Privacy Notice

Children use Wynna, but a parent or guardian creates and manages the account. Each child uses a profile inside that account and does not have a separate login.

• About you: email address and, if you use Google, the name and profile picture from Google.
• About each child: profile name or nickname, optional year group, avatar colour, progress, answers and writing created during revision.
• Uploaded material: notes, documents and photos. Material is sent to the AI provider to create practice. Photographs are not kept on our servers. The wording taken from material, such as text read from a document and the facts behind each question, is retained with the child profile so families can see the source behind a question.

We do not collect a child's email address, phone number or location. Do not upload material that reveals sensitive information.

• Manage your account and child profiles.
• Create practice, hints, marking and feedback.
• Show progress in the parent dashboard.
• Keep the service secure.

• OpenAI: creates practice, hints, marking and feedback. Requests use the API response-storage setting store=false. Provider retention and contractual settings require operational verification.
• Neon: database hosting.
• Vercel: application hosting.
• Google: optional sign-in.
• Resend: sign-in emails and optional weekly summaries.
• Stripe: checkout and subscription management when paid plans are enabled.

We do not sell data or use it for targeted advertising.

• Uploaded photographs: used to create the practice and then discarded, not stored. Wording from material, concept memory, attempts, question reports and practice history: kept with the child profile until that profile is deleted.
• Child profile, progress and writing: while active; deleted after [TODO: 24 months] of inactivity.
• Adult account: until closed; deleted within [TODO: 30 days].

You can access, correct, export or delete data from the parent dashboard. Deleting a profile permanently removes the progress and writing saved for that profile. You can also complain to the relevant local data protection authority.