1. Who we are
Little Wisp is operated by [PLACEHOLDER: LEGAL ENTITY NAME], [PLACEHOLDER: ENTITY TYPE AND JURISDICTION, e.g. an Ontario corporation], at[PLACEHOLDER: MAILING ADDRESS] (“we”, “us”). We are responsible for the personal information described in this notice. Our accountable privacy contact is [PLACEHOLDER: NAME OR TITLE OF ACCOUNTABLE PRIVACY OFFICER], reachable at[PLACEHOLDER: privacy@example.com] or [PLACEHOLDER: PHONE NUMBER].
Little Wisp is intended for use by children aged [INTENDED AGE RANGE, e.g. 4–8] under the account and supervision of a parent or legal guardian (“parent”). We do not knowingly allow a child to create an account or to use Little Wisp without a parent.
2. In short
- Your child's spoken answers are processed briefly, by us and by two named service providers, to select the next part of the story. We do not keep recordings or transcripts.
- We save story progress under your account, so a story can be resumed. We do not collect or store a child's name, age, photo, voice signature or any other child profile information.
- We keep the account, usage and technical records needed to run the service, protect it, and meet legal duties, for the periods set out below.
- We do not sell personal information, do not show advertising, and do not use any child activity for marketing or analytics.
- You can ask to see, receive, correct or delete the information held under your account, and withdraw consent to your child's use, at any time.
3. What we collect
3.1 From parents
| Information | Why | Source |
|---|---|---|
| Account details: [PLACEHOLDER: ACCOUNT FIELDS ONCE SIGN-IN LAUNCHES, e.g. email address]. During early access, an account identifier we create for you. | To create your account, sign you in, and communicate with you about the service. | You |
| Consent record: who consented, when, to which version of the children's privacy notice, how the consent was verified ([PLACEHOLDER: VERIFIABLE PARENTAL CONSENT METHOD]), and any withdrawal. | To obtain and prove verifiable parental consent before a child uses Little Wisp, and to honour a withdrawal. | You |
| Payment and subscription details: [PLACEHOLDER: PAYMENT PROCESSOR / MERCHANT OF RECORD, if any]. | To take payment and manage a subscription, where offered. We do not receive or store full card numbers. | You, via the payment processor |
| Messages you send us, including privacy and support requests. | To respond and to keep a record of requests we have acted on. | You |
3.2 From children, during play
| Information | What happens to it | Kept? |
|---|---|---|
| A short audio clip of your child's spoken answer, captured only while the story is waiting for an answer. | Sent from the browser to our server and then to our speech-to-text provider, which returns the words it heard. Held in working memory only. | No |
| The transcribed words. | Sent with the list of choices the story offers to our answer-matching provider, which returns the matching choice or “none”. Held in working memory only. | No |
| The choice taken, and the resulting position in the story (“story progress”). | Saved under the parent's account so the story can resume, and so you can see what has been played. | Yes, see retention |
| A usage record for each answer: which provider was used, the model, how many units, and when. No content. | Saved so we can track and cap service costs. | Yes, see retention |
We do not collect a child's name, nickname, date of birth, age, school, address, photographs, video, or a voice signature, and we do not build a profile of a child. The story never asks a child for personal information; its questions are about what should happen next in the story.
3.3 Technical information
- Server logs. Our servers record ordinary access logs: IP address, time, page or request, browser type, and status. Log content is restricted to operational fields; audio, transcripts and story choices are excluded. Kept for [PLACEHOLDER: RETENTION PERIOD FOR TECHNICAL LOGS].
- Browser storage. The Little Wisp app stores only what it needs to keep you signed in and remember your settings. It does not store recordings, transcripts, story text or names in your browser.
- This website sets no cookies and loads no analytics, advertising or social-media scripts. Fonts and images are served from our own address.
4. How we use information
- To provide Little Wisp: play stories, understand a child's answer as one of the offered choices, save and resume progress.
- To operate an account: sign-in, consent, billing where offered, and support.
- To protect the service: security, abuse prevention, debugging with operational logs, and cost control.
- To meet legal obligations, including keeping proof of parental consent and responding to lawful requests.
- To tell you about the service, where you have agreed to receive such messages. Marketing preferences are separate from consent to your child's use, and every marketing message includes a way to unsubscribe.
We do not use information about a child for advertising, marketing, profiling, or to train models. We do not sell personal information.
