COPPA Child Protection Policy
Last Updated: January 27, 2025
Your Child's Privacy is Protected by Federal Law
WonderTale is committed to protecting children's privacy in compliance with the Children's Online Privacy Protection Act (COPPA), a U.S. federal law that provides strict protections for children under 13 years old.
What is COPPA?
The Children's Online Privacy Protection Act (COPPA) is a U.S. federal law enacted in 1998 and enforced by the Federal Trade Commission (FTC). COPPA requires that operators of websites and online services directed to children under 13 obtain verifiable parental consent before collecting, using, or disclosing personal information from children.
Why WonderTale Requires Parental Consent
WonderTale is designed for children aged 3-12, which means we fall under COPPA's jurisdiction. Before we can collect any personal information from your child, we are legally required to:
- Provide parents with clear notice about our information practices
- Obtain verifiable parental consent
- Allow parents to review and delete their child's personal information
- Maintain the confidentiality and security of children's personal information
Information We Collect from Children
With Your Consent, We Collect:
- Child's Name: To personalize stories and address your child
- Child's Age: To provide age-appropriate content
- Child's Gender: To personalize story characters and themes
- Voice Recordings: For speech-to-text conversion to enable interactive storytelling
- ⚠️ Important: Voice recordings are immediately deleted after text conversion and are never stored
- Interests: To recommend relevant stories and themes
Third-Party Data Sharing
To provide our interactive storytelling service, we share limited information with the following trusted third-party providers:
OpenAI
Purpose: Speech-to-text (STT), AI story generation, text-to-speech narration, and content moderation
Data Shared: Voice recordings (immediately deleted after processing), story preferences
Privacy Policy: OpenAI Privacy Policy
Replicate (Flux image models)
Purpose: AI image generation for story illustrations
Data Shared: Story themes, character descriptions (no personal information)
Privacy Policy: Replicate Privacy Policy
How We Obtain Verifiable Parental Consent
COPPA requires verifiable parental consent, meaning we must use a method that reasonably ensures the person providing consent is the child's parent. WonderTale uses in-app purchase verification through the Apple App Store and Google Play, an FTC-approved method.
Consent Verification Process:
- When you start a subscription or free trial, you confirm your identity as a parent
- Payment is handled securely by the Apple App Store or Google Play — the same trusted billing already on your device
- Completing this in-app transaction is an FTC-approved method of verifiable parental consent
- Once verified, your consent is recorded and child profiles are activated
- This ensures only the verified account holder can authorize data collection from children
Your Parental Rights Under COPPA
As a parent or legal guardian, you have the following rights:
Review Your Child's Information
Request to see what personal information we have collected from your child by emailing wondertale.sup@gmail.com
Delete Your Child's Information
Delete your child's account and all associated data through App Settings → Delete Child Profile, or contact us
Refuse Further Collection
Withdraw your consent at any time, which will stop further data collection (existing data will be deleted upon request)
Correct Inaccurate Information
Update your child's profile information through the app or contact us for assistance
Data Security & Protection
We implement industry-standard security measures to protect children's personal information:
- Encryption: All data is encrypted in transit (TLS) and at rest (AES-256)
- Access Controls: Limited employee access on a strict need-to-know basis
- Immediate Deletion: Voice recordings are automatically deleted after text conversion
- Secure Infrastructure: Hosted on Supabase with enterprise-grade security
- No Marketing Use: We never use children's information for marketing or advertising
- No Third-Party Advertising: WonderTale is ad-free and does not share data with advertisers
Data Retention
We retain children's personal information only as long as necessary:
- Voice Recordings: Deleted immediately after STT processing (retained for <60 seconds)
- Child Profile Data: Until parent deletes the child's account
- Story Data: Until parent deletes the story or child's account
- Consent Records: As required by law for legal compliance (typically 3-7 years after account deletion)
Changes to Our COPPA Practices
If we make material changes to how we collect, use, or share children's personal information, we will:
- Notify parents via email
- Obtain new verifiable parental consent if required by law
- Update this COPPA policy with the effective date
Contact Us About COPPA
If you have questions about our COPPA practices, want to exercise your parental rights, or have concerns:
COPPA Compliance Officer: wondertale.sup@gmail.com
Subject Line: "COPPA Request"
Response Time: Within 5 business days
Mailing Address:
Dreamoa COPPA Compliance
32 Hyeongseol-ro
Chungju-si, Chungcheongbuk-do
Republic of Korea
Important Notice for Parents
If you believe we have collected personal information from your child without your consent, or if you have any concerns about how we handle children's data, please contact us immediately at wondertale.sup@gmail.com. We take COPPA compliance seriously and will investigate and address your concerns promptly.
Additional Resources:
Thank you for trusting WonderTale with your child's learning journey. We are committed to maintaining the highest standards of privacy and security for all our young users.