Privacy policy

Wisdom Tomorrow LLC (“Wisdom Tomorrow”, “we”) runs wismoro.com and the learning app at app.wismoro.com. This policy says, in plain words, what we collect, why, where it lives, and how you can see or delete it. We collect the minimum a learning service needs, we never sell it, we never show ads, and every helper runs on our own computers.

Policy version wisdom-tomorrow-privacy-2026-10, effective October 10, 2026. Questions: hello@wismoro.com.

1. Who this is for

Our service is for families. A parent or legal guardian (18 or older) creates the account, adds each child, and manages everything. Children aged 5 to 17 use the service only through a profile their parent created. We follow the Children’s Online Privacy Protection Act (COPPA) for every child under 13 and apply the same protections to every child profile.

Adult learners. Someone who is 18 can create their own learning account with their own email address. A learner who turns 18 can take ownership of the profile their parent created: they choose their own email and a new password, open the link we email to that address and type that password. From then on the account, its saved work and its privacy choices are theirs; the parent no longer sees it, and the old learner sign-in stops working. If the parent’s subscription covered them, that seat is freed and the parent is told by email.

2. What we collect

From the parent

Your name, email address and password (stored only as a one-way hash).
Your agreement to this policy and the terms, with the date and version.
If you subscribe: a PayPal subscription reference. PayPal handles your payment details; we never see or store your card or bank numbers. PayPal’s own privacy statement applies to what you give PayPal.
Your notification choices, including quiet hours, for each child.

From an adult learner

Their name, email address, password (as a one-way hash) and birth date, and the date they agreed to this policy. Their learning work is kept as described for a child below, and controlled only by them.

About each child

The display name, username, birth date and starting level you give us. The username and password are the child’s login; children never need an email address.
Learning work: answers, saved projects, practice sheets, class visits (start, pauses, end), hints used and checks passed, problems a child saves for next time, points earned and the rewards you set up.
When a child presses “I need a grown-up” in a class: the time, the class and the short note they may add, shown to you in the parent portal.
Optional: if you turn it on, a one-time approximate device location at the start of each class, so you know where learning happened. It is off unless you switch it on, a denial never blocks learning, there is no background tracking, and each reading is deleted after 24 hours.

Automatically

A sign-in cookie for each account. No analytics, advertising or tracking cookies.
To limit misuse, network addresses are counted in memory for rate limits and sign-in lockout (10 wrong passwords lock an account for 15 minutes). Addresses are not written to the database and our web server keeps no access logs. Sessions end after 24 hours.
Security audit entries (for example “password reset”, “child profile deleted”) tied to the account that acted.
Technical logs of our own server programs, kept for 30 days. They record starts, stops and errors, not who did what.

We do not collect photos, voice, contacts, precise location, school records, or anything from other apps. We never ask children for personal information beyond their login.

3. Why we use it

To run the learning: placement, lessons, practice, checks, saved work and the built-in coach.
To show you your child’s progress and send the notifications you chose.
To bill the subscription you chose and nothing else.
To keep accounts safe and stop abuse.
To answer your emails and requests.

We do not use anyone’s data for advertising, profiling, selling, or training models. The built-in coach is automated help that runs on our own equipment: when a child asks it for help, it sees the lesson, the task, the child’s age, the answer they have saved for that task and, when they explain the idea back to it, their own words, and nothing else. No child’s work is sent to any outside service for processing.

4. Parental consent, and your rights as a parent

Before a child can start a class, we need your verifiable consent. When you add your first child we email you a direct notice of what we collect and why, with a link to a page where you confirm with one click; the link works for 7 days. Classes open after you confirm, and we send a second email confirming it, so a confirmation that was not yours can be undone by withdrawing consent or deleting the profile. You can, at any time, in the parent portal:

See each child’s learning records and download a copy (it includes problems they saved for next time and their “I need a grown-up” requests). One exception protects the child: private Human Skills reflections are shown only to the child in their own login.
When your child asks for a grown-up, or tries one practice problem twice without a match, the parent portal offers a help pack for that class: the idea, the worked example, the hints, what your child tried on each problem and the answer key, so you can help without giving the answer away.
Withdraw learning consent (the child’s sessions end immediately).
Delete one child’s data, or your whole account. Deletion is immediate and complete; only anonymous audit lines remain here, and the payment records PayPal keeps as the law requires.
Refuse any further collection by deleting the child’s profile. We never make a child’s participation depend on giving more information than the service needs.

All of this is in the parent portal and takes effect at once; nobody needs to be asked. If you cannot sign in, use “Forgot your password?”. For anything the portal cannot do, write to hello@wismoro.com from your account email.

5. Who can see it

Only Wisdom Tomorrow LLC. Within the company, verified staff with a second sign-in factor can see a parent’s name and email, children’s display names and ages, consent and subscription status and the audit trail, so the owner can handle payments, refunds and free courses; they never see a child’s work. We use two outside companies for things we cannot do ourselves: PayPal to take payments (they receive your email address, the number of children covered and an internal order number, and they see your payment details and the subscription; they never see your children’s names or work) and Porkbun for our email service (they carry the emails we send you). We do not share data with anyone else, except if the law requires it or to protect a child’s safety.

6. Where it lives and how it is protected

Data is stored on our own computer in Ohio, United States, not with a cloud provider, and is reached only over HTTPS. Nightly backups are kept on the same premises (on the computer itself and on a second drive beside it) and overwritten on a rolling schedule, so a deleted account disappears from backups within 35 days. Passwords are hashed; children’s logins are isolated from the parent’s; staff access requires a second factor.

7. How long we keep it

Account and learning data: for as long as the account exists, then deleted when you delete it.
Problems a child saved for next time: until they clear them, then 90 days. “I need a grown-up” requests: 90 days.
Security audit entries: 2 years, then deleted.
If a subscription lapses, learning data is kept so a returning family continues where they left off; you can delete it at any time.
Payment records: kept by PayPal for the years tax law requires. They name the parent, never the child. After you delete your account, nothing here names you.
Free course and school requests sent from this website: 12 months (see below).

Free course and school request forms

When you send the free course or schools and organizations form, we receive exactly what you typed: for the free course, your name, email, number and ages of children, the course and an optional note; for schools, the organization, your name, role and work email, student numbers, age groups, courses, timing and optional message. We use it only to answer you, keep it in one file on our own computer, and delete it 12 months after you send it. The free course form is for parents and legal guardians; children should not send it themselves.

Free courses

A free course granted by Wisdom Tomorrow works exactly like a paid one for data purposes, with no payment information at all.

Changes

If we change what we collect or how we use it, we will email every parent at the address on the account before the change takes effect and ask for consent again where the law requires it. Smaller edits are posted here with a new date.

You can change the email address on your account in the parent portal (Updates & privacy); we confirm the change with your current address first and then verify the new one.

Contact

Wisdom Tomorrow LLC · hello@wismoro.com.

Last updated October 10, 2026.