Product data notice
Wake Up Drawing is an invite-only family app. This notice explains, in practical terms, what the public site and family app store, when OpenAI may be used, and which choices stay with the grown-up.
Version 1.1 · Updated 24 July 2026
The website uses no cookies or behavioural analytics. It stores only your day-or-night theme choice locally in the browser. The public games do not save results or progress. Pricing previews count only feedback you explicitly submit, without an email, visitor identifier or family link.
The family app requires a grown-up sign-in and a valid family invitation; sensitive actions also require the family PIN.
Drawings and approved books are stored locally for offline use and privately in the family cloud library for syncing and backup.
OpenAI is called only after an active grown-up choice. Classic does not send the drawing; Creative sends the approved sprite, and Immersive sends the approved whole drawing.
The public website and private family app are separate services. The public site has no access to family drawings, books, or account data.
Cloudflare provides hosting and security for both areas and therefore processes ordinary technical request and security data. Wake Up Drawing adds no advertising cookies, marketing pixels, or behavioural analytics.
The family app is a closed invited pilot for grown-ups. A grown-up sign-in and valid family invitation are required; access and session data are processed to protect the private family.
A family invitation works once and expires after 15 minutes. The app's essential session cookie is Secure, HttpOnly, and SameSite=Strict. A session expires after 30 days of inactivity and no later than 90 days.
The six-digit family PIN is a second boundary on shared devices. It protects actions including import, settings, AI approval, export, and deletion; it does not replace the grown-up sign-in.
On the device, the family app uses IndexedDB, limited localStorage and sessionStorage, and a service worker. This keeps approved books readable offline and remembers necessary language, device, and workflow choices.
In production, Wake Up Drawing uses OpenAI for story text, safety checks, and optional background images, but only after an active grown-up step. The family owner can disable story generation, and every request requires PIN approval.
Text requests contain the grown-up-confirmed fictional label, allowlisted character traits, structured story choices, language, length, and prose level. Generated text may be sent back for safety, quality, and bounded repair checks. In Classic, image requests contain a structured background scene without the main character; the generated background is then checked for safety and quality.
A raw camera photograph, its surroundings, real name, birthdate, school, address, contact details, and other private child information must not be sent to OpenAI. The app asks the grown-up to confirm this before generation.
Classic sends no drawing to the image model. Creative requires a fresh notice and exact approval of the cleaned metadata-free sprite. Immersive separately requires approval of the exact metadata-free whole drawing and is limited to six pages. Both are optional, separately labelled, owner-enabled for selected profiles, and require grown-up review of the result.
Text requests use store: false. OpenAI states that API data is not used for model training by default unless the customer opts in to data sharing, but default abuse-monitoring logs may retain customer content for up to 30 days. Wake Up Drawing does not claim Zero Data Retention. See the OpenAI API data controls.
For image endpoints, inputs and outputs may appear in abuse-monitoring logs for up to 30 days under the selected standard posture. OpenAI also documents exceptional longer retention of image inputs flagged for a possible policy violation. The image endpoints otherwise keep no application state for this processing.
Application logs and usage records are limited to technical data such as correlation ID, stage, model, duration, token or image count, stable error code, and outcome. They must not contain story or narration text, drawings, generated media, secrets, or raw provider errors.
When an invitation is redeemed, a hash derived from the IP address is used for short-lived rate limiting. The raw IP address is not stored in the app's database.
A grown-up can move individual stories, characters, and files to the bin. They are normally recoverable for seven days before cloud files and database references are permanently deleted.
Unreviewed Creative and Immersive candidates expire after seven days. Rejected, failed, and expired candidate media is deleted within 24 hours. Approved bundles follow the family’s normal backup, bin, and deletion rules.
Only the family owner can delete the whole cloud family. This signs every device out immediately and schedules permanent deletion of cloud data and backups within 24 hours. A receipt containing a hash of the family ID and the outcome may remain for up to 30 additional days.
Offline copies are device-specific. Deleting from the family app clears the current device, but another device that already holds books offline must be cleared separately through the family app's privacy page or the browser's site-data controls.
The service has no child accounts, advertising, public sharing of family stories, stranger contact, web browsing, or behavioural analytics. Games store no scores, attempts, streaks, playtime, or history.
In Classic, the original drawing remains canonical and separate from new backgrounds. Creative is a separate grown-up-approved AI interpretation of the approved sprite. Immersive uses the approved whole drawing to inspire new full-page art. Neither can alter, replace, or automatically become the default Classic drawing.
The grown-up controls cloud storage, access for other grown-ups, which characters the child can see, languages, story generation, image generation, review, export, and deletion. The app records the categories and times a grown-up approves, but not the prompt itself in the data receipt.
The family Shell wallet stores only an opaque profile ID, balance, reservation, product code, catalog version, coarse activity, and time. Provider prices, model details, and the child's raw content are not presented as Shells.
If the family does not want new OpenAI calls, the family owner can disable story generation or simply decline to approve a new story. Already approved local books and the calm games can continue without a new AI call.
For grown-ups
Use of the family app is also covered by the invited pilot terms.
