Privacy Policy
The short version
- There is no account. We never ask for a name, an email address, a phone number or a birthday — not from you, and not from your child.
- There is no advertising and no third-party analytics or tracking SDK in the app.
- We store which pictures were coloured and how long it took, so we can tell which pictures children enjoy. That data is attached to a random identifier, not to a person.
- If you create a picture, the words used to make it are sent to an image-generation service. Nothing else about you goes with them.
- You can ask us to delete everything, at any time, by writing to wondaboo@vadra.ch.
Who we are
Wondaboo is developed and operated by Vadra, Switzerland. For anything in this policy, including access and deletion requests, write to wondaboo@vadra.ch. We are the controller of the data described below.
No account, and what identifies a device
Wondaboo does not have sign-up, log-in, or profiles. The first time the app runs it asks our backend for an anonymous identifier — a random string, generated by us, tied to that installation of the app. It carries no meaning and is not derived from anything about you or your device.
That identifier is what lets your progress and your subscription follow you between the app and our server. If the app is uninstalled and installed again, a new identifier is created and the previous one is no longer connected to anything.
What we collect
| What | Why |
|---|---|
| The anonymous identifier described above | To keep progress and subscription status attached to the right installation |
| Colouring progress — which picture, which areas have been filled, whether it is finished, and the time spent actively colouring it | So a picture can be resumed on the device, and so we can see which pictures are too hard or too easy |
| Usage events — a picture was opened, finished, left unfinished, or a hint was used, with a duration | To decide which pictures to keep, retire, or make more of. This is the only measurement we do |
| Creations — the choices made in the picture-making wizard, the optional free text, and the image that comes back | To make the picture, and to learn which requests produce good colouring pages |
| Subscription status — whether this installation has an active subscription, when it expires, and an identifier from the payment provider | To unlock the paid features. We never receive or store card numbers, billing addresses, or anything else about the payment |
| Technical data our providers see — IP address and connection details, when the app or this website talks to our servers | Ordinary server operation, security, and blocking automated abuse. We do not build profiles from it |
What we do not collect
No name, email address, phone number, postal address, date of birth, photograph, contact list, calendar, precise or coarse location, microphone or camera access, installed-app list, or advertising identifier. The app requests no permissions that would allow any of it.
Wondaboo shows no advertising and contains no advertising SDK, no social-network SDK, and no third-party analytics SDK. If that ever changes we will update this policy first, and any advertising in an app for children would follow Google Play's Families policy — which, among other things, forbids behavioural advertising to children.
Children
Wondaboo is made for children roughly 4 to 10 years old, and is built so that a child can use all of it without ever typing anything about themselves. Pictures are chosen and created by tapping illustrated options; nothing asks who the child is.
The one place where free text can be typed is a small optional field, placed behind an extra step so that a young child does not land on a keyboard, and intended for a grown-up. Please do not type anyone's name or any other personal detail into it — it is a description of a drawing, and it is sent to an image-generation service (see below).
Every request, whether it came from the illustrated options or from that field, is checked for age-appropriateness before any picture is made. That check runs on our own machine, using our own model; the text is not sent anywhere for it.
We do not knowingly collect personal information from children. If you believe a child has sent us something personal, write to wondaboo@vadra.ch and we will delete it.
Pictures created in the app
A picture created in Wondaboo is visible only on the installation that created it. We may review creations and, when one makes a good colouring page, add it to the catalogue that everybody sees — together with the words used to create it, and never with anything that identifies who made it. The anonymous identifier of the creator is not shown to other users anywhere in the app.
Who else processes this data
We use a small number of service providers. They act on our instructions, and none of them receives more than what their job needs.
- Supabase — our database, anonymous identifiers, and picture storage.
- Cloudflare — this website, and the challenge that tells a real first launch of the app apart from an automated one. That challenge sees an IP address and browser-level signals; it does not identify a person and its result is discarded once the app has started.
- RevenueCat — keeps track of whether a subscription is active and tells our server when it changes.
- Google Play — takes the payment. The purchase happens inside Google's own billing flow, under Google's privacy policy; we only learn the result.
- kie.ai — generates the image from the description of the drawing. It receives that description and nothing else: no identifier, no device information, nothing about the person who asked.
We do not sell data, and we do not share it for advertising. We would disclose data only if the law required it.
Where the data goes
Our providers operate in Switzerland, the European Economic Area and the United States, so data described here may be processed outside your country. Where that happens, it relies on the providers' standard data-protection terms, including the European Commission's standard contractual clauses.
How long we keep it
Progress and creations are kept for as long as the installation exists, so that a picture started last month can still be finished. Usage events are kept in aggregate to guide the catalogue, and are not used for anything else. Subscription records are kept while a subscription is active and for as long afterwards as accounting rules require. Anything tied to an identifier is deleted when we receive a deletion request for it.
Your rights
Depending on where you live, you may have the right to ask what we hold, to get a copy, to have it corrected, or to have it deleted. Because there is no account, we identify the data by the anonymous identifier — so to make a request, please include it:
To find your identifier: open Wondaboo, go to the catalogue, and press and hold the title at the top of the screen. The identifier is shown so you can copy it.
Send it to wondaboo@vadra.ch and say what you would like us to do. We answer within 30 days. That identifier is the only key to the data, so we cannot act on a request without it — and, for the same reason, no one else can use it to reach anything about you beyond what is described on this page. If you are in the EEA or the UK you may also complain to your data-protection authority; in Switzerland, to the FDPIC.
Security
All traffic between the app and our servers is encrypted in transit. Our database enforces, row by row, that an installation can only ever read and write its own progress and its own creations. Administrative access is limited to the developer.
Changes
If this policy changes, the new version appears on this page with a new date at the top. Changes that affect what we collect will be described in the app before they take effect.