Privacy policy

Wisdom Tomorrow LLC (“Wisdom Tomorrow”, “we”) runs wismoro.com and the learning app at app.wismoro.com. This policy says, in plain words, what we collect, why, where it lives, and how you can see or delete it. We collect the minimum a learning service needs, we never sell it, we never show ads, and every helper runs on our own server.

Policy version wisdom-tomorrow-privacy-2026-10, effective October 10, 2026. Questions: hello@wismoro.com.

1. Who this is for

Our service is for families. A parent or legal guardian (18 or older) creates the account, adds each child, and manages everything. Children aged 5 to 17 use the service only through a profile their parent created. We follow the Children’s Online Privacy Protection Act (COPPA) for every child under 13 and apply the same protections to every child profile.

Adult learners. Someone who is 18 can create their own learning account with their own email address. A learner who turns 18 can take ownership of the profile their parent created: they choose their own email and a new password, open the link we email to that address and type that password. From then on the account, its saved work and its privacy choices are theirs; the parent no longer sees it, and the old learner sign-in stops working. If the parent’s subscription covered them, that seat is freed and the parent is told by email.

2. What we collect

From the parent

Your name, email address and password (stored only as a one-way hash).
Your agreement to this policy and the terms, with the date and version.
If you subscribe: a PayPal subscription reference. PayPal handles your payment details; we never see or store your card or bank numbers. PayPal’s own privacy statement applies to what you give PayPal.
Your notification choices, including quiet hours, for each child.

From an adult learner

Their name, email address, password (as a one-way hash) and birth date, and the date they agreed to this policy. Their learning work is kept as described for a child below, and controlled only by them.

About each child

The display name, username, birth date and starting level you give us. The username and password are the child’s login; children never need an email address.
Learning work: answers, saved projects, practice sheets, class visits (start, pauses, end), hints used and checks passed, problems a child saves for next time, points earned and the rewards you set up.
When a child presses “I need a grown-up” in a class: the time, the class and the short note they may add, shown to you in the parent portal.
Child safety: if something a child types sounds like someone may be trying to exploit them (for example asking for pictures of them, asking to meet them or asking them to keep a secret), we keep a safety record: the time, the class, the kind of concern and the one sentence that raised it. Only the owner can read that sentence, with a second sign-in factor, and each reading is logged. We use it to decide whether the law requires a report to the National Center for Missing & Exploited Children or the police. Other worrying words only show the child a note about talking to a trusted grown-up, with emergency numbers; that note is not stored.
Optional: if you turn it on, a one-time approximate device location at the start of each class, so you know where learning happened. It is off unless you switch it on, a denial never blocks learning, there is no background tracking, and each reading is deleted after 24 hours.

Automatically

A sign-in cookie for each account. No analytics, advertising or tracking cookies. A few comfort settings, such as eye breaks, softer screen and bigger words, are saved only in the browser on that device and never sent to us.
To limit misuse, network addresses are counted in memory for rate limits and sign-in lockout (10 wrong passwords lock an account for 15 minutes). Addresses are not written to the database and our web server keeps no access logs. Sessions end after 24 hours.
Security audit entries (for example “password reset”, “child profile deleted”) tied to the account that acted.
Technical logs of our own server programs, kept for 30 days. They record starts, stops and errors, not who did what.

We do not collect photos, voice, contacts, precise location, school records, or anything from other apps. We never ask children for personal information beyond their login.

3. Why we use it

To run the learning: placement, lessons, practice, checks, saved work and the built-in coach.
To show you your child’s progress and send the notifications you chose.
To bill the subscription you chose and nothing else.
To keep accounts safe and stop abuse.
To answer your emails and requests.

We do not use anyone’s data for advertising, profiling, selling, or training models.

The built-in coach. The coach is automated help. It uses a small language model, a kind of artificial intelligence (AI), that we run ourselves on our own server; it is not a service from another company, and nothing a child types is sent to one. When a child asks the coach something, it sees only: the lesson, the task, the child’s age, the answer they have saved or typed for that task, the question they typed or, when they explain an idea back to it, their own words, and the parts of our lessons that match their question. We do not keep the questions or the replies after the reply is shown, and they are never used to train any model. Like any automated helper it can make mistakes. It never marks work: checks and progress come from each lesson’s fixed answer rules, not from the coach. It is built not to give final answers, and a reply that contains the task’s answer, a web address or anything unsuitable is replaced by the lesson’s own text. The model is used only after we have reviewed the lessons and switched it on; until then, and whenever the model is busy, the coach shows the lesson’s own text instead. The coach is for questions about our lessons; when a child’s message sounds worrying, it does not discuss it and asks them to tell a grown-up they trust. No child’s work is sent to any outside service for processing.

Reading aloud. When a child presses Listen or Hear it, the words being read (lesson text, a task, or a word they selected) go to a voice program that we run on our own server. It is not a service from another company. To make repeated reads instant we keep the resulting audio for up to 30 days, labelled only by a code made from the words, never by who asked. If our voice is switched off or busy, the device’s own built-in voice is used instead; we never use an online voice from another company.

