Privacy Policy

1. Who we are and who this Policy applies to

In this Privacy Policy, “WiZMA”, “we”, “us” or “our” means SIA “WiZMA”. SIA “WiZMA” is the data controller for wizma.eu, the WiZMA application and related services.

This Policy applies to parents, legal guardians and other adults who visit the website, create a WiZMA account or use WiZMA for the benefit of a child. A child is not the account holder — the account is created and managed by an adult parent or guardian.

2. What WiZMA is

WiZMA is an AI-supported early childhood development platform, primarily for children aged 3 to 8. It may include personalised stories and images, games and learning activities, emotional, breathing and calming activities, habit and daily routine building, good deed challenges, diary activities, sleep support, and recommendations and progress insights for parents.

WiZMA does not replace a doctor, psychologist, psychotherapist, educator or other qualified professional.

3. Personal data we process

3.1. Google account and authentication data

If you choose “Continue with Google”, we may receive your Google account name or display name, email address, unique account identifier, profile image (where Google provides it), and technical authentication and security information such as sign-in time, IP address and device or browser information through Firebase Authentication.

This information is used to create the account, provide secure authentication, manage the account and communicate about WiZMA. WiZMA does not request or receive access to Gmail, Google Drive, Google Calendar, contacts or other Google account content.

3.2. Child profile and personalisation information

A parent may voluntarily provide a child’s first name or nickname, age, interests, selected learning approach, characters, goals or other information needed for the selected feature. A child’s surname, full date of birth, address, school or kindergarten name and photograph are not required and should not be entered.

3.3. WiZMA content and saved application data

Depending on the features used, WiZMA may store:

• stories and story images that the parent chooses to save;
• good deed and kindness challenges, completion status and progress;
• created habits and daily routines, task order and completion data;
• “My Diary” entries, including selected emotions and intentionally entered text;
• completion information from games, learning, breathing, calming, sleep or other activities where needed to display progress;
• feedback, support requests and communications about the account.

3.4. Technical and security data

To operate the service, prevent misuse and resolve errors, we and our technology providers may process IP address, device type, operating system, browser, application version, error and security logs and other technical data.

3.5. Information we ask you not to enter

WiZMA is not intended to store medical diagnoses, detailed health information, psychological assessments, precise location, document numbers, a child’s contact details or other unnecessary sensitive information. Please do not enter such information in diary entries, story prompts or other free-text fields.

4. Purposes and legal bases

• Performance of a contract and pre-contractual steps: creating and authenticating the account, providing selected features and personalised content, saving content and progress, and providing support.
• Legitimate interests: keeping the service secure, preventing misuse, resolving errors and improving service operation, while balancing the rights of users and children.
• Consent: where required, for example for optional cookies or specific voluntary data uses. Consent may be withdrawn at any time.
• Legal obligations: complying with applicable law and responding to lawful requests.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Children’s data and parental responsibility

WiZMA is intended to be used for the benefit of a child under the supervision of a parent or legal guardian. By creating an account and providing information about a child, the account holder confirms that they are an adult and are authorised to make decisions about the use of that child’s data.

Under Latvian law, a child aged 13 or over may in certain circumstances give their own consent to data processing for an information society service. WiZMA nevertheless requires an adult account holder and parental supervision regardless of that threshold. We recommend using the child’s first name or a nickname without a surname and entering only information needed for the feature.

6. Artificial intelligence and OpenAI

WiZMA uses the OpenAI API to generate or adapt certain content, such as stories, images, game or activity content and recommendations. To fulfil a specific request, a child’s first name or nickname, age, interests, selected topic and learning approach may be sent.

The parent’s Google account identifier, Firebase user identifier and access to other Google services are not sent to OpenAI. Under the OpenAI API terms, API inputs and outputs are not used to train models by default unless WiZMA expressly opts in. Certain data may be retained for a limited period for service security and abuse prevention in accordance with OpenAI’s current configuration and terms.

AI-generated content may be incomplete or inaccurate. A parent must assess its suitability before providing it to the child.

7. Who we may share data with

We do not sell personal data and do not use Google user data for advertising profiling. Data may be shared only as necessary with:

• Google/Firebase — for authentication, databases, file storage, security and technical infrastructure;
• OpenAI — to generate or adapt specific AI content;
• hosting, domain, email, error monitoring and technical support providers;
• public authorities or other persons where disclosure is required by law or necessary to protect important rights and safety.

Providers operate under contracts, data processing terms and applicable confidentiality and security requirements.

8. Processing outside the European Economic Area

Google/Firebase, OpenAI or other technology providers may process data in countries outside the European Economic Area. Where this occurs, safeguards required by applicable law are used, such as an adequacy decision of the European Commission, Standard Contractual Clauses and, where needed, supplementary security measures.

9. How long we keep data

• account and child profile data — while the account or profile is active or until deletion;
• saved stories, images, challenges, routines, diary entries and progress — until the relevant item, profile or account is deleted;
• support correspondence and technical security logs — only as long as needed to resolve the request, maintain security, fix errors or protect legal interests;
• information required by law — for the period specified by the applicable law.

Deleted data is removed from active systems without undue delay. It may remain in backups for a limited period until automatically overwritten and is not used for other purposes during that period.

10. Account and data deletion

A parent may delete individual saved content where the function is available and may delete the entire account in the application settings. Further instructions are available on the account deletion page.

Account deletion covers the Firebase Authentication account, child profile information, saved stories and images, challenge and habit data, diary entries and other WiZMA data directly linked to the account, except information we are legally required to retain. If the account cannot be deleted in the application, contact info@wizma.eu from the email address linked to the account.

11. Your rights

Subject to applicable law, you may have the right to:

• receive information and access your personal data;
• correct inaccurate or complete incomplete data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive data you provided in a structured, commonly used and machine-readable format where data portability applies;
• withdraw consent;
• lodge a complaint with the Latvian Data State Inspectorate or another EU/EEA supervisory authority.

To exercise your rights, contact info@wizma.eu. To protect the account and the child’s data, we may reasonably verify the requester’s identity.

12. Data security

We use proportionate technical and organisational measures, including access controls, secure authentication, encryption in transit, security rules and log monitoring. No digital system can guarantee absolute security.

13. Cookies and analytics

The website and application may use cookies or similar technologies that are strictly necessary for operation, security and authentication. If analytics, advertising or other optional cookies are introduced, appropriate information and, where required, a consent choice will be provided before activation.

14. Automated personalisation

WiZMA may automatically select or generate content better suited to a child’s age, interests and selected learning approach. WiZMA does not make automated decisions that produce legal or similarly significant effects for a user. Parent insights are informative and are not a diagnosis or professional assessment.

15. Changes to this Policy

We may update this Policy when WiZMA features, data processing, providers or legal requirements change. The current version and effective date will always be available at wizma.eu/en/privacy. Users will be informed of material changes in the application or by email where appropriate.

16. Contact

For questions about privacy, data use or the exercise of your rights, contact info@wizma.eu.