SpeechLP Privacy Policy

Last Updated: November 10, 2026 Welcome to SpeechLP, operated by SpeechLP Corp. ("SpeechLP," "we," "us," or "our"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and share information when you use our applications, websites, and related services (collectively, the "Services"). Our core philosophy is simple: We do not sell children’s personal data. We use information to provide and improve our speech therapy support services. Our marketing website’s optional advertising and analytics tools are described in Section 4, including how to opt out of disclosures that may constitute a sale or sharing under applicable privacy law.

1. A Special Note on Children's Privacy (COPPA)

SpeechLP is designed for children. We take our responsibilities under the Children’s Online Privacy Protection Act (COPPA) and other applicable children's privacy laws (like GDPR-K and Canada's PIPEDA) very seriously.

• Parental Account Setup and Consent: A parent or guardian creates the account and, by creating it, accepts our Terms of Use and this Privacy Policy before setting up a child’s profile. The parent supplies the child’s profile information and manages the child’s use of the Services. Our current signup process does not include a separate parental identity verification step. Account creation and acceptance of terms should not be understood as a representation that a separate verifiable parental consent procedure has been completed.
• Data We Collect from Children ("Child Data"): With parental consent, we may collect:
  • Profile Information: A child's first name (or nickname), birth month and year (used to determine age), and gender. This is used to personalize the app experience. Where permitted by applicable law and our agreements, information may also be processed to prepare the aggregated, de-identified statistics described in Section 6.
  • Speech and Interaction Data: On web, speech recognition runs on your child’s device using an in-browser model. On iPhone and iPad, the app uses a bundled phoneme model on the device plus Apple’s speech recognition, which may process audio on the device or send it to Apple to transcribe. Apple handles that audio under its own privacy policy. SpeechLP never receives, stores, or shares your child’s voice or video. On iPhone and iPad, a parent may choose to save or share a practice video, which can include the child’s voice and, if the camera is on, their image; it is never sent to us. The only data SpeechLP saves is the practice result (word attempted, sounds recognized, correct or not, timestamp), so you and your child’s assigned SLP can see progress.
• How We Use Child Data: This data is used to:
  • Provide real-time speech analysis and feedback.
  • Track progress (practice results, not audio) within the app for the parent and therapist to review.
  • Prepare the aggregated research statistics described in Section 6, only where permitted by applicable law and our agreements.
• No AI Training: We do not use children’s speech, practice results, or personal information to train or fine-tune AI models. We may publish aggregated, de-identified statistics for research, such as our annual practice data report. Schools, districts and education agencies may opt out of future inclusion of their students’ data in aggregated, de-identified research statistics by contacting shail@speechlp.com. Such information is included only where applicable law and our agreement with the institution permit the necessary processing and use. More restrictive contractual requirements take precedence.
• Third-Party Sharing: We do not share or sell individually identifiable Child Data with any third-party advertisers or data brokers. Data is only shared with essential service providers (e.g., secure cloud hosting) who are contractually bound to protect the data and comply with COPPA.

2. Your Rights as a Parent

As a parent or guardian, you have control over your child's personal information. You have the right to:

1. Review the personal information we have collected from your child.
2. Delete the personal information we have collected from your child.
3. Refuse to permit the further collection or use of your child's information.

To exercise any of these rights, please contact us at shail@speechlp.com. We will respond to your request after verifying your identity as the parent or guardian.

3. Student Data and FERPA

When a school, district, or education agency (an “Educational Institution”) uses SpeechLP or SpeechTherapist.app, information about its students is an education record under the Family Educational Rights and Privacy Act (FERPA), and the following applies:

• School official. We act as a “school official” with a legitimate educational interest, under the direct control of the Educational Institution, and use student data only to provide the services the Educational Institution has requested.
• Statutory Relationship. The Educational Institution retains control over student education records. SpeechLP acts as a service provider to the Educational Institution and will access, use, maintain and disclose student data only as authorized by the Educational Institution and in accordance with applicable law and the applicable agreement. We do not sell student data, use it for targeted advertising, build advertising profiles from it, or use it to train AI models. Research use is limited to the aggregated, de-identified statistics described in Section 6, subject to applicable law, the institution’s agreement and any research opt-out.
• No re-disclosure. We do not disclose student data to anyone other than the Educational Institution and the service providers listed in this policy, each of which is bound by written confidentiality obligations. We disclose it to others only when permitted or required by law, after notifying the Educational Institution unless the law prohibits it.
• Directory information. We do not collect, publish, or disclose directory information.
• Parent and student rights. Requests from parents or eligible students to review or correct education records are directed to the Educational Institution. We help the Educational Institution respond within the timeframes FERPA requires.
• Deletion. When the Educational Institution asks, or when our agreement ends, we delete or return its student data within 60 days and confirm in writing, subject to any retention required by law.
• Security incidents. We notify the Educational Institution without unreasonable delay, and within 72 hours, of any confirmed unauthorized access to its student data.
• COPPA. Where an Educational Institution provides consent on behalf of parents for students under 13, we collect and use that information solely for the educational purpose the Educational Institution authorized and for no other commercial purpose. We keep a written data retention policy and information security program, as COPPA requires.
• HIPAA. Student records held by an Educational Institution are governed by FERPA rather than HIPAA. Where we support a HIPAA covered entity, such as a clinic or a school-based health program billing Medicaid, we sign a Business Associate Agreement and handle that information as protected health information.
• Agreements. We sign student data privacy agreements, including the Student Data Privacy Consortium’s standard agreement, and a HIPAA Business Associate Agreement where applicable. Where an agreement conflicts with this policy, the agreement governs.

