Privacy policy
Last updated: 12 October 2026
The short version
- We collect as little as we can. For a child, that is a first name and a birth year, given by a grown-up. Nothing else.
- To make a drawing, we send the description to Google’s AI model, through Vercel. We don’t send your child’s name, age or anything else about them.
- Drawings join a shared library other families can browse. Your name and your child’s name are never shown with them.
- We don’t run ads, we don’t track you across other sites, and we never sell or rent your information.
- You can download everything we hold, or delete your account and all your kids’ profiles, whenever you like, from the grown-ups area.
1. Who we are
Geewizz Kids is run by Geewizz Kids (ABN 76231951647), trading as Geewizz Kids, in Victoria, Australia. We handle personal information under the Privacy Act 1988 (Cth) and its Australian Privacy Principles. Contact: hello@geewizz.kids.
2. What we collect
From you, the grown-up
- Your email address, and your name if you sign in with Google.
- Your birth year, to check you’re an adult.
- When you last gave consent for AI to process your children’s descriptions, or, if you’ve withdrawn it, when you did.
- Your language setting, and a note of how you found us (for example, a link from one of our own pages), taken once when you sign up.
- Your grown-up PIN, kept only in a scrambled form that can’t be turned back into the PIN, and a count of recent wrong tries. A code we email you to reset it is kept the same way, for 10 minutes.
About your children
- A first name and a birth year for each kid profile you create. Nothing else: no surname, photo, school, location or interests.
Descriptions and drawings
- The description typed for each new drawing, and the black-and-white drawing we make from it.
Subscription
- Your plan, trial and renewal dates, and your Stripe customer number.
- A one-way “fingerprint” of your card, made by Stripe, which lets us give one free trial per card. It can’t be turned back into your card number. We never see or store your card number.
Keeping the service running
- A note each time a drawing is made: when, whether it worked and roughly what it cost us. It holds no description text. We use it to apply fair-use limits and to watch our costs.
- A sign-in cookie, and a cookie that remembers which kid is using this device (see section 11).
- A record that an email was sent to you (kind and time, with your address scrambled so it can’t be read back), but not what it said.
- If you turn on notifications: the address your browser gives us to send them.
If you contact us or report a problem
- What you write, and a photo if you attach one. Photos are deleted after 90 days.
- A bug report sends Sentry what you wrote, your device and app version, and a short recording of the last minute of taps. Names and drawings are masked in it. Sentry keeps it for 30 days.
- When the app crashes, we send Sentry the error and your device type, tied to an anonymous id, not to your name or email.
About how the site is used
- Vercel’s page-view and speed measurements: which pages were opened, in what kind of browser and how fast they loaded. They don’t use cookies and aren’t linked to your account.
- Simple counts of how often our home page, public tracing tool and theme pages are used, and of sign-in codes sent, with no personal information.
- A record of the steps you take signing up and subscribing, such as when you reached the paywall or started checkout. It is linked to your account so we can see where the app is hard to use. It holds nothing about your children, comes with your data download, and is deleted with your account.
3. What we don’t do
- No advertising, and no advertising companies on the site.
- No selling, renting or trading personal information.
- No profiling of children, and no interests stored on a kid profile.
- No photos or audio of children kept.
4. How we use it
To run your account, make drawings, keep the service safe for children, apply fair-use limits, take payment, send the emails you need (sign-in codes, account and billing notices, replies to you), fix problems, and understand how the service is going overall.
5. Who helps us run it
We use these companies. They handle information only to provide their service to us.
| Who | What for | What they handle |
|---|---|---|
| Vercel | Hosting, file storage, page-view analytics, and the gateway that carries AI requests | Everything the site handles, in transit and in storage |
| Supabase | Database | Your account, kid profiles, descriptions and records |
| AI model that makes drawings and checks descriptions are suitable; Google sign-in if you use it | The description text; your Google email and name if you sign in with it | |
| Stripe | Payments and subscriptions | Your card, billing details and email |
| Resend | Sending our emails | Your email address and the email content |
| Sentry | Error and bug reports | As in section 2 |
We may also share information where the law requires it, or to protect someone’s safety.
6. Sending a description to Google
Before the first drawing, we ask you, as the grown-up, to agree to this. The description your child types is sent to Google’s image model, through Vercel, and Google returns the line art. A second Google model reads the same text to check it is suitable. We send nothing else about your child.
If you say no, you can still browse the library. New drawings need your OK.
7. The shared library
Each new drawing, and the description that made it, joins a library every signed-in family can browse. Your name, your child’s name and your account are never shown with it. If a family asks for the same thing, they see the existing drawing instead of a new one.
If you delete your account, we delete the drawings made through it. You can flag any drawing from the app and we’ll review it.
8. Where your information goes
Most of these companies are based or store data in the United States, so your information is likely to be held outside Australia. Supabase, Vercel and Sentry all store data in the United States. We choose providers with security and privacy commitments, and we stay responsible for how your information is handled.
9. How long we keep it
| Information | How long |
|---|---|
| Account, kid profiles, descriptions, drawings, subscription records, sign-up steps | Until you delete your account |
| After you delete your account | 7 days in case you change your mind, then permanently deleted, including your drawings |
| Support photos | 90 days |
| Bug-report recordings and error reports (Sentry) | 30 days |
| Backups | Supabase's default backup window |
Payment records held by Stripe, and anything we must keep by law (such as tax records), are kept as long as those rules require.
10. Your choices and rights
From the grown-ups area you can:
- Download a copy of everything we hold about your account;
- Delete a kid profile, or your whole account with all its profiles;
- Withdraw your consent for AI drawing, under Legal and data. No new drawing is made until you say yes again. Everything already made stays in your kids’ galleries, and descriptions already sent to Google can’t be recalled.
You can turn notifications off in your browser’s settings. You can ask to see or correct what we hold, or to stop us processing it, by emailing hello@geewizz.kids. We’ll answer within 30 days.
If you’re not happy, tell us and we’ll try to fix it. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).
11. Cookies
We set two cookies, both essential, so there’s no cookie banner. One keeps you signed in, for up to 30 days. The other remembers which of your kids is using this device, for up to a year. It holds only a random identifier for that kid profile, not their name or age. We don’t set advertising or tracking cookies.
12. Children
Geewizz Kids is for grown-ups. Children don’t have accounts: a grown-up sets up each profile. Before we collect a child’s first name and birth year, and before any description goes to Google, we confirm an adult is in charge and ask for the grown-up’s consent. We follow the Children’s Online Privacy Protection Act (US) in this. A grown-up can see a child’s information, have it deleted, or stop us collecting more at any time by using the controls above, or by emailing us.
13. Security
Information travels over encrypted connections and is stored with access limited to the people and systems that need it. No system is perfectly secure. If something happens that is likely to cause you serious harm, we’ll tell you and the Privacy Commissioner, as the law requires.
14. Changes
If we make a material change, we’ll tell you by email or in the app before it applies.