Privacy Policy

Including Cookie Policy — How we collect, use, and protect your data

Wondr.Cam | July 2026

1. Introduction

Wondr.Cam is operated by ASAMARA DIGITAL - FZCO ("Asamara Digital", "we", "us", "our"). Wondr.Cam is a cloud-based service that turns everyday photos — taken by parents, often together with their kids — into stylized, AI-generated collectible cards paired with a playful, age-appropriate challenge. This Privacy Policy explains what personal data we collect, how we use it, and your rights, including under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADO).

By creating an account and using Wondr.Cam, you acknowledge that you have read and understood this policy.

2. Who We Are (Data Controller)

Asamara Digital is the data controller of your personal data within the meaning of Art. 4(7) GDPR.

Contact for all data protection matters: info@wondr.cam

3. What Data We Collect

3.1 Account & Identity Data

• Email address (used for account creation and login)
• Password (stored in hashed form — we never see your plain-text password)
• Date of account creation

3.2 Payment Data

Payments are processed by Paddle.com Market Limited, who acts as the Merchant of Record for all orders. We do not store your credit card details. Paddle provides us with a transaction reference, amount, and status only. Paddle's privacy policy applies: paddle.com/legal/privacy

3.3 Photos You Submit

Wondr.Cam is built around photos you take of everyday objects, often together with your child. Here is exactly what happens to a photo you submit:

• You (the account holder) capture or upload a photo through the app.
• The photo is sent to our AI image-processing partner(s) to generate a stylized, illustrated "card" image, along with a matching fact and challenge.
• We do not store your original photo. Once the stylized card has been generated — typically within a few minutes, and in any event no later than 24 hours after upload — the original photo is permanently deleted from our systems and processing pipeline.
• We retain only the AI-modified card image that results from this process. Card images are stored on servers hosted by Lovable (Lovable Labs AB) in the EU, and are linked to your account to build your card collection.

See Section 11 for important rules and responsibilities around the photos you submit.

3.4 Card & Usage Data

• Cards generated, collection progress, and challenge completion (self-reported, optional)
• Session timestamps and usage frequency

3.5 Feedback

You may optionally submit ratings and written feedback about the Service. Feedback is used solely to improve Wondr.Cam and is not published.

3.6 Technical & Analytics Data

We use Lovable (Lovable Labs AB) as our application and AI-processing platform. Lovable collects standard usage telemetry: IP address and approximate location, browser type and version, pages and features accessed, and session duration. Wondr.Cam does not run advertising and does not use advertising cookies, pixels, or trackers (e.g. Google Ads, Meta Pixel).

4. Legal Basis for Processing (GDPR)

• Contract performance (Art. 6(1)(b)): processing your account and payment data, and processing your photos to generate your cards, to provide the Service.
• Legitimate interests (Art. 6(1)(f)): analytics, fraud prevention, and improving the Service.
• Consent (Art. 6(1)(a)): non-essential cookies.
• Legal obligation (Art. 6(1)(c)): retaining transaction records for VAT purposes.

5. How We Use Your Data

5.1 To Provide the Service

We use your account and payment data to create and maintain your account, authenticate sessions, and process payments. We use the photos you submit, transiently, to generate your AI-modified card images.

5.2 To Improve the Service

We use anonymised analytics and feedback data to understand how the Service is used and to make improvements.

6. Data Sharing & Third Parties

We share data as necessary with the following processors:

• Lovable Labs AB (application hosting and AI image processing) — EU region
• Paddle.com Market Limited (payment processing, Merchant of Record) — subject to Paddle's own DPA and privacy policy

All processors are bound by data processing agreements. We do not sell your personal data, and we do not share your photos or card images with advertisers.

7. Cookies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website or use our app. On your first visit, you will be shown a cookie consent banner. Non-essential cookies will only be set after you provide consent.

7.2 Strictly Necessary Cookies

Required for the Service to function — no consent needed.

• Session / authentication cookies: keep you logged in
• Security cookies: prevent cross-site request forgery

7.3 Analytics Cookies (consent required)

• Lovable Analytics: usage telemetry, page views, feature interactions

7.4 Managing Cookies

You can change your cookie preferences at any time via the 'Cookie Settings' link in the footer.

8. International Data Transfers

Your data is hosted within the EU. Where any limited transfer outside the EEA occurs (for example, in connection with Asamara Digital's operations in the UAE), we ensure appropriate safeguards, including Standard Contractual Clauses (SCCs), are in place.

9. Data Retention

• Account data: for as long as your account is active, plus 2 years after deletion
• Payment records: 5 years (VAT legal requirement)
• Original photos: not retained — deleted within 24 hours of upload, and typically within minutes of your card being generated
• AI-modified card images: for as long as your account is active, plus 90 days after account deletion
• Card & usage data: 3 years from last activity
• Feedback: 2 years
• Analytics data: as per provider settings (typically 14–26 months)

10. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or port your data, and to object to processing or withdraw consent. Contact us at info@wondr.cam — we will respond within 30 days.

EU/Swiss residents may also lodge a complaint with their local data protection supervisory authority. Swiss residents may contact the Federal Data Protection and Information Commissioner (FDPIC) at fdpic.ch.

11. Children, Photos, and Your Responsibility

Wondr.Cam accounts are held by parents or legal guardians who are at least 18 years old. Children do not create their own accounts; the Service is designed for children aged approximately 4–12 to enjoy under the supervision of the adult account holder.

You are solely responsible for the photos and content you create using Wondr.Cam, including any photos taken together with your child. In particular:

• Do not photograph identifiable people other than yourself and your own child(ren) — this includes other children, other parents, and any bystanders — unless you have that person's (or their legal guardian's) explicit consent.
• Wondr.Cam is designed for photographing everyday objects, not people. Photos primarily depicting other individuals may be rejected, may not generate as intended, or may be removed.
• You confirm that you have the right to submit any photo you upload, and that doing so does not infringe the rights of any third party.

We do not store your original photos (see Section 3.3), which limits — but does not eliminate — the risks of submitting photos of other people. Please use good judgment, especially with your children.

If you believe a photo of yourself or your child has been submitted without appropriate consent, contact us at info@wondr.cam.

12. Security

We use encrypted data transmission (HTTPS/TLS), hashed password storage, and host on infrastructure operated by reputable EU providers.

13. Changes to This Policy

We may update this policy from time to time. Registered users will be notified of material changes by email. The current version is always available at wondr.cam/privacy.

14. Contact

For all privacy matters: info@wondr.cam