Privacy Policy
Effective Date: July 10, 2026
1. Who We Are
Wonder Wander is operated by Shannon Steven, LLC (“Wonder Wander,” “we,” “us,” or “our”). This Privacy Policy explains what information we collect through the Wonder Wander mobile app and website (together, the “Service”), how we use and share it, and the choices available to you.
This Privacy Policy applies to users located in the United States. Wonder Wander is intended for a general, family-friendly audience and is not directed to or intended for use by children under the age of 13; we do not knowingly collect personal information from children under 13.
If you access Wonder Wander from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers and central database are located and where data protection laws may differ from those in your jurisdiction. By using Wonder Wander, you consent to this transfer, storage, and processing.
2. Information We Collect
Account & Profile Information
When you create an account, we collect your name, email address, and username. You may optionally add a bio, avatar photo, home location, and preferences to your profile.
Location Information
We collect precise location (via your device's GPS) to:
- Center the map on your location
- Verify you are physically near an artwork when you “collect a balloon” (check in)
- Attach a location to check-ins, Wonder Log entries, and artwork you submit
We also derive approximate location (city/region level) for map viewport behavior and product analytics.
Location access is used only while you are actively using the app in the foreground — we do not collect your location in the background.
Photos
When you submit artwork, write a Wonder Log entry, or set a profile picture, we collect the photos you choose to upload. We do not access your photo library except through the standard device file/photo picker you interact with directly.
App Activity & User-Generated Content
We collect information about how you use the Service, including:
- Check-ins and balloon collections
- Saved favorites, badges, and votes
- Wonder Log entries (text, mood tags, and associated prompts)
- General app interaction data used for product analytics
Information from Others
If you interact with content submitted by other users (e.g., artwork you did not submit yourself), that content may include information about them, not you.
3. How We Use Your Information
We use the information described above to:
- Provide and operate the Service (accounts, maps, check-ins, Wonder Log, artwork submissions)
- Personalize your experience (e.g., nearby artwork, saved favorites)
- Communicate with you, including operational messages and, if you opt in, our newsletter
- Maintain the security and integrity of the Service
- Understand how the Service is used so we can improve it (product analytics)
4. How We Share Your Information
We do not sell your personal information. We share information only as described below.
Service Providers
We remain responsible for your data; these parties act on our behalf.
| Provider | What it receives | Purpose |
|---|---|---|
| Supabase | Account data, all user-generated content, location data at rest | Database, authentication, and file storage |
| Vercel | Hosting traffic; anonymized, non-identifying analytics events | Hosting the Service; product analytics |
| Kit (ConvertKit) | Your email address and name, if you sign up or opt into our newsletter | Email newsletter delivery |
Independent Third Parties
These parties may use the information for their own purposes, subject to their own privacy policies.
| Provider | What it receives | Purpose |
|---|---|---|
| Mapbox | Your approximate and precise location | Powers the interactive map and location search |
| OpenStreetMap (Nominatim) | Your precise location (when converting coordinates to a place name) | Reverse geocoding |
We encourage you to review Mapbox's and OpenStreetMap's own privacy policies, as their handling of the information they receive is governed by their terms, not ours.
Internal Operations
We use Slack internally to notify our team of certain events (e.g., new user sign-ups, check-ins, artwork submissions). These internal notifications may include your name, email address, and general activity, and are retained in our Slack workspace indefinitely — they are not automatically deleted when you delete your account. You may separately request that Wonder Wander remove specific messages naming you from our internal systems (see Section 7).
Legal & Safety
We may disclose information if required by law, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Wonder Wander, our users, or the public.
5. Data Retention
We retain your information for as long as your account is active. When you delete your account (see Section 7), most of your personal data is permanently deleted. Some data persists beyond deletion, described below.
Database backups are retained for 7 days after data is deleted from our live systems, after which they are automatically purged as part of our standard backup rotation.
6. Security
We use industry-standard measures to protect your information, including encrypting data in transit (HTTPS). We have not undergone an independent third-party security audit (e.g., Google's MASA program) at this time. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Account Deletion & Your Choices
Deleting your account: You can delete your account at any time from Settings within the app. When you do, we permanently delete:
- Your login credentials and profile (name, email, bio, avatar, home location, preferences)
- Your check-ins, Wonder Log entries, favorites, badges, and votes
- Your profile photos and Wonder Log photos in our storage
What is retained after deletion: If you have submitted artwork to Wonder Wander, the artwork itself (title, description, photos, and location) is retained so the broader community can continue to benefit from it, but it is disassociated from your identity — the attribution linking it to your account is permanently removed, and any location/device metadata (EXIF data) embedded in the retained images is stripped at the time of deletion.
Deletion does not retroactively remove:
- Slack messages that referenced you before you deleted your account, which persist in our internal workspace until manually removed (see Section 4)
- Database backups created before your deletion request, which are purged automatically within 7 days
- Newsletter subscriber records with Kit, if you signed up for our newsletter — deleting your Wonder Wander account does not automatically unsubscribe or delete your Kit subscriber record. To remove this record, please unsubscribe directly from any newsletter email, or contact us using the information below.
Requesting deletion without the app: If you no longer have the app installed, you may request account and data deletion by emailing us at the address in Section 9.
Certain accounts cannot self-delete: Accounts with staff roles, or accounts that have authored content relied upon by other users, cannot be deleted through the in-app flow and will be directed to contact us for manual processing.
8. Children's Privacy
Wonder Wander is a general-audience, family-friendly service and is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete it.
9. Contact Us
If you have questions about this Privacy Policy or wish to make a request regarding your information (including deletion), contact us at:
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the Effective Date above and, where appropriate, provide additional notice.