Privacy Policy

Wander Lab is run by EverBot LLC, PO Box 26, Evergreen, CO 80437. Phone (720) 254-1719. Email info@everbot.tech. We are the only company that operates Wander Lab. Wander Lab is designed to comply with the Children's Online Privacy Protection Act (COPPA).

From you (the parent): your name, email, password, ZIP code (so we know which state's child-safety hotline to contact if ever needed), and time zone; your card through Stripe; and any emergency contacts you choose to add.

About your child, from you: first name, grade, birth month and year (never the full birthday), a picture to tap, and an optional PIN (stored scrambled).

From your child, while they use Wander Lab: what they type or say to Arf and what Arf answers; if they use the microphone, their voice (turned into text and not kept); how many minutes they use it each day; and basic technical information needed to run the site securely, like a session cookie and IP address.

What we don't collect: photos of your child, their location, their contacts, or their school. We ask Arf not to ask for personal details, and we don't use advertising trackers or analytics on the pages kids use. On our public pages for parents (like the homepage, pricing, and sign-up), we use Google Analytics with its advertising features turned off, only to understand and improve those pages.

• To let your child explore with Arf, with answers at their grade level
• To keep your child safe: every message is checked, and we email you right away if something suggests your child may be in danger
• To send you a daily note about what your child explored
• To run your account, your time limits, and billing
• To fix problems and keep Wander Lab secure

We don't use your child's information for advertising, we don't build marketing profiles of children, and we don't sell or rent it to anyone.

We share information only with the companies below, only to run Wander Lab, and they may not use it for anything else.

When Arf shows a picture or a link, it searches public sources (Google search, Wikimedia, NASA, and Unsplash) using a few words Arf chooses, never your child's own words, name, or any personal information.

Safety and the law: if a message suggests a child is being abused or is in immediate danger, we may share information (including your child's messages, your account details, and your ZIP code) with a child abuse hotline, child protective services, or law enforcement. We may also share information if the law requires it.

Emergency contacts: if you add one and give permission, they receive safety alerts that include your child's first name and the message that raised the concern.

Before your child uses Wander Lab, you read a plain-language notice, check a box giving permission, and add a card to start your free trial. The card confirms that a grown-up is giving permission. We collect nothing from your child before that. We email you a copy of the notice.

You can withdraw permission anytime: pause your child, delete their profile, or delete your account in Parent Bridge, or email us. Withdrawing permission stops us from collecting anything new from your child.

If we ever want to use your child's information in a new way, we'll ask for your permission again first.

• See: read every conversation in Parent Bridge, and download your family's data under Settings > Privacy.
• Delete: delete a single conversation, your child's profile, or your whole account. Account deletion is immediate and permanent.
• Stop: pause your child anytime, which stops all new collection without deleting anything.
• Limit: set daily time limits, and turn read-aloud on or off.
• Ask: email us and we'll respond within 30 days.

Colorado and other states give families additional privacy rights, including rights to access, correct, and delete personal data. Use the controls above or email us to exercise them.

We never keep your child's information forever. Here is what we keep, why, and when we delete it.

Our service providers keep data only as long as they need to provide their service (for example, Anthropic deletes it within 30 days). Backups roll off on their own schedule and are not used for anything else.

If your child taps the microphone, their voice is used only to turn what they said into text for Arf. The recording is deleted immediately after, and neither we nor Microsoft keep it. When Arf reads an answer out loud, only Arf's words are sent.

Every message is checked for signs that a child may be in danger. If we find one, Arf gives your child kind, simple guidance and crisis resources, and we email you right away. One exception: if a child says someone at home may be hurting them, we do not send that alert to the parent. Our founders review it privately and may contact a child abuse hotline, and that conversation is kept out of Parent Bridge while we follow up. Wander Lab is not monitored around the clock and does not contact emergency services. Read our safety approach.

Data is encrypted in transit and at rest, kid sign-in is protected with signed cookies, access is limited to the people who run Wander Lab, and we keep a written security program that we review every year. No system is perfect; if a breach affects your family, we will tell you as the law requires.

We'll post any change here with a new date. If a change affects how we use your child's information, we'll email you and ask for your permission before it applies.

EverBot LLC, PO Box 26, Evergreen, CO 80437
Phone: (720) 254-1719
Email: info@everbot.tech