wondercanvas
Privacy Policy
Summary: wondercanvas collects the minimum personal data needed to deliver the service. See the sections below for details.
1. Purpose
This policy explains how the operator of the wondercanvas app (the "App") handles user data. It is written in line with the spirit of Korea's Personal Information Protection Act (PIPA), the US Children's Online Privacy Protection Act (COPPA), and the EU General Data Protection Regulation (GDPR).
2. Personal Data We Collect
Specific items collected are disclosed on request. Contact the operator listed below for the exact items and purposes.
3. Data Stored On Your Device
The app stores the following data only on the user device. It is not transmitted off-device and cannot be used to identify an individual.
- App settings
These items are stored in device-local storage; uninstalling the app permanently deletes all of them.
4. Network and Server Communication
The app communicates with external servers to deliver its features. Data transmitted is handled under the "Personal Data We Collect" and "Third-Party Services" sections of this policy.
5. Third-Party Services
The app uses the following third-party services:
- Supabase (parent/child accounts, database, file storage)
- Anthropic Claude (3Q dialogue-generation AI)
- Google Gemini / Imagen (image-generation AI)
- OpenAI (text-to-speech, TTS)
- Speech-to-text (STT) service
Each provider may apply its own privacy policy in addition to this one.
6. Cross-Border Transfer of Personal Data
The operator transfers personal data abroad as set out below (PIPA Article 28-8). You may refuse the cross-border transfer; if you do, features that depend on it may be limited.
| Recipient | Country | Items Transferred | Purpose |
|---|---|---|---|
| Anthropic, PBC | United States | Child and caregiver conversation text (spoken content) | Socratic 3Q dialogue generation and safety filtering |
| Google LLC | United States | Image-generation prompts derived from the conversation | Educational image generation (Gemini / Imagen) |
| OpenAI, L.L.C. | United States | Text to be synthesized into speech | Natural voice (TTS) generation |
| Supabase, Inc. | United States | Parent/child account info, conversation and learning records, generated images | Database storage and file hosting |
7. Advertising and In-App Purchases
The app does not display advertisements. The app does not offer in-app purchases.
8. Children’s Privacy
wondercanvas carries an App Store age rating of 4+ and is directed to children.
COPPA Compliance
When collecting personal data from children under 13, the operator obtains verifiable parental consent.
Korean PIPA
PIPA Article 22(6) requires legal guardian consent when processing personal data of children under 14. As this app does not process personal data, that provision does not apply.
9. Your Rights
You have the right to access, correct, delete, or request a halt to the processing of your personal data. Contact the operator below.
10. Response to a Data Breach
If the operator becomes aware of a personal-data breach, it will notify affected users within 72 hours — describing the items breached, when and how it occurred, steps to minimize harm, the operator’s response, and where to report — and will report it to the Personal Information Protection Commission or the Korea Internet & Security Agency (KISA), per PIPA Article 34.
11. Security
The operator protects user data with reasonable technical and administrative measures, including transport-layer encryption (TLS) and access controls at rest.
12. Changes to This Policy
When this policy changes, the operator will notify users through an app update and this page. Changes take effect on the stated effective date.
13. Chief Privacy Officer
In accordance with PIPA Article 31, the operator designates the following Chief Privacy Officer, who oversees personal-data handling and responds to user inquiries and complaints.
- Chief Privacy Officer: Kim Kyeol
- Contact: macrothinkmicrodesign0@gmail.com
You may also report privacy concerns to Korea’s Privacy Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, +82-1833-6972).
14. Contact
Questions about this policy:
mtmd — macrothinkmicrodesign0@gmail.com