Staying safe

How this site keeps children safe

• Only a parent can create an account. Children cannot sign up, and the site never asks a child for an email address, real name, photo or date of birth.
• This website has no AI chat and no way for strangers to contact a child.
• No adverts, no tracking and no analytics.
• Cookies are used only to keep someone signed in, and only after they sign in. Browsing the lessons sets none.
• Everything on the site, including the fonts, comes from the site itself. Nothing is loaded from other companies.
• The activities run in the browser and do not use the camera or microphone.
• Any example AI answers in lessons are chosen by adults in advance.

Privacy notice

Browsing without an account

You do not need an account to look around or to try Lesson 1. The prompt lab keeps its notebook only in your own browser, on your own device; we never receive it. If you do not sign in, this website does not ask for personal information and does not set cookies. Lesson 1 progress and the practice machine a child teaches are kept only in this browser (local storage). They are sent to us only if a parent chooses to add them to a child profile, and you can clear them any time by clearing site data.

Parent accounts

We store your email address and your login. Your password is handled by our login service and is stored in scrambled form. We use your email only to confirm your address and to reset your password.

Child profiles

For each child, a parent chooses a nickname, a username, a password, a stage and an avatar. We store these and the lessons the child marks as finished, with the date. We do not collect a child’s email address, real name, photo, date of birth, address or school, and we ask parents not to use real names.

Consent

A parent confirms they are the child’s parent or legal guardian each time they add a child. We keep the date of that confirmation.

Your control

A parent can see, download, reset or delete everything stored about their children, and delete their own account, from the account page.

Who handles the data

The site and its accounts are hosted by Netlify, which acts for us in storing the data. The company that hosts the website may also keep standard server logs, such as IP addresses, for security. We do not use any of this to build profiles or for advertising.

Payments

If a parent buys the Family Club plan, the payment is handled by Stripe, our payment processor. Stripe receives the parent’s email address and card details and sends us back only a customer number, a subscription number, the plan’s status and its renewal date. We never see or store card details. No child’s information is ever sent to Stripe. If we are legally required to, we keep payment records (such as invoices) for the time the law asks, even after an account is deleted.

Mavo chat (ages 9 to 14)

Mavo is a separate website, run by us, that you reach from your Wondi account. Its chat is off for every child until a parent turns it on and gives consent. To open it we send Mavo a made-up reference number for the parent and each child (not their real account IDs), the child’s nickname and age band, and whether the family has the full or the starter Mavo. We never send an email address or a username. When the chat is on, the messages a child types are sent to Anthropic, the company behind the Claude AI, so that it can reply. We send only the chat text and our instructions to the AI, never any detail about the child. Before anything is sent, filters stop private details such as names, ages, schools, addresses, phone numbers and links, and a second check looks at the message and at the reply. Every message and reply is saved in Mavo for 30 days so that the parent can read it, and a parent can delete it or download it at any time. It is deleted when the child or the account is deleted. Anthropic handles the text under its own terms and may keep it for a limited time to run and protect its service.

How long we keep it

Until a parent deletes it.

This site is run by Adcore Edge Solutions FZCO.

Questions about privacy? Email wondi@adcoreedge.com.

For grown-ups: our rules for AI in lessons

• No personal data goes into any AI tool, and photos of faces are never used.
• The website’s own activities run in the browser and send nothing anywhere. The optional real-AI tests use a general AI assistant on its own company’s site, always run by a grown-up and never with personal information.
• Children under 13 never use a chatbot directly. A grown-up types the prompts and reads each answer, and the child directs and checks.
• Any live AI helper for older children would be added only after a safeguarding review.
• Children’s work is never used to train models without a parent’s explicit consent. The tests use made-up or general prompts, never children’s work, names or photos.
• The optional Mavo chat (ages 9 to 14) is off until a parent turns it on. Private details are stopped before any message is sent, a grown-up can read every chat, and children are always told they are talking to an AI.

Accessibility

We aim to meet WCAG 2.2 AA. Pages work with a keyboard, the activities can be used without a mouse, and nothing relies on colour alone: day and night creatures also have different shapes. Text can be enlarged in the browser, and lesson pages print cleanly.

If you find something that doesn’t work for you, please tell us at wondi@adcoreedge.com.