WonderWeave Privacy Policy
Last updated: October 2, 2026
WonderWeave is for parents and guardians to use together with their children. This policy explains what we collect, why, who helps us run the service, and the choices you have. Our Children's Privacy Notice explains in more detail how we treat information about children.
Who we are
WonderWeave is operated by Zanghi LLC, a company registered in Massachusetts, United States, at 20 Kings Row Ln, Framingham, MA 01701, United States. You can reach us at support@wonderweave.app.
The short version
- Only adults create accounts. We ask you to confirm you are a parent or guardian aged 18 or over.
- We use your child's age and the story idea you choose together to write each story. We do not send your child's name or pronouns to the AI services that write and draw the story.
- We do not show advertising, we do not sell personal information, and we do not use cookies or trackers for advertising or analytics on our website or in the app.
- You can download your family's data and delete your account, with everything in it, from your profile page at any time.
Information we collect
Details
- Your account
- Email address and a password (handled by Google Firebase Authentication; we never see your password), or the name, email and photo address Google gives us if you sign in with Google. An account ID. Whether your email is confirmed. A record of when you confirmed you are an adult and agreed to our Terms and this policy, and which version.
- Your child's profile
- A first name or nickname, an age, and a pronoun choice, which you enter. We ask you not to enter a last name.
- Story ideas
- The idea you or your child type (for example, "a boat made of clouds"), the age, whether it is a bedtime or daytime story, and your choice of picture style and narrator.
- Stories, pictures and narration
- The story text we generate, the pictures made for each page, the narration audio, and the choices made while reading. Pictures and audio are stored privately; they are not public web addresses. Where you were up to in a story is kept on your own device.
- Subscription and payment
- If you subscribe: your Stripe customer ID, plan, status and renewal dates. Card details are entered on Stripe's pages and never reach our servers.
- Usage counts
- How many stories, pictures and narration characters you have used this day and month.
- Free-trial check
- A scrambled (keyed, one-way) code made from your email address, kept so one person cannot start the free trial again and again. It cannot be turned back into your email address without a secret that only we hold, and it is not linked to your account after you delete it.
- Technical information
- Our hosting provider keeps ordinary server logs (such as IP address, browser type and the page requested). If something breaks, an error report is sent to Sentry with technical details only: it is set up to leave out what you typed, read or heard, and session recording is turned off.
- Messages to us
- What you send to our support address.
Why
- Your account
- To create and secure your account and keep a record of your agreement.
- Your child's profile
- To make the app feel personal and to set a suitable reading level and picture style. The name and pronouns stay in your family's account and are not sent to AI services.
- Story ideas
- To write the story.
- Stories, pictures and narration
- To show you your stories again without paying to remake them.
- Subscription and payment
- To run your plan and billing.
- Usage counts
- To apply the limits of your plan and protect the service from misuse.
- Free-trial check
- To prevent abuse of the free trial.
- Technical information
- To keep the service secure and working.
- Messages to us
- To help you.
| What | Details | Why |
|---|---|---|
| Your account | Email address and a password (handled by Google Firebase Authentication; we never see your password), or the name, email and photo address Google gives us if you sign in with Google. An account ID. Whether your email is confirmed. A record of when you confirmed you are an adult and agreed to our Terms and this policy, and which version. | To create and secure your account and keep a record of your agreement. |
| Your child's profile | A first name or nickname, an age, and a pronoun choice, which you enter. We ask you not to enter a last name. | To make the app feel personal and to set a suitable reading level and picture style. The name and pronouns stay in your family's account and are not sent to AI services. |
| Story ideas | The idea you or your child type (for example, "a boat made of clouds"), the age, whether it is a bedtime or daytime story, and your choice of picture style and narrator. | To write the story. |
| Stories, pictures and narration | The story text we generate, the pictures made for each page, the narration audio, and the choices made while reading. Pictures and audio are stored privately; they are not public web addresses. Where you were up to in a story is kept on your own device. | To show you your stories again without paying to remake them. |
| Subscription and payment | If you subscribe: your Stripe customer ID, plan, status and renewal dates. Card details are entered on Stripe's pages and never reach our servers. | To run your plan and billing. |
| Usage counts | How many stories, pictures and narration characters you have used this day and month. | To apply the limits of your plan and protect the service from misuse. |
| Free-trial check | A scrambled (keyed, one-way) code made from your email address, kept so one person cannot start the free trial again and again. It cannot be turned back into your email address without a secret that only we hold, and it is not linked to your account after you delete it. | To prevent abuse of the free trial. |
| Technical information | Our hosting provider keeps ordinary server logs (such as IP address, browser type and the page requested). If something breaks, an error report is sent to Sentry with technical details only: it is set up to leave out what you typed, read or heard, and session recording is turned off. | To keep the service secure and working. |
| Messages to us | What you send to our support address. | To help you. |
We do not collect your child's photo, voice, location, contacts, school, or any government or financial identifier, and the app does not record anyone's voice. (Narration is spoken by synthetic narrator voices.)
How we use information
- To write stories, make pictures and read them aloud, and to save your stories to your account.
- To check generated stories before you see them, to help keep them suitable for children.
