Privacy Policy

1. Introduction

WunderTrove, Inc. ("we", "our", or "us") is committed to protecting the privacy of children who use our educational platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our mobile application and website (collectively, the "Service").

2. Information We Collect

From Parents/Guardians:

• Email address (for account creation and communication)
• Password (securely hashed)
• Payment information (processed by third-party payment processors)
• Child profile information you provide (avatar choice, age range)

From Children:

• Avatar selection (from predefined options)
• Age range (not specific birth date)
• In-app activity and progress data
• Game saves and creations (stored locally by default)

3. How We Use Information

We use the information we collect to:

• Provide and maintain the Service
• Personalize the learning experience based on age and skill level
• Allow parents to monitor their child's progress
• Communicate with parents about their account
• Improve our Service through aggregated, anonymized analytics
• Ensure the security and integrity of our platform

4. Data Storage and Security

We prioritize local-first data storage. Game saves and creative content are stored on your device by default. Only anonymized usage statistics are synced to our servers for analytics purposes.

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits by independent third parties
• Access controls limiting employee access to user data

5. Parental Rights Under COPPA

Parents have the right to:

• Review their child's personal information by contacting us
• Request deletion of their child's personal information
• Refuse further collection of their child's information
• Withdraw consent at any time

To exercise these rights, please contact us at privacy@wundertrove.com or visit the Settings section of your parent dashboard.

6. Third-Party Services

We use the following third-party services:

• Payment Processing: Stripe (PCI-DSS compliant, does not share data with children)
• Analytics: First-party only, no third-party analytics tools
• Cloud Infrastructure: AWS (SOC 2 certified)

We do not use any third-party advertising networks or share data with advertisers.

7. Data Retention

We retain parent account information as long as the account is active. Child profile data can be deleted at any time through the parent dashboard.

When an account is deleted:

• All personal information is deleted within 30 days
• Anonymized, aggregated data may be retained for analytics
• Backup data is purged within 90 days

8. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes that affect children's data, we will obtain fresh consent from parents.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your parental rights, please contact us:

• By email: privacy@wundertrove.com
• By mail: WunderTrove, Inc., 123 Innovation Way, San Francisco, CA 94102
• By visiting our contact page