Updated July 2026
Privacy Policy
Wonderwhy is built for children aged 4–10 and designed to be privacy-first. Wonderwhy is developed and operated by Prashant Khatri. This policy explains, in plain language, what limited information we handle and how we keep your child safe. We do not sell data, we do not show ads, and we do not use third-party advertising or tracking.
Who this is for
Wonderwhy is intended to be set up and managed by a parent or guardian. A parent creates the account, sets a private PIN, and controls the experience. Children use the app under adult supervision.
Information we handle
Parent account: email address (for login) and, if you choose Google sign-in, your Google email and name. Child profile: a first name or nickname, age, and preferred language — used only to tailor answers. We do not ask children for last names, addresses, phone numbers, photos, or precise location.
Voice and questions
When your child asks a question by voice, the audio is sent securely to our speech-to-text provider (ElevenLabs) to convert it to text, and to our AI provider (Google Gemini) to generate a kid-safe answer. Answers are read aloud using ElevenLabs text-to-speech. We store the text transcript of questions and answers so parents can review them in the dashboard. We do not retain child voice recordings after transcription.
No ads, no tracking
Wonderwhy contains no third-party advertising, no behavioral tracking, and no analytics SDKs that profile children. We do not build advertising profiles and do not share personal information with advertisers.
Child safety filtering
Every answer passes through age-appropriate prompts and a blocked-topic filter. If a question is not suitable for a child, Wonderwhy gently declines and redirects to a safe, fun science topic.
Parental controls & rights
The parent dashboard is protected by an adult-only gate and a private PIN. Parents can review conversation history, edit or delete the child profile, and sign out at any time. To request deletion of your account and associated data, contact us at the email below.
Data security
Data is transmitted over encrypted connections (HTTPS) and stored on secured servers. Access to session tokens on the device is stored in the platform’s secure storage.
COPPA & GDPR-K
We aim to comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and equivalent child-privacy rules. Because a parent sets up and controls the account, the parent provides verifiable consent for the limited data described here.
Contact us
Questions or data requests? Email prashantkhatridev@gmail.com and we’ll respond promptly.