What we collect, and what we don't.

Last updated 28 July 2026. Watima is operated by DataBeeper LLC.

This device is used by children. That makes the honest version of this document short, specific, and free of the phrase "may include". Below is everything that leaves your home, how long it survives, and how to destroy it.

The short version

The audio is never stored. Your child's voice is sent to our service, transcribed, and discarded. There is no recording to play back — not for you, not for us, not for anyone who compels us.
The text is kept only as long as you choose. The default is one day.
Nothing your child says trains anyone's AI. We use Google Cloud's Vertex AI under commercial terms that exclude your data from model training.
We do not sell or share personal information, and we run no advertising.

What we collect

From the parent

When you sign in with Google we receive your name, email address and Google account identifier. We do not receive or store your Google password. We keep your email in order to identify your account and to send you the two service emails described below.

From the child, through the device

When your child holds the button and speaks, the device sends the recorded audio to our service over an encrypted connection. We convert it to text, generate an answer, and speak that answer back. The audio itself is discarded and never written to storage.

What can be retained is the text of the question and the text of the answer, together with the device identifier and a timestamp. Whether that happens at all is a setting you control:

Off — nothing is written. No history exists to read or delete.
Session (default) — kept for one day, so a follow-up question makes sense in context.
Persistent — kept for 30 days, so you can read back a week of what your child has been wondering about.

Retention is enforced by the database itself, not by a promise in this document: every stored turn carries an expiry timestamp and is deleted automatically when it passes.

Operational data

We record the number of tokens each question consumed, request timing, error rates and audio lengths, so we can bill correctly and keep the service working. Our server logs deliberately record lengths and latencies, never content — no question or answer text is written to our logging system.

Who else sees it

Google Cloud (Vertex AI) — processes the audio and generates the answer. We use the paid, commercial surface specifically because its terms do not permit using submitted content to improve Google's products, unlike the free developer tier.
Google Firebase — hosting, sign-in and the database, all within the same Google Cloud project.
Cloudflare — our domain, and the delivery of email we send you.

These are service providers acting on our instructions. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not disclose it to data brokers.

Children's privacy

Watima is intended for children roughly aged 5 to 11, and is set up and controlled by a parent or guardian. A device answers nothing until an adult has created an account and paired it — an unpaired device is inert by design, so no child's speech reaches us before an adult has acted.

The parent who pairs the device holds every control described here: reading the history, changing how long it is kept, erasing it, and releasing the device. If you believe a child has used Watima without a parent's involvement, email us and we will delete the associated data.

Your controls

Read everything. The parent dashboard shows every stored question and answer for each of your devices.
Delete everything. One action clears a device's history immediately. It is a real deletion, not a hidden flag.
Stop collection entirely. Set memory to Off and nothing further is written.
Delete your account. Email us and we will remove your account, your devices and all associated history.

Depending on where you live you may also have rights to access, correct, port or restrict processing of your personal information, and to complain to a supervisory authority. Email us and we will act on any such request.

Email we send you

If you reserve a place, you will receive an email confirming it, one when we set the final price, and one before the first run ships. That is the whole list. We do not run a marketing newsletter, and every email we send can be unsubscribed from.

Security

Traffic between the device, your browser and our service is encrypted in transit. Each device authenticates with its own credential rather than a shared key, so one device cannot read another family's history. Access to stored data is denied to all clients by default and mediated only through our authenticated API.

No system is perfect. If you find a security problem, please tell us at the address below before telling anyone else, and we will fix it.

Changes

If we change this policy in a way that materially affects what we collect or how long we keep it, we will email you rather than quietly updating this page.

Contact

DataBeeper LLC — hello@askwatima.com

A note on where this document stands. Watima has not shipped. This policy describes the system as it is actually built today, and it will be reviewed by counsel — and a postal address added — before the first device reaches a child. If anything here is ever contradicted by what the product does, the product is wrong and we will fix the product.