Privacy Notice

Wlonkworks, LLC (Arizona, United States) is the data controller for the personal information described here. For anything about payments, Paddle.com acts as Merchant of Record and is responsible for that transaction data. Contact us at wlonkwork@gmail.com.

• Account details — your email address and password credentials, and your sign-in provider's identifier if you use Google. Used to create your account, keep you signed in, and send receipts, password resets or service notices. Legal basis: contract, and legal obligation for records.
• Child details you enter — your child's first name, the words they have said, the dates, any notes, and the photos, clips or drawings you upload. Used only to show you your tracker and timeline, and to build the storybook, prints and artwork you ask for. Legal basis: contract and your consent.
• Share links — a private link token for each link you create, so the people you choose can view the book. Used to serve that view and to let you revoke the link. Legal basis: contract and your consent.
• Plan and purchase status — which plan your account is on, stored so the right features are open to you. Card numbers and billing addresses are held by Paddle, not by us. Legal basis: contract.
• Usage and technical data — pages viewed, feature use, device and browser information, IP address, and error reports. Used to keep the service working, find bugs and prevent abuse. Legal basis: legitimate interests.
• Support messages — anything you email us about, used to answer you and improve the service. Legal basis: legitimate interests and consent.

• Paddle.com, our Merchant of Record, for selling the product, managing subscriptions and billing, tax compliance and invoicing.
• Service providers who host the application and store your data, run the artwork generation, and provide error monitoring — each under contract to use the data only for us.
• Professional advisers such as lawyers and accountants, where they need it to advise us.
• Authorities, if we are legally required to disclose something.

Wlonkworks, LLC does not sell or rent personal information, including a child's name, words, photos or clips, and we don't show advertising or track you across other websites for marketing. Under California and other state privacy laws, that means there is no "sale" or "share" of personal information to opt out of.

Wlonkworks: Toddler Words Tracker & Keepsake Studio is made for parents and caregivers. A child's details are entered by the adult who owns the account, and that adult controls who sees them. We don't knowingly collect a child's information from anyone other than the account holder, and we don't ask children to sign up.

We keep your account and your child's words, photos and clips while your account is open. If you delete your account, or ask us to, we remove your content within 30 days and clear it from routine backups on the next backup cycle. We keep billing records for as long as tax and company law requires. If a plan lapses, your content stays for a reasonable period so you can come back, and we'll tell you before removing it.

• see what we hold about you and your child;
• correct anything that is wrong;
• delete your child's words, photos or clips, or your whole account;
• take your data with you — you can export your words and dates as a spreadsheet from the My Words page;
• object to processing that rests on our legitimate interests;
• withdraw a consent you gave, such as turning off a share link — revoking the link takes effect straight away.

Email wlonkwork@gmail.com from the address on your account. We'll verify it's your account and answer within 30 days. If you're not happy with our answer, you can raise a concern with your local data protection authority.

Access is protected by sign-in, connections use encryption in transit, your photos and clips are stored privately rather than publicly, and share links use an unguessable token that you can revoke at any time and that search engines are asked not to index. No method of storage is completely foolproof, so please don't post your share link somewhere public.

Our infrastructure is operated in the United States. Where a provider processes data outside your country, we rely on the provider's standard contractual safeguards.

If we change this notice in a way that affects how we use your information, we'll tell you by email or in the app and update the "last updated" date above.