4. Parental consent, and your rights as a parent

Before a child can start a class, we need your verifiable consent. When you add your first child we email you a direct notice of what we collect and why, with a link to a page where you confirm with one click; the link works for 7 days. Classes open after you confirm, and we send a second email confirming it, so a confirmation that was not yours can be undone by withdrawing consent or deleting the profile. You can, at any time, in the parent portal:

See each child’s learning records and download a copy (it includes problems they saved for next time and their “I need a grown-up” requests). One exception protects the child: private Human Skills reflections are shown only to the child in their own login.
When your child asks for a grown-up, or tries one practice problem twice without a match, the parent portal offers a help pack for that class: the idea, the worked example, the hints, what your child tried on each problem and the answer key, so you can help without giving the answer away.
Withdraw learning consent (the child’s sessions end immediately).
Delete one child’s data, or your whole account. Deletion is immediate and complete; only anonymous audit lines remain here, and the payment records PayPal keeps as the law requires.
Refuse any further collection by deleting the child’s profile. We never make a child’s participation depend on giving more information than the service needs.

All of this is in the parent portal and takes effect at once; nobody needs to be asked. If you cannot sign in, use “Forgot your password?”. For anything the portal cannot do, write to hello@wismoro.com from your account email.

5. Who can see it

Other parents and guardians. The parent who set up the family can invite another parent or legal guardian by email. We use that email address only to send the invitation, which names the children and expires after 7 days. A parent who joins gets their own sign-in and sees the same children, letters, rewards, helpers and updates. Subscriptions, payments, consent and deleting the family stay with the parent who set up the family, who can remove another parent at any time. If the family is deleted, the other parents’ sign-ins are deleted with it.

People you choose. If you add a helper (a tutor, teacher, school or anyone you trust), they see the children you pick: what each worked on, how it went, what comes next and a weekly summary our software writes from that activity. They never see your child’s own typed words or safety records and cannot message your child. You see when they looked and can remove them at any time; your child is told who can see their progress. A school or center can ask you to sign a child up, but nothing about the child is stored unless you add them and say yes.

Otherwise, only Wisdom Tomorrow LLC. Within the company, verified staff with a second sign-in factor can see a parent’s name and email, children’s display names and ages, consent and subscription status and the audit trail, so the owner can handle payments, refunds and free courses; they never see a child’s work, except the one sentence in a child-safety record described above. We use four outside companies for things we cannot do ourselves: Hostinger, which rents us the server the service runs on, so the data is stored on its equipment (it does not use the data for anything else); PayPal to take payments (they receive your email address, the number of children covered and an internal order number, and they see your payment details and the subscription; they never see your children’s names or work) and Titan, Hostinger’s email service, for our email (they carry the emails we send you and the ones you send us); and GitHub, where we keep our own code in a private place: when you write to hello@wismoro.com, a copy of your message (your name, address, subject and text, without attachments) is placed there so we can answer quickly, and it is removed once your message is handled, usually within a few days. Site health notes kept there have email addresses and other personal details removed, and nothing from the learning service itself, such as children’s names or work, goes there. We do not share data with anyone else, except if the law requires it or to protect a child’s safety.

6. Where it lives and how it is protected

Data is stored on a server we rent from Hostinger in its Boston data center in the United States. Only our own programs run on it, we manage it ourselves, and it is reached only over HTTPS. Nightly backups are kept on the same server and overwritten on a rolling schedule, so a deleted account disappears from them within 35 days. Before we update the site, Hostinger also keeps one snapshot of the whole server for us, which is replaced by the next one and expires after at most 24 hours. Passwords are hashed; children’s logins are isolated from the parent’s; staff access requires a second factor.

7. How long we keep it

Account and learning data: for as long as the account exists, then deleted when you delete it.
Problems a child saved for next time: until they clear them, then 90 days. “I need a grown-up” requests: 90 days.
Child-safety records: one year (the period the law asks us to preserve them if a report is made), even if the child’s profile is deleted earlier; then they are deleted.
Security audit entries: 2 years, then deleted.
If a subscription lapses, learning data is kept so a returning family continues where they left off; you can delete it at any time.
Payment records: kept by PayPal for the years tax law requires. They name the parent, never the child. After you delete your account, nothing here names you.
Free course and school requests sent from this website: 12 months (see below).

Free course and school request forms

When you send the free course or schools and organizations form, we receive exactly what you typed: for the free course, your name, email, number and ages of children, the course and an optional note; for schools, the organization, your name, role and work email, student numbers, age groups, courses, timing and optional message. We use it only to answer you, keep it in one file on our server, and delete it 12 months after you send it. The free course form is for parents and legal guardians; children should not send it themselves.

Little Explorers (ages 3–5)

The free Little Explorers page needs no account and collects nothing about your child. Drawings, tracing and games run only in your browser and are never sent to us; a saved picture goes to your own device. “Read things out loud” uses your device’s built-in voice. Videos come from our YouTube channel and load from YouTube (privacy-enhanced mode) only when someone presses play; opening our YouTube channel itself needs a grown-up to press and hold a button. Once a video plays, YouTube’s own privacy policy applies to it.

Free courses

A free course granted by Wisdom Tomorrow works exactly like a paid one for data purposes, with no payment information at all.

Changes

If we change what we collect or how we use it, we will email every parent at the address on the account before the change takes effect and ask for consent again where the law requires it. Smaller edits are posted here with a new date.

You can change the email address on your account in the parent portal (Updates & privacy); we confirm the change with your current address first and then verify the new one.

Contact

Wisdom Tomorrow LLC · hello@wismoro.com.

Last updated October 18, 2026.