ONUPA

The short version

ONUPA collects what a story needs and stops there: a first name, an age range, and what you chose to say about a day. It does not ask a child for anything directly, ever.

One family cannot see another's data. That separation is enforced where the data is read, not by a filter the caller could forget to apply.

What is enforced

Strict family isolationEvery read is scoped to your family at the data layer. There is no query that returns another family's story.
You choose what is keptA story can be used once and kept by nobody. What is retained, and for how long, is your setting rather than ours.
Export and deleteYou can take your family's data out and you can ask for it to be deleted. Deletion propagates rather than hiding a row.
Less leaves the buildingWhat is sent to any external service is minimised first. Names and details that a model does not need to do its job are not sent to it.

What will not happen

Your child's data is never sold.
No advertising is targeted using your child's data.
Private family data is not used to train models by default.
No account, profile or identity is created for a child anywhere.

Where to change it

Retention, permissions, exports and deletion all live in one place inside your account, and every permission you gave can be withdrawn from the same row that granted it.

How to delete your account

Trust & Safety Contact