Family privacy

Privacy Policy

Last updated: July 29, 2026

Controller and contact

Wizkyds is operated by Digilab Solutions Pte Ltd. Contact privacy@wizkyds.com for privacy matters and support@wizkyds.com for product support.

Parent-managed service

Only a parent or legal guardian creates and authenticates an account. Children do not receive accounts, credentials, email addresses, social features, chat, or public profiles. Generic guest mode stays on the device and does not transmit a child nickname, age, profile, progress, or child identifier.

Before creating a child profile, the parent sees a direct notice and confirms consent through one single-use email link. A passive consent receipt follows about 24 hours later and requires no action. Consent applies to the child profiles that parent creates.

Information we process

We process the parent's verified email, account identifier, authentication information, and support messages; a child nickname, age, avatar, and optional pronunciation supplied by the parent; quiz answers, scores, progress, and activities; the minimum nickname text and generated speech needed for personalised text-to-speech; parent-managed purchase and entitlement records; and limited security/service logs. If you join the Android beta tester list, we also store the email address you submit so we can contact you about access.

Wizkyds does not sell personal information or show third-party advertising. The app does not collect a child's legal name, date of birth, email, location, contacts, photos, camera input, microphone recording, or voice recording.

Why we use it

We use parent account and purchase data to provide the service under our contract with the parent. We use child profile, learning, and speech data only after parental consent to provide the requested educational features. We use limited operational information for security, support, fraud prevention, and legal obligations.

Providers and transfers

We use Supabase for parent authentication; Cloudflare Workers, D1, and R2 for application processing and storage; Microsoft Azure Speech for real-time text-to-speech; RevenueCat and Google Play for parent purchases; and Resend for authentication, consent, and service email.

Azure's real-time prebuilt text-to-speech service does not retain input text or generated audio. Resend retains sent-email data for 30 days. Deleted D1 rows can remain in Cloudflare's disaster-recovery Time Travel window for up to 30 days depending on plan. Supabase backup recovery windows, if enabled, can be 7, 14, or up to 30 days. Provider legal, security, and payment records may be retained where required by law.

Providers may process information outside Singapore using applicable contractual transfer safeguards. Wizkyds will not be offered to EEA or UK users until any required representative is published or written legal advice confirms an exemption.

Retention and deletion

We retain data while the relevant parent account and profiles remain active. We do not use automated inactivity deletion in this release. A parent can delete a profile, withdraw consent, or delete the account. Withdrawal immediately blocks child cloud processing and queues deletion of child data while preserving the parent account and purchase entitlement. Primary data controlled by Wizkyds is deleted within seven days; isolated provider recovery copies expire under the periods above.

We may retain a minimal pseudonymous record that consent or deletion occurred and financial records required for accounting, disputes, fraud prevention, or law. Those records do not contain the child profile.

Your choices and rights

Parents can correct or delete profiles and manage consent in the app. Email privacy@wizkyds.com from the parent account email for access, portability, correction, objection, restriction, or another privacy request. We may verify ownership. Depending on location, a person may complain to the relevant data-protection authority. Material changes to child-data collection, purpose, disclosure, or provider role may require renewed consent.

Read the concise direct parental notice or the short children's explanation.