Privacy Policy
Effective Date: March 26, 2026
Last Updated: October 14, 2026
Introduction
Love In A Big World is a service of BlueWonder Creative, Inc. ("we”, "our”, or "us"). We build digital experiences that help children build resilience and wellbeing, and we take the privacy and safety of the children and families who use them seriously. This Privacy Policy explains what information we collect through our applications, websites, and related services (together, the "Services"), how we use it, who we share it with, how long we keep it, and what choices you have. We have tried to write it in plain language. If anything here is unclear, please contact us using the information at the end.
Our Services are designed for children ages 8 through 12 and their parents or legal guardians. A child may use the Services only through an account that a parent or legal guardian has approved. In this Policy, "parent" means a parent or legal guardian. Some children use the Services through a school, clinic, or other organization. If that describes your child, please also read the section below titled "When a School or Organization Provides the Services, because some of the rules are different.
Who We Are and How to Reach Us
The operator of the Services is:
BlueWonder Creative, Inc., d/b/a Love In A Big World
3042 Hummingbird Drive, Nashville, Tennessee 37218
Telephone: 615-498-6658
Email: tamara@loveinabigworld.com
We are required by the Children's Online Privacy Protection Act to give you this information, and we are glad to do so. If you have a question or a request about your child's privacy, any of these methods will reach us.
Information We Collect
We collect the least amount of information we can while still running the Services well. We do not require a child to give us more information than is reasonably necessary in order to participate.
Information We Collect from Parents
When you create an account, we collect:
• your name;
• your email address;
• your phone number; and
• your ZIP code.
We use this information to verify that you are the child's parent, to obtain and record your consent, to set up and manage your child's account, to send you messages about the account, and to keep the Services secure.
Information We Collect from Children
With your consent, we collect the following from your child:
• a first name or nickname;
• a username and PIN, used only to sign in; and
• a username and PIN, used only to sign in; and
the activity described under "Usage Information" below, together with any content your child creates in the Services. We do not collect a child's own email address, a child's own phone number, precise geolocation, photographs, audio or video recordings, biometric identifiers, persistent identifiers used for tracking across other sites or apps, or any sensitive personal information from children. There is one exception involving phone numbers, and we want to be clear about it. If a child begins the sign-up process on their own, we may ask the child for a parent's phone number so that we can send that parent a single text message inviting them to approve the account. That number belongs to the parent, not the child. We use it only for that one message and for the account once the parent approves it. We do not use it to contact the child, and if the parent does not respond, we delete the number. This is permitted under the one-time-contact provision of the COPPA Rule.
Usage Information
We collect limited information about how the Services are used, such as which features are opened, which missions and gives are completed, what content is viewed in MyLife, and basic technical information needed to deliver the app and diagnose problems. We use this only to operate the Services, keep them secure, and make them work better. We do not use it to build advertising profiles.
How We Use Information
We use the information we collect to:
• create and secure accounts, and to connect a parent account with a child account;
• verify parental consent and keep a record of it;
• deliver the content and features of the Services, including missions, community activities, and
• educational material;
• respond to questions and provide support;
• communicate with parents about their account;
• monitor for and respond to security problems, fraud, and misuse;
• improve how the Services perform and how they are designed; and
• comply with our legal obligations.
We do not use personal information for behavioral advertising, for profiling, or to make decisions about a child that produce legal or similarly significant effects. We do not use children's personal information, or content that children create in the Services, to train artificial intelligence or machine learning models that serve anyone other than the child and their family.
Children's Privacy and COPPA
The Children's Online Privacy Protection Act, and the Federal Trade Commission rule that implements it, set specific requirements for services directed to children under 13. We follow them. In practice this means:
• a child cannot create a usable account without verifiable parental consent;
• we collect only what we reasonably need, and we never make a child give us more information than necessary in order to take part in an activity;
• we tell you, before we collect anything, what we collect and what we do with it;
• we do not disclose a child's personal information to third parties for their own purposes without asking you separately;
• you control your child's account and information; and
• we keep children's information only for as long as the schedule below allows, and never indefinitely.
How We Obtain Parental Consent
Before we collect personal information from your child, we send you a direct notice describing what we plan to collect and how we will use it, and we ask you to consent. We verify that you are an adult and the child's parent by [describe the method actually used — for example, a small refundable charge to a payment card, a government-issued identification check through a verification vendor, a signed consent form returned to us, or a telephone call to a trained representative. If we do not receive your consent within a reasonable time after we send the direct notice, we delete the information we collected in order to reach you. You may withdraw your consent at any time. See "Your Choices and Rights" below.
