Privacy Policy

Last updated: 15 May 2026

This Privacy Policy explains how EverWize ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use our Platform. We take your privacy — and especially the privacy of children — seriously.

1. Who We Are

EverWize is the operator of this Platform. For all privacy-related enquiries, please contact: admin@ever-wize.com.

2. What Information We Collect

We collect only what is necessary to provide the service:

• Parent accounts: Full name, email address, encrypted password, acceptance of Terms & Privacy Policy, and subscription status
• Child profiles: Display name, age, username, and encrypted password
• Payment information: We do not store payment card details. All payment processing is handled by Paddle, our merchant of record. See Section 6 for details.
• Usage data: Lesson progress and quiz scores, linked to your account
• Technical data: Session tokens (stored in secure HTTP-only cookies), browser type, and general usage logs for security purposes

We do not collect advertising data, behavioural tracking data, or any information not listed above.

3. Children's Privacy (COPPA & GDPR-K)

EverWize is designed for children aged 10 and above. We take children's privacy extremely seriously and comply with the Children's Online Privacy Protection Act (COPPA) and applicable regional regulations including GDPR provisions for minors.

• We do not collect personal information directly from children
• All child profiles are created by and remain under the control of the parent or guardian account holder
• We do not display advertising to children
• We do not share children's data with third parties except as required to operate the service (see Section 5)
• Parents may request deletion of their child's profile at any time

If you believe we have inadvertently collected information from a child without proper parental consent, please contact us immediately at admin@ever-wize.com.

4. How We Use Your Information

Your information is used solely to:

• Create and manage your account and child profiles
• Provide access to EverWize lessons and content
• Track lesson progress and quiz results
• Process your subscription and communicate billing information
• Send important service updates and account notifications
• Respond to your support requests
• Improve the quality and content of the Platform

We do not use your data for advertising, profiling, or any purpose not listed above.

5. Data Sharing & Third Parties

We share your data only in the following limited circumstances:

• Payment processor: When you subscribe, your billing information is processed by our authorised payment provider, who acts as the merchant of record. They receive your email address and billing details solely to process payments and issue invoices.
• Database and hosting providers: Your account data is stored and processed by our infrastructure providers, hosted in the United States. These providers act only on our instructions and do not use your data for any other purpose.
• Audio narration: Voice narration files are pre-generated and served as static audio. No user data is transmitted to any third party during audio playback.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid requests from public authorities.

We do not sell, rent, or share your personal data with any other third parties.

6. Payment Data

EverWize does not store, process, or have access to your payment card details. All payment transactions are handled entirely by our authorised payment provider, who acts as the merchant of record and is PCI DSS compliant. The only payment-related information we receive is your subscription status and renewal dates.

7. Data Security

We implement industry-standard security measures to protect your data:

• All passwords are hashed using bcrypt — we never store plain-text passwords
• All data in transit is encrypted via HTTPS/TLS
• Session tokens are stored in secure, HTTP-only cookies to prevent JavaScript access
• Sessions expire automatically after 7 days of inactivity
• Database access is restricted and encrypted at rest

While we take all reasonable steps to protect your data, no system is completely secure. If you suspect a security breach, please contact us immediately.

8. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your account data within 30 days, except where retention is required by law (e.g., billing records, which are retained for 7 years for tax compliance purposes).

9. Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request an export of your data in a machine-readable format
• Objection: Object to certain types of data processing
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at admin@ever-wize.com. We will respond within 30 days.

10. Cookies

EverWize uses only essential cookies necessary to operate the Platform:

• everwize_session: Keeps you logged in to your account (7-day expiry, HTTP-only)
• everwize_site_access: Temporary access cookie during beta period

We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

11. International Data Transfers

Your data may be processed on servers located in the United States (via our infrastructure providers Neon and Vercel). We ensure appropriate safeguards are in place for any international data transfers, in compliance with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Platform. Your continued use of EverWize after such changes constitutes your acceptance of the updated Policy.

13. Contact & Complaints

For privacy-related questions or concerns, contact us at: admin@ever-wize.com.

If you are located in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.