent pages is a grown-ups PIN that only you know.

4. What we keep about you, the parent

Your first name and your email address.
How you sign in: an email and a password, a one-time email link, or Google. Your password is kept by Google's Firebase sign-in service, not in our database. With Google, we get your email address and Google's id for your account.
Your state, so the plan follows your state's standards, and your time zone, so "today" is your today.
Your grown-ups PIN, kept only as a one-way scramble. Nobody can read it back, not even us.
Your family's settings: the days and minutes of your family week, whether you approve every change, and the History of changes.
Your consent record: when you gave consent (or sent a signed form), how it was checked and which version of this policy you agreed to.
Counts of sign-in tries, to stop someone guessing a password. They are kept as scrambled keys, never as your email or your internet address, and deleted after a day.
Short technical logs of requests to our servers (such as the time, the page and the internet address), kept by Google Cloud to run the service and keep it safe.

5. What we keep about your child

You add each child yourself. For each child we keep:

A first name or nickname, and the grade (1 to 8).
A state, only when it is different from your family's.
How they learn: at school, homeschool, hybrid or virtual school.
An avatar colour.
Your picks for them: what their learning is for, interests tapped from a list, their days and minutes, and off-screen activities and classes picked from a list.
Their learning: which lessons and practice they started and finished, on which day, and where they stopped.
How it went: the time they were active, the help they used, and how many answers were right or not yet.
Work done away from the screen: that it was done, and on which day. The ticks you choose for it, such as Yes, Partly or Not yet. For reading aloud: Smooth, Some stops or Hard. After a home investigation, the picture or word they picked for "What did you see?". We never keep their writing, a recording of their voice, or a photo of their work.
Work done on paper: which sheets you printed, their sheet number, and that a sheet was done on paper, on which day. If you choose to add marks, which question numbers were not yet right, or the score. Marks are optional. We never see or keep the paper itself.
Tracing letters on a tablet, when you turn it on: for each letter, how many tries it took and the help level used. The lines your child draws stay on the device and are never sent or kept.
Their answers, only when an answer is the question's own kind and short, such as a number, a fraction or one of the choices. Anything else a child types, like words or a phone number, is not kept. Short answers are kept for 30 days to show progress, then deleted. What stays after that is the counts and results made from them, such as how many were right.
Their own comfort settings (such as read-aloud, animations and text size) and the colour they picked.
Their week's plan, weekly summaries and, for homeschool families, homeschool records, all made from the items above.

There is no free text about a child anywhere: everything else is picked from a list.

6. What we never collect

A child's last name, birth date, photo, email or phone number.
Recordings of a child's voice or face. Wonderloop does not use the camera or the microphone.
Where your device is. Wonderloop does not use location.
Messages between children and other people. There is no chat.

A US law, the Children's Online Privacy Protection Act (COPPA), says a parent must give consent before an online service collects personal information from a child under 13. We ask for it for every child, at every grade, and we check it.

We ask once for your family, just before a child's first lesson, the first time you hand the device to a child. Until then nothing is collected from your children. You can set up your family and your week, see the plan and try a lesson yourself. We keep only what you typed for each child. One consent covers every child in your family, including children you add later.

You choose how we check:

A photo ID check, run by Stripe. On Stripe's own page you take a photo of your ID and a selfie. Stripe checks that they match. We never see or keep your ID or the photos. We keep only the result: that a parent was verified, when, and Stripe's reference number. We learn only whether you are 18 or older, never your birth date. We ask Stripe to delete the photos and details once the check is over.
A signed form. You sign our consent form on screen, or print it, sign it and send us a photo or a scan. A person at Wonderloop reads it within 2 working days and emails you the result. We keep an approved form as the record of your consent. A form we cannot accept is deleted.

Neither way proves that anyone is a parent, and we do not claim it does.

8. How we use what we keep

We use it only to run Wonderloop for your family:

to make each child's plan and show it to them: today's lessons first, then the week ahead;
to show you their progress, the weekly summary and records you can export;
to keep your account and your children safe;
to email you about your account, such as sign-in links, password resets and a changed PIN.

Today, no information about you or your child goes to any AI service. If we ever add an AI feature that needs some of it, we will update this policy and ask you first.

9. No ads, no selling, no tracking

There are no ads in Wonderloop.

We never sell, rent or trade your information or your child's. We never share it with anyone for their own marketing.

Wonderloop has no analytics or tracking tools from other companies: no ad networks, no tracking pixels, no social media buttons. Every script, font and picture comes from Wonderloop itself.