Separate Consent for Disclosure to Third Parties
We do not disclose your child's personal information to third parties for those parties' own purposes. If that ever changes, we will ask for your consent separately from the consent you gave for us to collect the information in the first place, we will tell you who the recipient is and what they will do with the information, and you will be able to say yes to our Services while saying no to the disclosure. Sharing information with the vendors who host and operate the Services on our behalf is different, and does not require separate consent, because those vendors may use the information only to perform services for us. We describe them below.
How Long We Keep Information
We keep personal information only as long as we reasonably need it for the purpose we collected it for. We do not keep children's personal information indefinitely, and we do not keep it for any secondary purpose. When a retention period ends, we delete the information or convert it to de-identified data that cannot be linked back to an individual. This is our retention schedule:
Category of Information & How Long We Keep It
• Parent account information (name, email, phone, ZIP code) - For as long as the account is active, and for ninety (90) days after the account is closed. Deleted sooner on request.
• Child account information (first name or nickname, username, PIN) - For as long as the account is active, and for thirty (30) days after the account is closed or the child ages out of the Services. Deleted sooner on request.
• Child activity information (missions completed, gives, content viewed in MyLife) - Twelve (12) months from the date it is created. After that we either delete it or convert it to de-identified data that cannot be linked back to a child.
• Content a child creates in the Services - For as long as the account is active, and for thirty (30) days after the account is closed. Deleted sooner on request.
• Records of parental consent (including who consented, how, and when) - For as long as the child's account is active, and for three (3) years after it closes. We keep these because the law requires us to be able to show that we obtained consent. These records are stored separately and are not used to operate the Services.
• One-time SMS delivery records - Twelve (12) months.
• Support and customer service messages - Twenty-four (24) months from the date of the last message in the conversation.
• Server and security logs - Twelve (12) months.
• Backups Deleted on our ordinary backup rotation, which does not exceed ninety (90) days.
If you ask us to delete information, we delete it promptly and in any event within thirty (30) days of confirming your request, other than backup copies, which are deleted on the rotation described above, and records we are legally required to keep.
When a School or Organization Provides the Services
Sometimes a school, district, clinic, or community organization gives families access to the Services. When that happens, the organization decides which students or clients participate, and in some cases the organization provides consent on behalf of parents rather than each parent consenting individually. This is permitted for school-authorized educational purposes under guidance from the Federal Trade Commission.Where we provide the Services through a school or district and student records are involved, we act as a "school official" with a legitimate educational interest under the Family Educational Rights and Privacy Act. That means we use student information only for the purposes the school has authorized, we remain under the school's direct control with respect to that information, and we do not re-disclose it without the school's permission. When the organization is the one that decides how information is used, your rights of access, correction, and deletion generally run through that organization rather than through us. We will help the organization respond to you, and we will forward your request to them. Please contact your child's school or the organization first, and contact us if that does not resolve it. We never use student information for advertising, and we never sell it. Under the FTC's guidance, a school cannot consent on a parent's behalf if a vendor uses children's information for commercial purposes, so this is a line we do not cross.
Sharing of Information
We do not sell personal information, and we never have.
We share information only in these situations:
• Service providers. We use vendors to host the Services, store data, deliver messages, and provide customer support. They may use the information only to perform those services for us, they are bound by written contracts, and they may not use it for their own purposes or disclose it to anyone else.
• Your school or organization. If your child participates through a school, clinic, or other organization, we share information with that organization as described above.
• Legal requirements. We may disclose information if a law, subpoena, court order, or other lawful request requires it. Where we are permitted to do so, we will notify the affected parent first.
• Safety. We may disclose information where we believe in good faith that it is necessary to protect the safety of a child or another person, to investigate suspected fraud or misuse, or to protect our legal rights.
• Business transfer. If our business is sold or merges with another company, information may transfer as part of that transaction. If the new owner would handle your child's information materially differently, we will notify you and obtain your consent before that happens. We do not allow any third party to collect personal information from children through the Services forthat third party's own purposes.
Advertising, Analytics, and Tracking
We do not display third-party advertisements to children. We do not engage in behavioral advertising, profiling, or cross-app tracking of children for marketing purposes, and we do not enable ad personalization. We use limited analytics to understand whether features work and where the app is failing. Those tools are configured to collect as little as possible, to avoid persistent identifiers used for tracking, and not to share data for advertising. The analytics providers we currently use are listed at [URL for a subprocessor page], which we update when the list changes.
Communications and Text Messages
There are two situations in which we may text a phone number, and we handle them differently.
