Privacy policy

Last updated 31 October 2026

The short version

• We collect as little as we can. Parents give us an email address. Children never have an account with us.
• In the family trial, your child's progress stays on your own phone or tablet. We cannot see it.
• No ads, no tracking, no analytics, and we never sell personal data.
• We never use children's data to train AI.
• You can ask us to see, correct or delete your data at any time: privacy@wispkids.com

Who we are

WispKids is an AI literacy course for children aged 6 to 9, made by a parent in Singapore. We are at an early stage: the company is being registered, and until then the founder is responsible for your data. We follow Singapore's Personal Data Protection Act (PDPA) and design for the US Children's Online Privacy Protection Act (COPPA) and the GDPR.

Our data protection contact is the founder, at privacy@wispkids.com.

What we collect, and why

When you visit wispkids.com

We do not use cookies, analytics or advertising tools. Our fonts are stored on our own site, so your browser does not contact Google or other font services. Our host, Cloudflare, handles technical data such as your IP address and browser type to deliver the site and protect it from attacks, and may set a security cookie for that purpose only.

When you join the waitlist

Our waitlist form is run by Beacons. We collect the email address you give us (and your name, if you add it) to tell you about WispKids, our Founding Families offer and our launch. Every email has a way to unsubscribe. Beacons stores this data for us under its own privacy policy.

When you email us

Emails to our wispkids.com addresses are forwarded by Cloudflare to our Gmail inbox, which is run by Google. We use what you send only to reply to you.

When your family joins the trial (play.wispkids.com)

The trial is by invitation only, for families we know, with a parent present.

• Your email address. We add the email address of each invited parent to the guest list. When you sign in, Cloudflare sends a one-time code to that address and keeps a record of sign-ins. A cookie keeps you signed in for up to 30 days.
• Your child's play. The first name or nickname you type, the picture you choose, your child's Wisp and their progress and creations are saved only in the browser on your device. They are not sent to us or anyone else, and we cannot see them. Removing a player, or clearing the site's data in your browser, deletes them.
• Save codes and feedback. These leave your device only if you choose to share them, through your own messaging app. The feedback summary does not include your child's name.
• The microphone (optional). If your child taps the microphone, your browser's own speech service turns their words into text: Google on Chrome and Android, Apple on Safari, iPhone and iPad. Those companies handle the audio under their own privacy policies. We never receive or keep any recording. You can use Pictures mode instead and skip the microphone entirely.
• Read aloud. Wisp's voice uses the voices built into your device or browser.

On social media

Our Instagram, TikTok and YouTube accounts follow those platforms' own policies. We never post anything from the trial or about any child taking part.

Children's privacy

WispKids is made for children, but our accounts and emails are for parents. Children do not give us personal information: there is no child sign-up, no chat and no free typing to an AI. A parent sets up each player and decides what name to use. If you think a child has sent us personal information, email us and we will delete it.

How we use personal data

• To run the waitlist and send you updates you signed up for.
• To run the invite-only trial and keep it secure.
• To reply to your messages and feedback.

We do not sell or rent personal data, show ads, build profiles of children, or use any child's data to train AI.

Who we share it with

Only the services that run WispKids for us: Cloudflare (website hosting, sign-in for the trial, email forwarding), Beacons (waitlist and emails) and Google (our email inbox). Some of them store data outside Singapore. We choose providers that protect data to a standard comparable to the PDPA. We will share data with authorities only when the law requires it.

How long we keep it

• Waitlist emails: until you unsubscribe, or until we stop the waitlist.
• Trial guest list: until the trial ends, then removed.
• Emails you send us: as long as we need them to help you, then deleted.

Your choices and rights

You can ask us to show you the personal data we hold about you or your child, correct it, delete it, or stop using it, and you can withdraw your consent at any time. Email privacy@wispkids.com and we will reply within 30 days. If you are not satisfied, you can contact Singapore's Personal Data Protection Commission, or the data protection authority where you live.

Keeping data safe

We collect very little in the first place. Everything is sent over encrypted connections, the trial is invite-only, and access to our accounts is limited to the founder.

Changes to this policy

When WispKids launches with parent accounts, payments and the full app, we will update this policy before we collect anything new, and tell everyone on the waitlist. The date at the top shows the latest version.