We use only the cookies Wonderloop needs to work. They keep you signed in, and keep the grown-ups gate closed while your child has the device. They send your child's saved work to the right family. A few last only while you sign in. None of them are for ads or tracking.

10. Companies that help us run Wonderloop

A few companies do work for us. They may use your information only to do that work, and not for anything of their own.

Google Cloud and Firebase host our website and servers, our database (in the United States) and sign-in, and keep invite requests.
Stripe runs the photo ID check for consent. Later, Stripe will also handle payments.
An email service sends our emails to you, with open and click tracking turned off. We will name it here before Wonderloop opens to families.

We may also share information if the law requires it, or to protect a child's safety.

11. Read-aloud stays on the device

Wonderloop can read lessons out loud. It uses only the voice built into your child's device, and never sends the words to an online voice service. If the device has no English voice of its own, read-aloud stays off, and we tell you why.

12. What stays on your device

So a child can keep learning without a connection, the device saves today's lessons and the week as kid mode shows it. It also saves your child's work for a short time, until it can send the work to us. It keeps nothing for more than 30 days. When you sign out, the device forgets the saved lessons. Work that has not reached us yet stays only if you choose to keep it, and only until it is sent.

13. See it, export it, delete it

In Settings, you can:

see everything we keep about your family, on one page;
download all of it as a file, and download homeschool records as spreadsheets;
change a child's details;
remove a child, or delete everything, including your account.

When you delete, we stop collecting at once. You then have 7 days to change your mind. After that, it is removed everywhere: learning records, plans, History and your sign-in account. Copies saved on your devices are dropped the next time they connect, and after 30 days at most. If you are sure, "Delete now" skips the 7 days.

14. Taking back your consent

You can take back your consent at any time: Withdraw consent in Settings, under Privacy and your data, or email us at team@wonderloop.app. Every child is taken out of Wonderloop at once and we stop collecting from them. Everything we keep about them is deleted after 7 days; until then you can change your mind from Home. Your own account stays, and of your consent we keep only a note that it was given and when it was taken back. You can also remove one child, or delete everything, in Settings. Without consent, a child cannot keep using Wonderloop.

15. How long we keep things

Your account, your children's profiles and their learning: until you delete them.
Each week's plan: 4 weeks after the week ends.
Weekly summaries: this school year and the last (a school year runs from 1 July to 30 June).
History of changes: while your account exists. You can go back to an earlier setting for one year.
Your child's short answers, one by one, as they reached us: 30 days, then deleted. The counts and results made from them stay with their learning.
Counts of sign-in tries: one day.
The photos from an ID check: we ask Stripe to delete them once the check is over.
Anything you delete: 7 days to change your mind, then removed. Our database backups keep copies for 7 more days.
Saved work on a device: 30 days at most.

16. How we keep it safe

Every connection to Wonderloop is encrypted.
Our database is not open to the internet, and it is encrypted.
Your PIN is kept only as a one-way scramble, and passwords are kept by Firebase, not by us.
We limit sign-in tries, and a new account opens nothing until its email is confirmed.
A child cannot reach the parent pages without your PIN.
Only the people who run Wonderloop can reach the data, and only to run it.

No system is perfect. If a problem ever affects your information, we will tell you, as the law requires.

17. Your child's rights under COPPA

As your child's parent or guardian, you can at any time:

review the personal information we keep about your child;
have it deleted;
stop us collecting any more, by taking back your consent;
agree to us collecting and using it without agreeing to share it with anyone else. We do not share it anyway, beyond the companies above.

We never ask a child for more information than an activity needs. Use Settings, or email team@wonderloop.app. If you write to us, we may ask you to show that you are the parent before we act, to keep your child's information safe.

18. Invite requests

If you ask for an invite on our home page, we keep your email address, the time you asked and that you asked on the home page. We keep it with Google's Firestore and use it only to send you an invite. It stays until you join, or until you ask us to remove it at team@wonderloop.app.

19. The preview

Before Wonderloop opens to families, its website is a preview for grown-ups to try. You can use the sample families, or set up a pretend family of your own.

The preview keeps what you do only in the server's memory. It is gone when the server restarts, and nothing is saved after you leave.
A pretend family is removed sooner when many newer ones are made.
Consent in the preview is pretend: nothing is checked, so please use made-up names, not your real child's details.
The preview keeps nothing else, apart from invite requests, described above.

20. Changes to this policy

If we change this policy, we will post the new version here with its date. If a change affects what we collect from your child or how we use it, we will tell you first and ask for your consent again.

21. Contact us

Mynde AI LLC, email team@wonderloop.app. We are happy to answer any question about your family's privacy.

Privacy Policy