- To create and protect your account, send you account emails (such as the confirmation link), run your plan, and process payments.
- To keep the service safe, reliable and within its limits, and to fix problems.
- To meet legal obligations and enforce our Terms.
We do not sell personal information. We do not share it for advertising. We do not build advertising profiles. We do not use your information, your child's information or your stories to train AI models, and we have not opted in to any programme that lets our providers do so.
Who helps us run WonderWeave
We share information only with service providers who need it to deliver the service, and only for that purpose.
What they do for us
- Google (Firebase and Google Cloud)
- Sign-in, our database, private file storage and the servers that run the app, in the United States. Also our support mailbox.
- Anthropic
- Writes the story text and reviews it for suitability.
- Replicate
- Draws the pictures.
- ElevenLabs
- Reads stories aloud in a synthetic narrator voice.
- Stripe
- Takes payments and handles tax.
- Resend
- Sends account emails such as the confirmation link.
- Sentry
- Receives error reports.
What they receive
- Google (Firebase and Google Cloud)
- Account details, profiles, stories, pictures, audio, and server logs.
- Anthropic
- The story idea, the child's age, and the story text. Not the child's name or pronouns.
- Replicate
- A description of each scene (characters, setting, mood) and the picture style. Not names of real people, and not the child's name.
- ElevenLabs
- The text of the page being read, and the narrator chosen.
- Stripe
- Your email, billing details you enter, and subscription status.
- Resend
- Your email address and the email's content.
- Sentry
- Technical error details without what you typed, read or heard.
| Provider | What they do for us | What they receive |
|---|---|---|
| Google (Firebase and Google Cloud) | Sign-in, our database, private file storage and the servers that run the app, in the United States. Also our support mailbox. | Account details, profiles, stories, pictures, audio, and server logs. |
| Anthropic | Writes the story text and reviews it for suitability. | The story idea, the child's age, and the story text. Not the child's name or pronouns. |
| Replicate | Draws the pictures. | A description of each scene (characters, setting, mood) and the picture style. Not names of real people, and not the child's name. |
| ElevenLabs | Reads stories aloud in a synthetic narrator voice. | The text of the page being read, and the narrator chosen. |
| Stripe | Takes payments and handles tax. | Your email, billing details you enter, and subscription status. |
| Resend | Sends account emails such as the confirmation link. | Your email address and the email's content. |
| Sentry | Receives error reports. | Technical error details without what you typed, read or heard. |
We may also disclose information if the law requires it, to protect people's safety or our rights, or to a successor if WonderWeave is sold or merged (we would tell you first and your choices would continue to apply).
Cookies and similar technologies
We do not use advertising or analytics cookies on wonderweave.app or in the app. Signing in uses your browser's local storage so you stay signed in, and the app keeps your reading position and your “read aloud” setting on your device. Stripe, when you pay, may set its own cookies on its pages. We honour browser “Do Not Track” and Global Privacy Control signals by default because we do not track.
How long we keep information
- Your account, your child's profile, stories, pictures and narration: until you delete them or delete your account.
- When you delete your account, we delete these from our live systems straight away, cancel any subscription, and delete your billing customer record from Stripe. We keep only the account ID, with no personal details, so a deleted account cannot be brought back by an old sign-in. Copies in our providers' routine backups and logs expire on their normal schedules.
- Payment records and invoices: kept by Stripe and by us as long as tax and accounting law require.
- The free-trial check code: kept without any link to your account, to prevent repeated trials.
- Support emails: as long as needed to help you and keep a record of our response.
Your choices and rights
- Download: on your profile page, "Download my data" gives you a copy of what we hold.
- Delete: on your profile page, "Delete my account" removes your account and everything in it. You will be asked to sign in again and confirm.
- Correct: you can change your child's profile in the app, or ask us.
- Ask: email us to access, correct or delete information, to withdraw consent, or to ask a question. We will verify that the request comes from the account holder and reply within 45 days.
Depending on where you live (for example, California and some other US states), you may have additional rights, including to know, delete, correct and obtain a copy of your personal information, and not to be discriminated against for using them. We do not sell or share personal information for advertising. To use a right, or to appeal a decision, email support@wonderweave.app.
AI-generated content
Stories, pictures and narration are made by AI. We use filters and a second automated review to keep them suitable for young children, but no system is perfect. Please read each story before sharing it with a young child, and tell us if you see something that is not suitable.
Security
Information is encrypted in transit (HTTPS) and at rest by Google Cloud. Pictures and audio are stored privately and shown to you with short-lived links. Only our servers can write to the database, our service providers receive only what they need, and access is limited to the people who operate WonderWeave. No online service can promise perfect security. If a breach affects you, we will tell you as the law requires.
Where information is processed
WonderWeave is intended for families in the United States. Our hosting is in the United States, and our service providers may process information in the United States and other countries.
Changes to this policy
If we make a material change, we will tell you in the app or by email, and if a change affects information about children we will ask for your agreement again where the law requires it. The date at the top shows when this policy was last updated.
Contact
Zanghi LLC, 20 Kings Row Ln, Framingham, MA 01701, United States. Email support@wonderweave.app.