Privacy Policy

Introduction

WizeGen ("we," "our," or "us") is headquartered in Amsterdam, the Netherlands. We are the data controller for personal data collected through wizegen.com and the WizeGen platform. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

Information We Collect

We collect the following categories of personal data:

• Parent or guardian name and email address (provided at registration)
• Child's age range (to serve age-appropriate content; we do not collect the child's name or date of birth by default)
• Learning progress, lab completion data, and Digital Judgment Maturity Score (DJMS) generated through platform use
• Device type, browser, and general usage analytics

We do not collect sensitive personal data beyond what is listed above.

Legal Basis for Processing (GDPR)

We process personal data on the following legal bases under GDPR Article 6:

• Contract performance: to provide the WizeGen service you have subscribed to
• Legitimate interests: to improve the platform, send service-related communications, and maintain security
• Legal obligation: to comply with Dutch and EU law
• Consent: for any optional communications such as newsletters, which you may withdraw at any time

For processing data relating to children, we rely on verified parental consent in accordance with GDPR Article 8 and the Dutch Implementation Act (UAVG).

Children's Data

WizeGen is designed for children aged 8 to 15. All accounts are created and managed by a parent or legal guardian. We do not collect personal data from children directly. The parent account is the data subject for GDPR purposes. We do not use children's learning data for advertising, profiling, or any purpose other than delivering and improving the educational service.

How We Use Your Information

We use the information we collect to:

• Operate and deliver the WizeGen platform
• Generate the child's Digital Judgment Maturity Score (DJMS)
• Provide progress reports to parents via the Parent Hub
• Send transactional and service-related emails
• Improve our content and platform based on aggregated, anonymised usage data
• Comply with legal obligations

We do not sell your data to third parties.

Third-Party Data Processors

We use the following sub-processors to operate the platform. All are subject to data processing agreements:

• Hetzner Online GmbH (Germany): server infrastructure and data storage. Data remains in the EU.
• Cloudflare: DNS and content delivery
• Anthropic (USA): AI features within the platform, processed under standard contractual clauses
• Google (USA): Gemini AI features and analytics (GA4), processed under standard contractual clauses
• Resend: transactional email delivery
• PostHog (EU cloud): product analytics, GDPR-compliant

Cookies and Analytics

We use cookies for session management and analytics. We use Google Analytics 4 and PostHog to understand how users interact with the platform. Analytics data is anonymised where possible. You can manage cookie preferences via the Cookie Settings link in the site footer.

Data Storage and Security

Your data is stored on Hetzner servers located in Germany (EU). We apply encryption at rest and in transit, access controls, and regular security reviews. No method of storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain account and learning data for as long as your subscription is active. If you close your account, we delete or anonymise your personal data within 90 days, except where retention is required by law.

Your Rights Under GDPR

As a data subject, you have the following rights:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Restriction: request that we limit processing
• Portability: receive your data in a portable format
• Objection: object to processing based on legitimate interests
• Withdrawal of consent: withdraw any consent given at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

International Data Transfers

Some of our sub-processors (Anthropic, Google) are based in the United States. Data transfers to the US are covered by Standard Contractual Clauses (SCCs) as provided under GDPR Chapter V.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting the updated policy on this page with an updated date.

Contact

For questions about this Privacy Policy or to exercise your rights, contact us at [email protected].

WizeGen
Amsterdam, the Netherlands