Privacy Policy

1. Introduction

Wonder Word Inc. ("we," "our," or "us") is a company incorporated in the Province of Alberta, Canada. We operate the Wonder Word Kids platform, including our websites at wonderword.io and wonderwordkids.com, and our mobile applications (collectively, the "Service").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting the privacy of all our users worldwide, with special attention to the protection of children's personal information.

We comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). We also respect and comply with applicable international privacy laws, including the European Union's General Data Protection Regulation (GDPR) and the UK GDPR for our European and UK users.

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller Information

Wonder Word Inc. is the data controller responsible for your personal information. For privacy-related inquiries:

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when using our Service:

• Account Information: Name, email address, password, church or organization name, and contact details.
• Church Data: Service times, age group configurations, room assignments, and ministry structure.
• Family Information: Parent/guardian names, contact information, and family relationships.
• Child Information: First name, last name, birthdate, age group, allergies, medical information, and special needs (as provided by parents/guardians or authorized church personnel).
• Volunteer Information: Names, contact details, availability, and role assignments.
• Payment Information: Billing address and payment method details (processed securely by Stripe—we do not store full credit card numbers).

3.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Log Data: IP address, browser type, pages visited, time and date of visits, and time spent on pages.
• Usage Data: Features used, actions taken, and interaction patterns within the Service.
• Location Data: General geographic location based on IP address (we do not collect precise GPS location).

4. Legal Basis for Processing (GDPR)

For users in the European Union, United Kingdom, and other jurisdictions where legal basis is required, we process your personal information based on:

• Contract Performance: Processing necessary to provide the Service you have subscribed to.
• Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security.
• Legal Compliance: Processing necessary to comply with legal obligations.
• Consent: Where you have given explicit consent (e.g., for marketing communications).

5. Children's Privacy

Wonder Word Kids is designed for use by churches and religious organizations to manage their children's ministry programs. We take children's privacy very seriously and comply with applicable children's privacy laws, including:

• Canada: PIPEDA and PIPA requirements for minors' data
• United States: Children's Online Privacy Protection Act (COPPA)
• European Union/UK: GDPR requirements for children's data (including age of consent requirements)

5.1 How Children's Information is Collected

Information about children is provided by their parents, guardians, or authorized church personnel—not directly by children themselves. Children do not have direct access to create accounts or input their own information.

5.2 Use of Children's Information

Children's information is used solely for:

• Check-in and check-out processes for child safety
• Attendance tracking and reporting
• Age-appropriate room and class assignments
• Communicating important information to parents/guardians
• Managing allergies, medical needs, and special accommodations
• Birthday reminders and celebrations

5.3 Protection of Children's Information

We implement strict safeguards for children's data:

• Children's information is only accessible to authorized church personnel
• We do not sell, rent, or share children's personal information with third parties for marketing purposes
• We do not display targeted advertising to children or based on children's data
• Parents/guardians may request to review, modify, or delete their child's information at any time

6. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain the Service: Including check-in systems, lesson planning, volunteer scheduling, and family care features.
• Process transactions: Handle subscriptions, billing, and payment processing.
• Communicate with you: Send service updates, security alerts, and support messages.
• Improve our Service: Analyze usage patterns to enhance features and user experience.
• Ensure security: Detect, prevent, and address technical issues and unauthorized access.
• Comply with legal obligations: Meet applicable legal and regulatory requirements.

7. Information Sharing and Disclosure

We do not sell your personal information. We may share information only in the following circumstances:

• Service Providers: Third-party vendors who assist in operating our Service (e.g., Stripe for payments, cloud hosting providers). These providers are contractually obligated to protect your information and process it only as instructed.
• Legal Requirements: When required by law, subpoena, court order, or other legal process.
• Safety: To protect the rights, property, or safety of Wonder Word, our users, or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.
• With Consent: When you have given explicit consent to share specific information.

8. International Data Transfers

Our Service is operated from Canada. Your information may be transferred to and processed in Canada and other countries where our service providers operate.

For users in the European Union and United Kingdom: Canada has been recognized by the European Commission as providing an adequate level of data protection. For transfers to other countries, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

By using our Service, you consent to the transfer of your information to Canada and other countries as described in this policy.

9. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection practices
• Incident response procedures for potential breaches
• Regular backups and disaster recovery procedures

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining appropriate safeguards.

10. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account termination:

• We retain data for 30 days to allow for account recovery
• You may request immediate deletion of your data
• Some information may be retained as required by law or for legitimate business purposes (e.g., financial records for tax compliance)
• Aggregated, anonymized data may be retained for analytics

11. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

11.1 Rights for All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal requirements.
• Portability: Request a copy of your data in a portable format.
• Opt-out: Unsubscribe from marketing communications at any time.

11.2 Additional Rights (EU/UK GDPR)

If you are in the European Union or United Kingdom, you also have the right to:

• Restriction: Request restriction of processing of your personal information.
• Object: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Lodge a Complaint: Lodge a complaint with your local data protection authority.

11.3 Exercising Your Rights

To exercise these rights, contact us at privacy@wonderword.io. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

12. Marketing Communications

We comply with Canada's Anti-Spam Legislation (CASL) and applicable international anti-spam laws. We will only send you marketing communications if you have opted in. You can unsubscribe at any time by clicking the unsubscribe link in any email or contacting us directly.

13. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "Last updated" date, and where appropriate, notifying you by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us: