Privacy Policy

Draft — under legal review. Questions: willa@willachat.com.

Last updated: July 30, 2026

Willa exists so parents can give their children a supervised way to talk with an AI. That only works if you can trust what happens to your family's data, so this page spells it out.

Who we are

WillaChat ("Willa," "we," "us") operates this website (willachat.com) and the WillaChat application (app.willachat.com). For anything in this policy, write to willa@willachat.com — a real person reads every message.

What we collect

• Parent account data. The email address and password you use to create and sign in to your account. Parents — not children — hold the account.
• Child profile data. The profile details you enter when you create a child profile. Creating a profile requires your consent, verified by a one-time code emailed to you.
• Conversation transcripts and safety classifications. Willa's backend stores your child's conversations and the safety pipeline's classifications of them, so you can review everything in your parent dashboard.
• Contact-form submissions. The name, email, and message you send through our contact form are emailed to willa@willachat.com. They are not stored in any database.

Where your child's messages go (bring your own key)

This part matters, so please read it. Willa does not run its own AI model. Your child's messages are sent to the AI provider you choose (for example, OpenAI or Anthropic), using your API key, underyour agreement with that provider. Willa does not control how that provider retains messages or whether it uses them for training — please review your chosen provider's privacy policy before adding your key.

Separately from the provider, Willa's own backend keeps a copy of each conversation and its safety classifications so that you can review them.

How we use data

We use the data above only to:

• Provide the service — routing chats through the safety pipeline and keeping conversation history;
• Give parents review tools — the dashboard where every conversation is visible;
• Send safety alerts — escalating from the dashboard to email, and to SMS for the most serious indicators.

We never sell your data, never use it for advertising, and never use your family's conversations to train AI models.

Children's privacy (COPPA)

Willa is designed around parental control. Children do not create accounts; they use Willa only through profiles their parent creates, and each profile requires parental consent verified by a one-time emailed code. Parents can review their child's data at any time in the dashboard, request its deletion, and revoke consent. Direct any COPPA-related request to willa@willachat.com.

Data retention and deletion

Conversation data is retained while your account is active so you can review it. You can request an export of your family's data, or deletion of some or all of it, at any time by emailing willa@willachat.com.

This website

The willachat.com marketing site sets no cookies and runs no analytics or tracking. The only thing it stores in your browser is a single localStorage flag that remembers you dismissed the cookie banner.

Changes to this policy

If this policy changes, we will post the new version here and update the "Last updated" date at the top of the page.

Contact

Questions, requests, or concerns about privacy:willa@willachat.com.