Your family’s information

Parent-managed accounts

An adult parent or legal guardian opens WiggleSpark using Google. Children use profiles within that parent’s account and do not need their own Google account. Google supplies account identity information, including your email and account identifier, to sign you in.

What is saved

We store the explorer nickname, optional date of birth, play preferences, activity results, earned rewards, and journal entries or observations you choose to enter. Use a nickname and avoid entering information you do not need. We do not request precise location, a school identifier, camera recordings or microphone recordings.

Why and where

Family records are stored in the app’s Supabase database to show progress, adapt game difficulty and provide parent reports. The frontend is hosted by Lovable. Google provides sign-in. Family records are not publicly visible or shared with other parent accounts. Caregiver invitations are not enabled. No generative AI receives family records.

Operators with administrative database access can administer records for support and maintenance. Your parent PIN is a navigation lock on your browser, not a separate account permission. Sign out before giving a device to someone outside your family.

Optional Motion Mirror

Motion Mirror is off by default. A parent can review its explanation and confirm their existing parent PIN in Settings before enabling it for a child on that browser/device. The browser asks for camera permission only after someone chooses Turn on Motion Mirror in the floating control or optional welcome reminder. Setup and games reuse one isolated window during your visit to help your browser remember permission. Browsers may still ask again. Setup briefly opens and releases the camera without reading or analyzing frames, even if started before a game. Declining permission does not block the game.

Star Waves and the compatible arm-wave, finger and statue cues in Wiggle & Freeze animate the child's customized monster. Parents review these games and choose whether to include fingers in one PIN-confirmed consent form. Older Star Waves grants remain limited to that game and their original arm/finger choice until the parent approves the update. Statue cues require visible shoulders and also check clearly visible elbows and wrists for movement. Resting hands can be outside the picture. The cue checks an upper-body pause, not whole-body stillness or movement outside the camera view; it does not assess health or regulation. The camera image is not displayed. Camera input is processed locally in temporary memory; WiggleSpark does not record video, create or save photographs, upload camera images, or send images to an AI/cloud service. The app releases each temporary image after processing. It briefly uses approximate shoulder and wrist positions for the current gesture and does not save or send those positions to the parent account. For finger cues, a separate local hand model briefly computes hand joints, including approximate 3D positions, to check for changing finger bends. Only one model runs for the current cue. Its joint outputs are discarded after each analysis; only a few temporary bend values and a palm continuity check remain until the activity stops. The body model also computes coarse head points, which the feature does not use or save. There is no facial recognition, identification, or health or emotion assessment.

Software model files download from WiggleSpark hosting. For game play, the first model loads before the camera starts; subsequent cues can load another local model while sharing the same active camera session. These downloads can produce ordinary hosting access logs; they are not image uploads. The isolated sensor runs at our existing chaos-codex-stage.lovable.app hosting address, which may appear in the permission prompt. It contains no analytics or session replay, and its worker blocks outbound HTTP requests, including the model library's usage telemetry. Only the usual activity completion, duration and participation result enter saved progress; no video, images, landmark history or camera-derived performance score does.

After parent approval, a movable switch appears in child space. An optional reminder appears on each new visit or reload for an approved, unlocked child profile, unless you check “Don’t show this again on this device.” That preference is saved for your account in this browser. Dismissing the reminder or changing this preference does not request the camera. After the brief permission check, switching it on makes the camera available during compatible game cues; permitted wave, finger and statue cues within a game share one camera session. It stays off in menus, unapproved cues and other games. The indicator distinguishes readiness from actual camera use. Switching off pauses use while preserving parent permission. Parents can withdraw permission in Settings to remove the control, or lock motion off until the existing parent PIN unlocks it. The lock is local to this browser/device. Unlocking does not start the camera. The camera stops when the activity ends, you exit, the app backgrounds, or you turn Motion Mirror off on this browser/device. It does not restart automatically after an interruption. Chrome controls how long browser permission lasts and may ask again after a session ends; the app does not keep capture active outside compatible activities just to avoid a prompt. Every activity retains its manual alternative and rewards. This setting is device-local; disable it separately on other devices. Browser camera permission can also be revoked in the browser's site settings.

The browser and operating system manage their own internal camera buffers. Releasing the app's temporary image is not a promise of instantaneous secure erasure from all device memory. The existing parent PIN is a browser navigation lock, not independent proof of guardianship. Motion Mirror does not change this distinction.

Your choices

You can edit, export or delete each child’s profile in Parent Space → Settings. The database keeps up to 20 earlier saved versions for accidental-edit recovery. Deleting a profile deletes its active records and those versions. Provider backups may have a separate retention period; deletion does not promise immediate removal from every backup.

Records remain until you delete them or request removal. Routine application releases update code separately from family records. Export copies regularly; version history in the same database is not an independent backup.

Contact and requests

For support, access, correction, account deletion or privacy questions, contact jsgrella@gmail.com from the email associated with your parent account. Identity may need to be verified before a request is fulfilled. Do not email passwords or authenticator codes.

About the activities

WiggleSpark offers practice activities and parent observations. It is not a diagnostic service, medical treatment or emergency service. Google sign-in and the parent confirmation are not a certification of regulatory compliance.