Privacy Policy

Overview

This page explains what information whizki.com collects, why, and what you can do about it. The Site is a learning website and includes a private family learning planner run by the Whizki team. It is meant for adults. Children should not register, sign in, or submit information here directly.

Who the Site is for

Whizki learning materials are designed for kids aged 3 to 7, but the Site itself is for parents, caregivers, teachers, and homeschoolers. An adult may enter limited information about a learner into the Learning Full Planner. That does not create a child account, and the learner does not interact with Whizki. We do not knowingly collect personal information directly from anyone under 13. If a child submits something directly, write to support@whizki.com and we will remove it.

What we collect

Email address, when you subscribe to the newsletter or sign up for an account.
Account profile, when you sign in with Google, Facebook, or Apple. We receive the identifier the provider sends us, your name, and the email address tied to that login. We do not see your password.
Subscription information, including the plan tier, billing cycle, status, and paid-through date that our billing provider sends us. Whizki does not receive or store your full payment card number.
Learning planner information, when an adult chooses to use the planner. The next section lists these fields in detail.
Browsing data, automatically: IP address, browser type, language, the pages you visit on the Site, and approximate location based on the IP. Most of this is collected by Google Analytics in aggregated form.
Cookies and local storage, see the Cookie Preferences page for the list.

We do not ask for child email accounts, full birth dates, home addresses, school IDs, health records, government IDs, payment card numbers, bank account numbers, or precise GPS location. Please do not put those details into a free-text planner note.

Learning planner data

The Learning Full Planner is controlled by the signed-in adult. Depending on the features you use, it may contain:

Learner profile: nickname, age from 3 to 7, broad learning stage, profile color, and archive status.
Plans and activity history: title, date, time zone, learners, subject, skill, planned or actual minutes, completion status, linked Whizki resource, and adult notes.
Reading history: book title, author, ISBN, public cover-image link, date, minutes, pages, finished status, and adult notes.
Learning expenses: description, amount, currency, category, vendor, date, optional learner label, and adult notes. This is a record you type, not payment processing.
Goals and context: weekly day and minute goals, time zone, planning mode, optional academic-year dates, and an optional two-letter U.S. state code when that context is relevant.
Parent awards: award type, learner, date, and optional adult note.

Planner API responses are marked private and no-store, planner pages are excluded from search indexing, and planner requests are excluded from the server-to-browser transfer cache. We do not send learner nicknames, planner notes, reading entries, or expense descriptions to traffic analytics.

How we use it

To run the Site, keep you signed in, and remember your preferences.
To provide the learning calendar, logs, goals, progress views, recommendations, reports, exports, and paid feature limits you request.
To send the newsletter you subscribed to (with a one-click unsubscribe in every email).
To understand which pages and worksheets are useful, in aggregate, and improve them.
To answer your questions when you write in.
To meet legal obligations and to defend the Whizki team if it becomes necessary.

We do not sell personal information and do not run on-site advertising. If that changes, we will update the Cookie Preferences page first and add any consent controls required by law.

We do not sell your data. We share narrow slices of it with the providers that keep the Site running:

MongoDB Atlas, where account, subscription, newsletter, and private planner data is stored.
Google Analytics, for traffic measurement.
Google, Facebook, Apple, only when you choose to log in with them.
Email providers, when we send transactional or newsletter messages. The address you give us reaches the provider so the email can be delivered.
Hosting and CDN providers, which see request metadata at the network level.
Creem, which runs subscription checkout, payment processing, receipts, and the billing portal.

When you click an Amazon product link and complete a purchase, that transaction happens entirely on Amazon under their privacy policy. We do not see your card or shipping address.

How long we keep it

Newsletter email: until you unsubscribe.
Account data: deleting an account removes the login and disables the profile. A limited profile row may remain for referential integrity with billing or order records, subject to the retention duties below.
Planner data: until you delete the learner, delete an individual entry, delete your account, or ask us to delete it. Learner deletion permanently removes connected activities, reading entries, and awards from the active database. An expense remains as a family record with its learner label removed unless you delete the expense separately. Account deletion purges every planner collection connected to that account.
Subscription and billing journal data: retained as needed for billing records, disputes, tax, fraud prevention, and legal obligations, even when optional planner records are deleted.
Server logs: typically 30 days, longer if needed for security investigation.
Analytics data: see Google Analytics retention controls (currently set to 14 months).

Your rights

Depending on where you live (notably the EEA, UK, and California), you have rights to access, correct, export, or delete the personal data we hold about you, and to object to certain processing. To use any of these rights, write to support@whizki.com from the email address tied to your account or newsletter subscription. We aim to reply within 30 days.

The planner's CSV export is available on the free level so you can download activity, reading, expense, and award records without buying a plan. You can delete a learner from the Learners page and manage full account deletion from Account, Security after canceling any active subscription.

Security

The Site runs over HTTPS. Passwords, when you set one, are stored hashed (bcrypt). Sessions are signed cookies. We restrict access to production systems to the people who run the Site. No system is perfect; if we ever discover a breach affecting your data, we will tell you and the relevant authority as required.

International data transfers

Our infrastructure providers operate in the United States and the European Union. If you contact us from another region, your data will likely be transferred to and processed in those regions under standard safeguards published by the providers.

Changes to this policy

We update this page when our practices change. The latest version is always here with the date below. Material changes will be flagged at the top so you can see what is new.

Contact

Questions, requests, or complaints: support@whizki.com.

Last updated: August 13, 2026