Privacy Policy

Updated: October 21, 2026

Your privacy matters to us. This Privacy Policy explains what information Wondr (“we”, “our”, “us”) collects when you use our website and design studio (the “Service”), how we use it, and how we keep it safe.

We operate from the Republic of the Philippines, and this Policy follows the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

1. Information We Collect

When you sign in with Google, we receive:

your email address
a unique Google account identifier
your name, where Google shares it with us

We never receive your Google password.

1.2 Plan & Usage Information

your plan, access status, access expiry date, and Founding Member badge (if any)
the time of your most recent sign-in, and sign-in session information used to keep one active login per account
your background-removal credit balance and the date it last refreshed

1.3 Your Cloud Save

While you have an active plan, your current design is saved automatically to a private storage space linked to your account. This includes the contents of your design, such as layers, text, the images you place or upload, font choices, and undo history, along with the design’s title and the times it was created and last updated.

1.4 Payment Information

Payments are processed by a secure third-party payment provider. We never receive or store your card number. For each payment, we keep:

the payment provider’s order and transaction reference
the plan purchased, amount, currency, and payment status
the country used for pricing
the payment confirmation the payment provider sends us, which may include payer details such as your name and email address

1.5 Country for Pricing

When you visit the billing page, our server sends your IP address to a geolocation service (country.is) to find your country, so we can show you the right local price. We keep only the resulting country, not your IP address, with your account to keep your price consistent during checkout, and with your payment record if you make a purchase.

1.6 Images for Background Removal

When you use background removal, the selected image is sent to our background-removal service on Google Cloud (Singapore), processed, and returned to you. Images are used only to complete your request and are not stored afterward.

2. What We Don’t Do

we don’t use analytics, advertising, or tracking cookies
we don’t use device fingerprinting
we don’t collect your precise location
we don’t sell, rent, or trade your personal information
we don’t use your designs or images to train AI models or build datasets

3. How We Use Your Information

We use your information only to run, protect, and support the Service:

signing you in and confirming your access
keeping one active login per account
saving and restoring your cloud save
encrypting and decrypting the Wondr files (.wdr) you save and open
managing your daily background-removal credits
processing payments and showing prices for your country
preventing fraud, account sharing, and misuse
answering your support requests and sending important service notices
meeting our legal obligations

We respect the privacy of your work. We only view a design when it is needed to help with a support request you make or to investigate misuse of the Service.

4. Wondr Files (.wdr)

When you save or open a Wondr file, your design is sent securely to our server function to be encrypted or decrypted, then returned to your browser. The server function does not keep a copy. The file itself is stored only where you choose to save it.

5. Storage & Security

your cloud save is kept in a private storage space that only your account can access
all information is sent over encrypted HTTPS connections
your cloud save is compressed and protected by access controls
Wondr files (.wdr) are encrypted, and the encryption keys are held only on our servers
your access is checked on our servers before saving, loading, or using credits

No system is perfectly secure, but we take reasonable technical and organizational measures to keep your information safe.

6. Service Providers We Work With

We share information only with the providers we need to run the Service:

Google: sign-in and font delivery (fonts load from Google’s servers)
Supabase: accounts, database, file storage, and server functions
Payment provider: payment processing
Google Cloud: background-removal processing
country.is: country lookup for pricing
Pexels: stock photo search (your search terms are sent to Pexels when you search for photos)
GitHub Pages: website hosting

We may also share information with legal authorities when required by law.

7. Cookies & Browser Storage

Wondr uses only the browser storage it needs to work:

local storage: your sign-in session and a one-time sign-in security token
local and session storage: your editor preferences, such as snapping and selection colors
cache storage: templates, fonts, graphics, and 3D assets, so they load faster, plus a copy of any design you recover

We don’t use advertising, tracking, or behavioral analytics cookies.

8. How Long We Keep Information

your account information and cloud save are kept while your account exists, including after a Monthly plan ends, so your design is there when you return
each new autosave replaces the previous one; earlier versions are not kept
payment records are kept for as long as required for accounting, tax, and legal purposes
records of closed or suspended accounts may be kept where needed to prevent repeated misuse

You can ask us to delete your account and cloud save at any time by emailing support@createwondr.io. Deletion is permanent.

9. Children’s Privacy

Wondr is intended for users aged 13 and above. We do not knowingly collect information from children under 13, and any account found to belong to a child under 13 will be deleted.

10. International Data Processing

Our service providers operate around the world, so your information may be stored or processed outside the Philippines, including in Singapore and the United States. We work with providers that protect information with appropriate safeguards.

11. Your Rights

Under the Philippine Data Privacy Act, you have the right to:

be informed about how your information is used
access your personal information
correct inaccurate information
object to processing
have your information erased or blocked
receive a copy of your information (data portability)
file a complaint with the National Privacy Commission

If you live in the European Union or the United Kingdom, you have similar rights under the GDPR.

To use any of these rights, simply email us at support@createwondr.io.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and let you know about significant changes. Continuing to use the Service after an update means you accept the updated Policy.

13. Contact Us

Questions about your privacy? We are happy to help:

Customer Support

support@createwondr.io

https://www.createwondr.io