Privacy Policy

Last updated: October 2026

WanderKid ("we", "our", "the app") is a children's storytelling application designed for families. We are deeply committed to protecting the privacy and safety of our users, with particular care for the children who enjoy our stories. This policy explains what data we collect, how we use it, how we protect it, and what rights you have.

1. Who We Are

WanderKid is operated by Nambiar Enterprises, based in the United Kingdom. For any privacy-related questions, concerns, or data requests, contact us at [email protected]. We aim to respond to all enquiries within 48 hours.

2. Designed for Families: The Parental Gate

WanderKid is designed for children aged 3 to 10, intended to be set up and supervised by a parent or legal guardian. Only a parent or legal guardian may create an account. The account creation process requires an email address and a one-time verification code, serving as a parental gate. Children do not create accounts, do not provide personal information directly to the app, and cannot use the app without a parent first completing the onboarding process on their behalf.

3. Data We Collect

Parent account information: We collect the parent's email address solely for authentication purposes. We use a secure one-time passcode (OTP) system, so no passwords are ever stored or transmitted.

Child profile information: During onboarding and in Settings, parents provide their child's first name, age, preferred language(s), story genre preferences, personal interests, off-limits topics, accessibility needs, preferred story length, narrator voice preference, text size, and whether stories should be books to read and how long. This information is used solely to personalise stories for that child and is fully controlled by the parent.

Before an account exists: A parent can set up their child before signing in. Until they do, the answers they give are kept only on their own phone; nothing is sent to WanderKid or anyone else. They are saved to the parent's account when the parent signs in at the end of setup, and removed from the phone once saved, or when the parent signs out.

Story data: We store stories generated for each child, including story text, audio narration files, and (where applicable) illustration images. For books to read, we store the text and the place your child reached, so the book reopens where they stopped. This enables families to revisit and replay saved stories in the library.

Website launch notifications: If you choose to leave your email address on our website to be notified when WanderKid launches, we store that email address solely to send you launch-related updates about WanderKid. We never share it, and you can ask us to remove it at any time by emailing [email protected].

This website: wanderkid.app uses Cloudflare Web Analytics to count page visits. It sets no cookies, does not identify visitors, and does not track anyone across other websites. It applies to this website only, never to the app.

4. Data We Do Not Collect

We want to be unequivocal about what WanderKid does not do:

• We do not collect precise or approximate location data.
• We do not access contact lists, photos, or the camera.
• The microphone is used only while your child taps to talk. Their speech is turned into text by Apple's speech recognition, on the iPhone or on Apple's servers under Apple's own privacy terms. WanderKid receives only the resulting text, as the story request, and never receives or stores any audio.
• We do not collect browsing history or track activity outside the app.
• We do not use advertising identifiers or any form of cross-app tracking.
• The app does not use analytics or usage-tracking tools of any kind.
• We do not collect biometric data of any kind.
• We do not display advertisements of any kind within the app.
• We do not sell, rent, trade, or share personal data with any third party for marketing, advertising, or profiling purposes.
• We do not build user profiles for behavioural targeting.

5. How We Use Data

All data collected is used exclusively to provide and improve the WanderKid service for your family. Specifically:

Story personalisation: The story request, and the child's age, interests, chosen genres, off-limits topics, accessibility needs, language and preferred story length, are used to write a story appropriate for their age and preferences. The titles of the child's recent stories, and a short description of where each one began, are also used, so that a new story is different from the last few. Where the parent enables it, the child's name may appear as a character in the story.

Audio narration: Story text is processed by a secure text-to-speech service to generate audio narration in the selected language and voice. Narration requests contain only the story text itself. Where the parent has chosen to include the child's name in stories, the story text may naturally contain the child's first name; no other personal information about the child or parent is ever included in narration requests.

Illustrations: Where enabled, scene descriptions derived from the story are processed by a secure image generation service to create illustrations. Because scene descriptions are derived from the story content, they may include the child's first name where the parent has enabled name inclusion; no other personal information about the child or parent is ever included in illustration requests.

Books to read: Where the parent switches on Read only, a story is written as a longer book to read, with no narration and no illustrations, so only the story generation service is involved. A longer book is written in two parts, and the second part is written from the first.

Re-telling a story in another language: Where a parent re-tells a story in another of the child's languages, that story's own text and the language to tell it in are sent to the story generation service, which translates it, and a narrated story is then narrated again by the text-to-speech service. As with any story, the text may contain the child's first name where the parent has enabled name inclusion; nothing else about the child or parent is sent. Pressing and holding a sentence in a book to see it in another language sends nothing anywhere: it uses versions already saved in the child's library.

Authentication: The parent's email address is used solely for secure account login via one-time passcodes.

6. Third-Party Service Providers

WanderKid uses carefully selected third-party service providers to deliver its core functionality. These providers act strictly as data processors on our behalf and are contractually required to process data solely for the purpose of fulfilling our service requests and to maintain appropriate security measures:

Cloud database and authentication provider (Supabase): Stores account data and story content on secure, encrypted servers hosted in the European Union (Ireland). Provides secure email-based authentication.