One-Time Message to a Parent
If a child starts the sign-up process and gives us a parent's phone number, we send that parent a single text message telling them the child has asked to join and explaining how to download the parent app and approve the account. That is one message. We do not send follow-ups, we do not send marketing, and if the parent does not respond, we delete the number.
Account Messages to Parents
If you, as a parent, give us your own phone number when you set up your account, we may send you occasional text messages about your account, for example, a verification code, a security alert, or a notice that your child has requested something that needs your approval. These are account messages, not marketing. Message frequency varies depending on account activity, and message and data rates may apply. You can stop them at any time by replying STOP, and you can get help by replying HELP or by contacting us. Opting out of texts does not close your account, but it may mean you receive approval requests by email instead. We will not send you marketing text messages unless you separately agree to receive them.
We send parents email about their account, including consent requests, approval notices, security alerts, and material changes to this Policy. You cannot opt out of account emails while you have an active account, because we need a way to reach you. Any newsletter or marketing email is separate and requires your consent, and every one of those includes an unsubscribe link.
Data Security
We maintain a written information security program with administrative, technical, and physical safeguards designed for the sensitivity of children's information and the size of our organization. Among other things, we encrypt personal information in transit and when stored, limit access to the personnel who need it to do their jobs, require multi-factor authentication for administrative access, train our staff, assess our risks at least annually, and require our vendors to protect information on comparable terms. No system is perfectly secure. If we experience a security incident that affects your or your child's personal information, we will notify you without unreasonable delay, consistent with applicable law, and tell you what happened and what we are doing about it.
Your Choices and Rights
As a parent, you have the following rights concerning your information and your child's information:
• Access You may ask us for a copy of the personal information we hold about you or your child.
• Correction You may ask us to correct information that is wrong.
• Deletion You may ask us to delete your account, your child's account, or specific information.
• Withdraw consent You may withdraw your consent to our collection or use of your child's information at any time. If you do, we will close the child's account and delete the information.
• Refuse further use You may tell us to stop collecting or using your child's information while keeping the information we already have, though this usually means the child can no longer use the Services.
• Opt out of sale or targeted advertising. We do not sell personal information and we do not use it for targeted advertising, so there is nothing to opt out of. We are telling you about this right anyway because some state laws require us to.
• Appeal If we deny a request, you may appeal by replying to our decision. We will respond to the appeal within forty-five (45) days and, if we deny it again, tell you how to contact your state attorney general.
To make a request, email us at tamara@loveinabigworld.com or write to us at the address above. To protect your child, we need to be reasonably sure you are who you say you are, so we may ask you to confirm information already associated with the account. We will respond within forty-five (45) days, and we will tell you if we need more time. We will not charge you for a request, deny you service, or give you a lower quality of service because you exercised a right.
State Privacy Rights
Depending on where you live, state law may give you additional rights. Tennessee, California, Virginia, Colorado, Connecticut, and a growing number of other states have consumer privacy laws. The rights described in the table above are available to every parent who uses the Services, regardless of where you live, so you do not need to determine which law applies to you. For California residents: we have not sold or shared personal information in the preceding twelve months, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We do not offer financial incentives for personal information. California residents under 18 who have posted content in the Services may request its removal, and we will honor that request. Where a state law requires us to identify an authorized agent process, you may designate an agent to make a request on your behalf by providing us with written authorization signed by you.
Where Information Is Stored
The Services are intended for use in the United States, and we store information on servers located in the United States. We do not offer the Services to users in the European Economic Area, the UnitedKingdom, or other jurisdictions with separate data transfer requirements. If you are outside the United States, please do not use the Services.
Third-Party Links
The Services may contain links to other websites or resources. We do not control those sites and are not responsible for their privacy practices. Please review their policies before providing information to them.
Changes to This Policy
We may update this Policy. When we do, we will change the "Last Updated" date at the top and post the new version in the Services.
If a change is material, meaning it changes what we collect from children, how we use it, or who we disclose it to, we will not apply the change to information we already collected from your child unless we first notify you and obtain your consent again. Continuing to use the Services is not, by itself, consent to a material change in how we handle a child's information. For changes that do not affect children's information, notice through the Services or by email is sufficient and the change takes effect when posted.
Contact Us
If you have a question, a concern, or a request about this Policy or about your child's information, please contact us:
BlueWonder Creative, Inc., d/b/a Love In A Big World
3042 Hummingbird Drive, Nashville, Tennessee 37218
Telephone: 615-498-6658
Email: tamara@loveinabigworld.com
If you are not satisfied with our response, you may contact the Federal Trade Commission at ftc.gov or your state attorney general.