Privacy Notice
1. Introduction
We are ChildWise Labs d.o.o., Gogalova ulica 6, Ljubljana, Slovenia, registration number 9612335000, tax number SI26128012 (hereinafter referred to as the "Controller" or "we"), and we respect your privacy.
We operate an online platform at www.childwiselabs.com and related mobile applications (hereinafter referred to as the "Platform"). The Platform connects Users with Experts from various fields of child development and provides access to educational materials, professional literature, and other tools in the field of child development and education.
The Platform offers the following main services:
access to general information about Experts (such as the scope of services, indicative price of services, experience, language of communication, availability, licenses and certificates obtained, education, and opinions of other Users about services rendered)
a tool for secure communication (chat) between the User and the Expert intended for arrangements, logistics, and short messages
a tool for secure payment for services
access to materials and literature on child development and education (including digital games).
With this Privacy Notice (‘Notice’), the Controller ensures the Controller ensures that the processing of personal data complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: ‘GDPR’) and the Personal Data Protection Act of the Republic of Slovenia, Official Gazette of the Republic of Slovenia, No. 163/22 (hereinafter: ‘ZVOP-2’).
With this Notice, we also inform Users about the methods of personal data processing on our platform.
In this Notice, the terms listed below have the following meanings:
Platform: the website at www.childwiselabs.com and related mobile applications.
CWL or Operator or we: the owner and operator of the Platform is ChildWise Labs d.o.o., Gogalova ulica 6, Ljubljana, Slovenia, registration number 9612335000, tax number SI26128012.
Expert: a natural person who offers professional services related to child development via the Platform as an independent external contractor of the Operator.
User: a natural person who registers to use the Platform’s services and is over 18 years of age.
Child: a person under the age of 18 whose parent or legal representative is a User and who uses the Platform's services via the User's Account.
User Account: a digital identity created by the User upon registration on the Platform, enabling the use of the Platform. It includes the user ID, username, and email address.
Content Creator: a person who, in any way, submits their content (e.g., photographs, images, illustrations, texts, recordings, other musical works, other audiovisual works) to the Operator for publication.
The notice describes the types of personal data we collect, the purposes for which we process it, with whom we share it, and the measures we take to protect it. It also explains your rights and how you can exercise them (including access, correction, deletion, withdrawal of consent, and objection).
2. What information we collect
2.1 Data you provide to us
Identification and contact details: first name, last name, email address; details about the User, Expert, and Content Creator
Child data: first name and date of birth (optionally last name and gender), when necessary to perform the service
User Account data: username, password, settings, and preferences.
Communications: message content (e-mail, chat (encrypted), messages via third-party platforms or means), feedback, surveys.
Payments: data on payments made and invoices issued.
Multimedia: audio or video data (e.g., in the role of a participant in training courses).
2.2 Data collected automatically
Technical data such as IP address, device identifier, browser data, referrer URL, communication metadata, diagnostic error data.
2.3 Data collected upon confirmation of cookies
Usage data such as clicks, pages/screens viewed, interactions with elements (with consent),
Data for analytics (with consent),
Advertising data (with consent).
2.4 Data from other sources
Payment and analytics providers,
Third-party messaging platforms, if you use them to contact us,
Public databases.
3. How we use data
We use your data for:
Setting up and managing your account, verifying your identity, and ensuring security.
Connecting with Experts, organizing appointments, communicating, and providing support services (including via video conferencing).
Performing services and fulfilling the contract, including billing and payment processing.
Communication, including service notifications and responses to your questions.
Service improvements and analytics (e.g., understanding usage, testing functionality, troubleshooting).
Marketing (where permitted), including sending relevant news and offers and advertising based on consent.
Compliance with legal obligations, enforcement of rights, and protection against abuse and fraud.
4. Legal basis (GDPR and applicable law)
We process data on the following bases:
Contract (Art. 6(1)(b) GDPR): to provide the Platform's services;
Consent (Art. 6(1)(a) and 9(2)(a) GDPR): for measurement/advertising cookies, marketing. You can withdraw your consent at any time;
Legitimate interests (Art. 6(1)(f) GDPR): e.g., security, fraud prevention, basic analytics and improvements, customer support—balanced against your rights;
Legal obligation (Art. 6(1)(c) GDPR): e.g., accounting, responding to lawful requests from authorities.
Child data: when we process sensitive data of minors, we obtain the consent of a parent or guardian and apply the principles of data minimization and privacy by design. We do not currently collect or process such data.
5. Cookies
Cookies can be linked to a specific session or be permanent. Permanent cookies remain on your personal computer or mobile device even when you are offline, while session cookies are deleted as soon as you close your web browser.
We use session and persistent cookies for the purposes listed below:
Required cookies: Session cookies
Controller: ChildWise Labs
Purpose: These cookies are essential to provide you with services available through the website and to enable you to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these cookies, the services you have requested cannot be provided, and we only use these cookies to provide those services.Functional cookies: Persistent cookies
Controller: ChildWise Labs
Purpose: These cookies allow us to remember the choices you make when using the website, such as remembering your login details or language settings. The purpose of these cookies is to provide you with a more personalized experience and to prevent you from having to re-enter your settings each time you use the website.