AI story generation service (Google Gemini): Receives story prompts containing the story request; the child's age, interests, chosen genres, off-limits topics, accessibility needs, language and story length; the titles of their recent stories and where each began; and the child's first name only where the parent has enabled name inclusion in stories. For a longer book, it also receives the chapters already written, to continue them. This service processes data in real time and does not retain personal data beyond the immediate generation request.

Text-to-speech service (Google Cloud Text-to-Speech): Receives story text only, which may contain the child's first name where the parent has enabled name inclusion in stories. Data is processed in real time and not retained beyond the immediate request.

Image generation service (Google Gemini): Receives scene descriptions derived from the story only, which may contain the child's first name where the parent has enabled name inclusion in stories. Data is processed in real time and not retained beyond the immediate request.

Subscription management provider (RevenueCat): Where a family purchases a subscription, purchases are processed by Apple through the App Store, and a subscription management service maintains the subscription status linked to an anonymous identifier. This provider never receives the parent's email address or any child profile information.

None of the AI, narration, illustration, or subscription providers ever receives the parent's email address, account details, or contact information. We regularly review our providers' data protection practices and may change providers at any time to ensure the highest standards of privacy and security are maintained.

7. Content Safety

WanderKid employs multiple layers of content safety to ensure all stories are appropriate for young children:

• All AI-generated stories are guided by comprehensive safety prompts that enforce age-appropriate content, positive themes, and the strict exclusion of violence, fear, or any harmful material.
• Parents can specify "off-limits topics" during onboarding, which are respected in all story generation.
• Story illustrations are generated in a warm, children's-book style with explicit safety constraints. Illustrations may depict story characters, including the story's protagonist, and are strictly limited to wholesome, age-appropriate imagery with no frightening, violent, or otherwise inappropriate content.
• The app does not include any user-generated content, social features, chat functionality, or any means for children to communicate with other users. The only links that leave the app (to this policy and our terms) are behind a parental gate.
• There are no in-app purchases accessible to children. All subscription management is handled through the parent's App Store account.

8. Data Storage and Security

We implement robust security measures to protect your family's data:

• All data in transit is encrypted using industry-standard HTTPS/TLS protocols.
• All data at rest is encrypted on our cloud database servers.
• Account data and child profiles are stored on secure servers in the European Union (Ireland), subject to GDPR protections.
• Audio narration files and story illustrations are stored in secure cloud storage with appropriate access controls.
• We use Row Level Security (RLS) policies to ensure that each family can only access their own data. No family can view, modify, or access another family's data under any circumstances.
• Authentication uses secure one-time passcodes, so no passwords are stored anywhere in our system.

9. Children's Privacy: COPPA and GDPR Compliance

We fully comply with the Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR) including its provisions for children's data, and the UK Data Protection Act 2018 including the Age Appropriate Design Code (Children's Code).

• Parental consent: Only parents or legal guardians may create accounts and provide child information. The email verification process serves as verifiable parental consent.
• Minimal data collection: We collect only the minimum data necessary to provide personalised stories. We do not collect any data that is not directly required for the service.
• No direct child interaction: Children do not independently provide any personal information to the app.
• No third-party child data sharing: We never share a child's personal data with third parties for any purpose other than the direct provision of the storytelling service as described in this policy.
• Immediate remediation: If we become aware that personal information has been collected from a child without verifiable parental consent, we will delete it immediately and notify the relevant parties.

10. Parental Rights and Controls

Parents have full, unrestricted control over their family's data at all times through the app:

• View and edit: Review and modify all child profile information (name, age, preferences) at any time via Settings.
• Delete stories: Remove individual stories from the library at any time.
• Delete child profiles: Permanently delete a child's entire profile and all associated stories, audio files, and images, directly in the app.
• Delete account: Permanently delete the parent account and all associated data directly in the app (Settings → App → Delete account), or by contacting us at [email protected].
• Data export: Parents may request a copy of all data associated with their account by contacting us at the email address above.

11. Data Retention

We retain account and story data only for as long as the account remains active and the data serves its stated purpose. When a parent deletes a child profile, all associated stories, audio files, and images are permanently and irreversibly deleted from our systems. When a parent deletes their account, all data associated with the account is permanently deleted within 30 days.

12. International Data Transfers

Our primary data storage is in the European Union. Some third-party service providers may process data outside the EU for the sole purpose of providing real-time story generation, narration, or illustration services. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms, to protect your data in accordance with GDPR requirements. No personal data is stored outside the EU; only transient processing occurs during story generation.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. If we make material changes that affect how we handle children's data, we will notify users through the app prior to the changes taking effect. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the app after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy, your family's data, or WanderKid's privacy practices, please contact us at:

Email: [email protected]

Response time: We aim to respond to all privacy-related enquiries within 48 hours.