5. Who we share information with
We use service providers who process information on our instructions for the purposes above. They may not use it for their own purposes. The providers involved when a child plays are:
| Provider | Role | What it receives | Status |
|---|---|---|---|
| DeepInfra | Speech-to-text | Receives the short audio clip of your child's answer and returns the words it heard. We do not ask it to keep either. | [PLACEHOLDER: CLEARANCE STATUS AND DATE] |
| OpenRouter (routing to [PLACEHOLDER: UPSTREAM MODEL PROVIDER]) | Answer matching | Receives the transcribed words and the short list of authored choices for that question, and returns which choice it best matches, or none. | [PLACEHOLDER: CLEARANCE STATUS AND DATE] |
| [PLACEHOLDER: HOSTING PROVIDER] | Hosting, database and audio storage | Runs the service, stores your account and saved story progress, and serves pre-recorded story audio. | [PLACEHOLDER: CLEARANCE STATUS AND DATE] |
Providers used only while our authors create stories, which never receive information about a child or a parent:
| Provider | Role | What it receives |
|---|---|---|
| OpenRouter, routing to [PLACEHOLDER: UPSTREAM MODEL PROVIDER] | Story text drafting (authoring only) | Drafts story text between an author's fixed beats. Receives only the author's material, never anything from a child. |
| ElevenLabs | Narration, music and sound effects (authoring only) | Performs approved story lines as speech and generates music and sound effects an author chose. Receives only approved story text. |
| Google Gemini | Character illustrations (authoring only) | Generates portraits of story characters from an author's description. Receives nothing from a child. |
Other providers: [PLACEHOLDER: PAYMENT PROCESSOR / MERCHANT OF RECORD, if any] (payments), [PLACEHOLDER: EMAIL / LOGIN PROVIDER, if any] (sign-in and service emails). We may also disclose information where the law requires it, to protect the rights and safety of children, users or the public, or as part of a merger or sale of the business, in which case this notice continues to apply.
6. Where information is processed
Our servers are located in [PLACEHOLDER: SERVER / HOSTING LOCATION, e.g. country and provider]. The speech-to-text and answer-matching providers named above process information in the United States [PLACEHOLDER: CONFIRM PROCESSING LOCATIONS PER PROVIDER]. Information processed outside your country may be accessible to the courts, law enforcement and national security authorities of that country. We rely on contractual protections with each provider and limit what each receives to what its task requires.
7. How long we keep information
| Information | Kept for |
|---|---|
| Audio clips and transcripts of a child's answers | Not stored. Held in working memory only for the seconds needed to transcribe and match, then released, including when a step fails. |
| Story progress and account details | [PLACEHOLDER: RETENTION PERIOD FOR STORY PROGRESS AND ACCOUNT DATA] |
| Usage (cost) records | [PLACEHOLDER: RETENTION PERIOD FOR STORY PROGRESS AND ACCOUNT DATA] |
| Consent records | [PLACEHOLDER: RETENTION PERIOD FOR CONSENT RECORDS] |
| Server logs | [PLACEHOLDER: RETENTION PERIOD FOR TECHNICAL LOGS] |
| Backups | [PLACEHOLDER: BACKUP RETENTION PERIOD]. Deleted information disappears from backups when the backup expires and is not restored into service. |
| Billing records | [PLACEHOLDER: STATUTORY BILLING RETENTION PERIOD] |
When a retention period ends, or when you delete your account, we delete or de-identify the information unless the law requires us to keep it longer.
8. Your rights and choices
As the parent and account holder you can, at any time:
- Access and export. Ask what we hold under your account and receive a copy in a common machine-readable format.
- Correct account information that is inaccurate.
- Delete. Ask us to delete your account, including all saved story progress and usage records.
- Withdraw consent to your child's use of Little Wisp and refuse any further collection. We will then stop processing your child's answers and, at your choice, delete the story progress linked to your account.
- Complain. Raise a concern with us first, and with a regulator at any time (see below).
To exercise any of these, email [PLACEHOLDER: privacy@example.com] from the address on your account or write to our postal address. We may ask you to confirm that you hold the account before we act. We aim to respond within[PLACEHOLDER: RESPONSE TIME]. We will not require a child to provide more information than is reasonably necessary to take part in a story.
You may complain to the Office of the Privacy Commissioner of Canada, your provincial privacy commissioner where applicable, the United States Federal Trade Commission, or your state attorney general. [PLACEHOLDER: STATE-SPECIFIC RIGHTS DISCLOSURES AS DETERMINED BY COUNSEL]
9. Children's privacy
Little Wisp is directed to children, and a child's voice is personal information even when no name is attached. We obtain verifiable parental consent before a child's answers are processed, provide parents with a direct notice, and honour the parental rights above. The children's privacy notice sets this out in the form parents receive before consenting.
10. Security
We protect information with access controls, encryption in transit, restriction of what each provider receives, exclusion of child content from logs and error reports, and a written security and retention programme that is reviewed [PLACEHOLDER: REVIEW CADENCE]. No service is perfectly secure. If a breach affects you, we will notify you and the relevant authorities as the law requires.
11. Changes to this notice
When we change how we collect, use or share information in a material way, we will update this notice, change the date at the top, and tell account holders directly. Where a change concerns children's information and the law requires it, we will ask for your consent again before the change applies to your child.
12. Contact
[PLACEHOLDER: LEGAL ENTITY NAME]
[PLACEHOLDER: MAILING ADDRESS]
[PLACEHOLDER: privacy@example.com] · [PLACEHOLDER: PHONE NUMBER]
Accountable privacy contact: [PLACEHOLDER: NAME OR TITLE OF ACCOUNTABLE PRIVACY OFFICER]