Draft for legal review. This page will be finalized before launch.

Privacy

Wishpip is a service for parents. You create the account, you hold the subscription, and you decide what we keep.

What we collect

• Your email address, to sign you in. Your billing details are handled by Stripe; we never see your full card number.
• For each child: their age band (4–5 or 6–7) and, only if you add it, a first name. The name is shown only to your family and is never sent to any AI.
• Their wishes: the picture cards your child picks at the wish well on their iPad, and wishes you type for them. Before a typed wish is kept, we take out your children's names, other first names you choose to take out, and any contact details, and you see exactly what we keep.
• What they keep at Home: the souvenirs, friends and adventures from their play, saved on their iPad and in your account, so a new iPad or a cleared browser doesn't lose them.
• What they did in their adventures, so their next one follows from their last: which way they chose, what they made and changed, the friends they met, and the places they went back to. It holds only words from our own adventures, never anything your child said or typed. This is sent to the AI that writes their next adventure, and you can read it, word for word, on your family page. “Erase everything” erases it.
• Their iPad's play link, which you create. We keep only a scrambled form of its key, and when the iPad last played.
• The play time you set for each child (a daily limit, quiet hours). How long they played today is counted on their iPad and never sent to us.
• When something goes wrong in the game, your child's iPad tells us what broke: the error, the adventure and scene it happened in, the game's version and the kind of browser. Never who, and nothing your child said or did. We keep these reports for 30 days, to fix what broke.

What we never collect

• Photos, videos or voice recordings of anyone. Your child never types or talks to an AI.
• Location, contacts or advertising identifiers. There are no ads, no analytics and no third-party trackers in the game.

How AI is used

Each adventure is made ahead of time from a wish, using Microsoft Azure AI services (to write it, paint its pictures and voice it) that do not train on your data. A child's name never reaches any AI. A person at Wishpip plays every adventure, and reads the wish it was made from (never with your child's name), before your child sees it, and nothing is made while your child plays. The pictures and voices in Wishpip are made by AI.

Who else handles it

Only the service providers that run Wishpip, under contracts that limit their use of it: Supabase (accounts and data), Vercel (hosting), Stripe (payments) and Microsoft Azure (the AI that makes adventures). We never sell data and never show ads.

Cookies

Your family page uses cookies to keep you signed in. Your child's iPad keeps one cookie that remembers which child it plays for. There are no advertising or analytics cookies.

How long we keep it

While your account is open. “Erase everything” on your family page deletes your account, your children, their iPads' play links, every wish and everything they kept at Home, straight away. When a subscription ends we delete it all within 30 days. Copies in our provider's backups are gone within 7 days after that.

Children's privacy

We follow the U.S. Children's Online Privacy Protection Act (COPPA). A parent creates the account and consents through the paid subscription, and sets up each iPad. You can see what we keep about your children on your family page, turn off any iPad there (it stops playing at once), and erase everything at any time.

Contact

Reply to any email from us and a person will answer.