Effective Date: May 2, 2026 — Last Updated: May 2, 2026
WishWand ("we," "us," or "our") is dedicated to protecting the privacy of children and families. This Privacy Policy explains our practices regarding the collection and use of information in our mobile application ("App") and this marketing website ("Website").
1. COPPA Compliance
WishWand is designed for children and complies fully with the Children's Online Privacy Protection Act (COPPA) and Apple's Kids Category guidelines. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at info@wishwandapp.com and we will delete it.
2. Information We Do NOT Collect (In-App)
The WishWand App does not collect any of the following:
- ❌ Names, email addresses, or contact information — no accounts are created
- ❌ Advertising identifiers (IDFA / AAID) — we never request or access them
- ❌ Location data — GPS, Wi-Fi, or cell tower data is never accessed
- ❌ Analytics or behavioral tracking — no in-app analytics SDKs are present
- ❌ Camera or photos — the App does not access your photo library for reading; it only writes saved artwork (see Section 5)
- ❌ Browsing history, contacts, or device identifiers
The App Tracking Transparency (ATT) prompt is never shown because we do not track users in any way.
3. No Third-Party Advertising or Analytics (In-App)
The WishWand App contains zero advertising. We do not integrate any third-party analytics SDKs (such as Google Analytics, Firebase Analytics, Mixpanel, or Adjust) within the App. The App includes Firebase App Check for API security only — this service does not collect user data or behavioral analytics.
4. Voice Input
WishWand allows children to speak their "wish" (a description of what they want to color) using the device's built-in speech recognition:
- On iOS: Apple's on-device
SFSpeechRecognizer processes voice locally
- On Android: Google's on-device speech recognition is used
The resulting text is sent to our secure server solely to generate a coloring page image. No audio is recorded, stored, or transmitted. The text prompt is processed in real-time and is not linked to any user identity.
5. Photo Library Access
WishWand requests permission to save completed coloring artwork to the device's photo library. This is a write-only operation — the App cannot read, browse, or access existing photos. All artwork remains on the child's device unless a parent explicitly shares it.
6. Local Data Storage
The following data is stored locally on the device only and is never transmitted to any server:
- Generated coloring page images
- Coloring progress (color fills and undo history)
- Age group preference (selected during onboarding)
- Token balance (free-tier daily wish count)
- Favorites and recently generated history
Parents can erase all local data at any time via Settings → Reset App Progress.
7. Subscriptions & In-App Purchases
Subscription payments are processed entirely by Apple (App Store) or Google (Play Store). WishWand does not collect, store, or have access to any payment information, credit card numbers, or billing details. All purchase-related actions are protected by a Parental Gate (a written-word math challenge).
8. Parental Controls
WishWand includes the following parental safeguards:
- 🔒 A Parental Gate (written math problem) protects all purchase flows, external links, and settings changes
- 🛡️ AI-powered content safety filters screen every wish for age-appropriateness
- 🚫 No social features, chat, or user-to-user communication
- 🚫 No external links accessible to children without passing the Parental Gate
9. Website Analytics
Our marketing website (wishwandapp.com) uses Google Analytics to understand aggregate traffic patterns. This analytics tracking is strictly limited to the website and does not apply to, connect with, or transmit data to or from the WishWand App. Website visitors are not children — this site is directed at parents and caregivers.
10. Data Security
All communication between the App and our servers uses HTTPS encryption. Our API is protected by Firebase App Check hardware attestation to prevent unauthorized access. We do not store any user-identifiable data on our servers.
11. Changes to This Policy
If we update this Privacy Policy, we will revise the "Last Updated" date above. Material changes will be announced within the App and on this website.
12. Contact Us
If you have any questions about our privacy practices, or if you believe your child's data has been collected in error, please contact us:
📧 info@wishwandapp.com
We respond to all privacy inquiries within 48 hours.
