Privacy Policy

Introduction

WonderPods💫 is a service operated by Crespo Ltd. (collectively, "WonderPods," "we," "our," or "us"). We take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our service. If you do not agree with these terms, please do not access the Site or use the Service.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

Collection of Your Information

We may collect information about you in a variety of ways. The information we may collect via the Site includes:

Personal Data

Personally identifiable information, such as your name, email address, and telephone number, that you voluntarily give to us when you register with the Site or when you choose to participate in various activities related to the Site, such as creating kid profiles or generating podcast content. You are under no obligation to provide us with personal information of any kind, however your refusal to do so may prevent you from using certain features of the Site.

Child Data

We collect information about your children, such as their name, age, and interests, to personalize the podcast content we generate. This information is provided by you, the parent or legal guardian, and is used solely for the purpose of creating personalized educational content. We do not knowingly collect any personal information directly from children under the age of 13.

Derivative Data

Information our servers automatically collect when you access the Site, such as your IP address, browser type, operating system, access times, and the pages you have viewed directly before and after accessing the Site.

Financial Data

Financial information, such as data related to your payment method (e.g., valid credit card number, card brand, expiration date) that we may collect when you purchase a subscription. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor, LemonSqueezy, and you are encouraged to review their privacy policy and contact them directly for responses to your questions.

Use of Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

• Create and manage your account.
• Generate personalized podcast content based on the information you provide about your children.
• Process payments and refunds.
• Email you regarding your account or subscription.
• Send you technical notices, updates, security alerts, and support and administrative messages.
• Respond to your comments, questions, and requests.
• Monitor and analyze usage and trends to improve your experience with the Site.
• Develop and improve our products and services.
• Prevent fraudulent transactions, monitor against theft, and protect against criminal activity.

Google User Data

When you choose “Continue with Google,” we request the following Google OAuth scope:

• openid profile email – used solely to authenticate you and pre‑fill your WonderPods account with your Google display name and email address.

We store your Google refresh token encrypted at rest in Firebase Firestore, scoped to your WonderPods user ID. Access is restricted to backend services that (a) refresh your access token to fulfill actions you initiate, or (b) revoke it at your request.

WonderPods’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We retain Google refresh tokens only while your WonderPods account is active; they are deleted within 90 days after you disconnect Google or close your account.

You may revoke WonderPods’ access to your Google account at any time from Google Account → Security → Third‑party apps.

Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

By Law or to Protect Rights

If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.

Third-Party Service Providers

We may share your information with third parties that perform services for us or on our behalf, including payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.

Marketing Communications

With your consent, or with an opportunity for you to withdraw consent, we may share your information with third parties for marketing purposes, as permitted by law.

Interactions with Other Users

If you interact with other users of the Site, those users may see your name, profile photo, and descriptions of your activity.

Online Postings

When you post comments, contributions, or other content to the Site, your posts may be viewed by all users and may be publicly distributed outside the Site in perpetuity.

Business Transfers

If we or our subsidiaries are involved in a merger, acquisition, or asset sale, your information may be transferred.

Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

Children's Privacy

We do not knowingly collect information from children under the age of 13. If you are under the age of 13, please do not submit any personal information through the Site. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personal information through the Site without their permission.

The information we collect about children (name, age, interests) is provided by parents or legal guardians and is used solely for the purpose of generating personalized educational content. This information is stored securely and is not shared with third parties except as necessary to provide our services.

Your Rights

You have certain rights regarding the personal information we collect about you and your children:

• The right to access and receive a copy of your personal information
• The right to rectify or update your personal information
• The right to delete your personal information
• The right to restrict or object to our processing of your personal information
• The right to data portability

To exercise these rights, please send an email to our Privacy Team at privacy@wonderpods.app with the subject line "Data Subject Request". Please include your account email address and specify the right(s) you wish to exercise (e.g., Access, Deletion). We will respond to verifiable requests within 30 days.

California Privacy Rights

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Site and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

For detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Policy.

Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

Specifically:

• Account information is retained for as long as your account is active or as needed to provide you services
• Child profile information is retained for as long as your subscription is active
• Generated content information is retained for as long as your subscription is active, after which it will be deleted
• If you cancel your subscription, your child profiles and any generated content will be deleted within 30 days
• Transaction information is retained for 7 years for tax and accounting purposes

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we collect and process your personal information on the following legal bases:

• Consent: We process your data based on your consent when you agree to our terms, create an account, or opt in to marketing communications.
• Contract: We process your data as necessary to fulfill our contractual obligations to you, such as providing the Service you have subscribed to.
• Legitimate Interests: We process your data when it is in our legitimate interests to do so and not overridden by your rights (e.g., for security, fraud prevention, and improving our services).
• Legal Obligation: We may process your data to comply with a legal obligation, such as responding to a court order or law enforcement request.

International Data Transfers

We are based in the United States and process information on servers located in the United States. We may also use service providers located in other countries to process your information. By using our Site, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than in your country.

When we transfer personal data from the European Economic Area, United Kingdom or Switzerland to the United States or other countries that have not been determined by the European Commission to provide adequate protection for personal data, we use legal mechanisms designed to help ensure your rights and protections, including:

• Standard Contractual Clauses approved by the European Commission
• Obtaining your explicit consent for the transfer
• Implementing appropriate technical and organizational measures to protect your personal data

Detailed GDPR Rights (For EEA Residents)

If you are located in the European Economic Area, you have these rights regarding your personal data:

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
• Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

You will not have to pay a fee to access your personal data or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. To exercise any of these rights, please send an email to our Privacy Team at privacy@wonderpods.app with the subject line "GDPR Data Request". Please include your account email address and specify the right(s) you wish to exercise.

Detailed CCPA Rights (For California Residents)

Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information:

• Right to Know: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months, including:
  • Categories of personal information we collected about you
  • Categories of sources for the personal information
  • Our business or commercial purpose for collecting that information
  • Categories of third parties with whom we share that information
  • Specific pieces of personal information we collected about you
• Right to Delete: You have the right to request that we delete personal information we collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale: You have the right to opt-out of the sale of your personal information. Note that we do not sell personal information as defined by the CCPA.
• Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of your CCPA rights.

To exercise your rights under the CCPA, please send an email to our Privacy Team at privacy@wonderpods.app with the subject line "CCPA Data Request". We require you to provide sufficient information to allow us to reasonably verify you are the person about whom we collected personal information. We will respond to verifiable consumer requests within 45 days.

Privacy Contact

Crespo Ltd.
Attn: Privacy Team
Email: privacy@wonderpods.app

Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

WonderPods💫
Email: privacy@wonderpods.app