Your choices regarding cookies
If you wish to avoid the use of cookies on the website, you must first disable cookies in your browser and then delete the cookies stored in your browser that are related to this website. You can use this option to prevent the use of cookies at any time.
If you do not accept cookies, some website functions may not work properly, and your user experience may be limited.
To delete Cookies or instruct your web browser to delete or reject Cookies, please visit the help pages of your web browser.
For the Chrome web browser, visit this Google page.
For Internet Explorer, visit this Microsoft page.
For Firefox, visit this Mozilla page.
For Safari, visit this Apple page.
For all other web browsers, visit the official website of your web browser.
6. Interactions via third-party platforms and tools
If you communicate with us via other platforms (e.g., messaging systems), we may receive the content and metadata of the conversations. These platforms process data in accordance with their own policies - we recommend that you review them.
7. Consent for information society services (digital age)
For children under the age of 15, or as otherwise specified by applicable local legislation, parental or guardian consent is required for the Child to use information society services.
8. Who we share data with
We do not sell personal data. We share data:
with Experts, when necessary for the service;
with processors (e.g., cloud hosting, email, video calling, support, analytics, payment providers) under contract and instructions from ChildWise Labs;
with payment providers (e.g., Stripe) and financial institutions for payment processing;
with law enforcement or other authorities when required by law;
in the context of changes in the company's status (e.g., merger, sale), with appropriate safeguards.
9. Note on the use of cloud infrastructure
We use recognized cloud infrastructure providers (Supabase, Netlify, Google Cloud) and other technical service providers. Data is processed in accordance with our contracts and GDPR safeguards.
10. Security
We implement administrative, technical, and physical measures to protect data (e.g., encryption in transit and at rest, access control, audit trails, least privilege principles). Nevertheless, no system is 100% secure.
11. Storage
We only store data for as long as necessary for the purposes for which it was collected and in accordance with legal retention periods. Retention criteria include the duration of the relationship, legal obligations, and evidence requirements. After these periods have expired, we anonymize or securely delete the data.
| Data categories | Purpose of processing | Legal basis | Retention period |
|---|---|---|---|
| Data about the User and the User's Account (name, email, password, profile settings) and Data about the Child | Creation and management of the User Account, service access management | Contract (Article 6(1)(b) of the GDPR) | Duration of the relationship + 2 years after the closure of the relevant User account |
| Child data until the age of 15 | Provision of services | Consent (Art. 6(1)(a), Art. 9(2)(a) GDPR); contract | Until consent is withdrawn |
| Communications (e-mail, messages, chat, video calls) | User support, service provision | Contract; legitimate interest (Art. 6(1)(f)) | Up to 2 years after the end of communication |
| Payment and billing information (payment card details, invoice) | Payment processing, accounting | Contract; legal obligation (Art. 6(1)(c)) | 10 years (according to ZDavP-2 and the Accounting Act) |
| Technical data (IP address, logs, cookies) | Security, troubleshooting, basic analytics | Legitimate interest (Art. 6(1)(f)) or consent (for non-essential cookies) | Depends on the policy of the cloud infrastructure provider; cookies: in accordance with user settings |
| Survey data and feedback | Service improvements, development of new features | Consent; legitimate interest | Duration of the relationship + 2 years after the closure of the User Account |
| Marketing data (e.g., email subscriptions) | Sending news and offers | Consent (Art. 6(1)(a)) | Until consent is withdrawn |
| Legal requirements and claims (e.g., data in legal disputes) | Compliance with legal obligations, enforcement of claims | Legal obligation; legitimate interest | Until the end of the proceedings + limitation period (e.g., 5 years) |
12. Independent controller
CWL is the controller for Platform activities, account management, support, and usage analytics. The Expert is the independent controller for their services and documentation in accordance with the GDPR and applicable national legislation.
13. Your rights
In accordance with the GDPR and applicable law, you have the following rights (subject to applicable restrictions):
access, rectification, erasure, and restriction of processing,
data portability,
object to processing, including objection to direct marketing,
withdraw consent (this does not affect the lawfulness of processing based on consent before its withdrawal),
not be subject to solely automated decision-making with legal or similarly significant effects.
You also have the right to lodge a complaint with a supervisory authority:
Information Commissioner (IP), Dunajska cesta 22, 1000 Ljubljana, https://www.ip-rs.si.
14. Your choices regarding communications
We only send marketing communications in accordance with the law and/or based on your consent. You can unsubscribe from marketing emails in your User Account settings.
15. Updates to this notice
We may update this notice from time to time. We will indicate the date of the last update in the document and, where appropriate, post a prominent notice.
Last updated: September 22, 2025
Data controller: ChildWise Labs d.o.o.
Address: Gogalova ulica 6, Ljubljana, Slovenia
Email for privacy related matters: info@childwiselabs.com