4. Information We Collect

We collect information in a few different ways: A. Information You Provide (Parents & Therapists)

• Account Information: When you create an account, we collect your email address and name.
• Payment Information: Subscriptions are processed by third-party payment platforms (like Apple's App Store or Stripe). We do not receive or store your full credit card details.

B. Information Collected to Provide the Service (Child Data)

• Microphone and Camera Access: Our Services require access to your device's microphone (and optionally, camera) to function. We ask for your permission before accessing them.
• Speech Processing: On web, speech audio is processed on your child’s device. On iPhone and iPad, Apple’s speech recognition may receive audio to transcribe it. Audio is never uploaded to, stored by, or shared with SpeechLP. Only the practice results described above are saved.
• Video Processing: If a game uses the camera, video is shown on your device only and is never uploaded to, stored by, or shared with SpeechLP or any of our vendors or partners. On iPhone and iPad, a parent may choose to save or share a practice video; it is never sent to us.

C. Information Collected Automatically (Technical Data)

• Device Information: We collect technical information about your device (e.g., device model, operating system version, IP address) to diagnose bugs and improve compatibility. IP addresses and other technical identifiers may constitute personal information or personal data under applicable law.
• Usage Data: We collect anonymized and aggregated data about how you interact with our Services (e.g., features used, time spent) to understand user behavior and improve the app.
• Cookies and Similar Technologies: Our marketing website (speechlp.com) offers optional advertising and analytics tools from Meta, Google and PostHog to measure website usage and advertising to parents and professionals. These tools may receive online identifiers, IP addresses, browser information and website interactions. Disclosures to advertising providers may constitute a “sale” or “sharing” of personal information for cross-context behavioral advertising under applicable US state privacy laws, even without payment. These website tools do not run inside the SpeechLP app or SpeechTherapist.app, and we do not send them child profiles, practice results or student records. Optional tools remain off until you choose “Allow optional tools.” Choose “Reject optional tools,” use the “Do Not Sell or Share My Personal Information” link in the footer, or enable Global Privacy Control to prevent these disclosures on this browser. You can change your choice at any time using “Privacy choices” in the footer. Essential storage needed to remember your privacy choice remains available. Choices apply to this browser; repeat them on other browsers or devices. For more information about our third-party service providers, contact shail@speechlp.com.

5. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: To run the therapy exercises, track progress, and operate your account.
• To Improve Our Service: To analyze usage data to fix bugs and develop new features. We do not use children’s speech, practice results, or personal information to train or fine-tune AI models.
• To Communicate With You (Parents/Therapists): To send service updates, respond to support requests, and provide information about your account.
• To Process Payments: To manage subscriptions and process payments through our third-party partners.
• To Comply with Legal Obligations: To enforce our terms and comply with legal requirements.

6. How We Share Your Information

We share information only in the following limited circumstances:

• With Service Providers: We use third-party companies for services like secure cloud hosting (e.g., AWS, Google Cloud) and analytics. These providers are vetted, contractually obligated to protect your data, and are compliant with privacy laws (including COPPA).
• For Legal Reasons: We may disclose information if required by law, such as in response to a subpoena or valid legal request.
• With Your Consent: We will not share your personal information in any other way without your explicit consent.
• Research: Where permitted by applicable law and our agreements, we use individual practice results to calculate aggregated research statistics, such as those in our practice data reports. Before publication, we remove direct identifiers and combine results across children, suppressing small groups where needed to reduce the risk of identification. Published statistics are prepared so that a child cannot reasonably be identified; we do not claim that merely removing a name makes underlying individual records irreversibly anonymous. We do not publish or provide external research recipients with underlying identifiable child profiles or individual practice records. Authorized personnel and essential service providers may process underlying records only for the permitted purposes and subject to the safeguards described in this policy. Aggregated statistics that cannot reasonably identify a child may be retained after the underlying account is deleted, as explained in Section 8. Schools, districts and education agencies may opt out of future inclusion of their students’ data in aggregated, de-identified research statistics by contacting shail@speechlp.com. Such information is included only where applicable law and our agreement with the institution permit the necessary processing and use. More restrictive contractual requirements take precedence.

We never sell children’s personal information to advertisers or data brokers. Optional marketing website disclosures and your choices are described in Section 4.

7. Data Security

We take data security seriously. We use industry-standard administrative, technical, and physical safeguards to protect your information from loss, theft, and misuse. This includes using encryption (e.g., SSL/TLS) for data in transit and at rest. However, no system is 100% secure, and we cannot guarantee absolute security.

8. Data Retention and Deletion

We keep personal information only as long as needed to provide the Services, and never indefinitely. A child’s profile (first name or nickname, birth month and year, gender) and practice results are kept while the parent’s account is active and used to run the practice games and show progress to the parent and assigned SLP. Where permitted by applicable law and our agreements, information may also be processed to prepare the aggregated, de-identified statistics described in Section 6. We delete them within 30 days after a parent deletes the account or asks us to; within 60 days after a school, district, or education agency asks us to or its agreement ends; and within 30 days after an account has been inactive for 24 months, after emailing the parent. Backup copies are overwritten within 35 days after deletion. You may request the deletion of your account and all associated personal data at any time by contacting us at shail@speechlp.com. Deletion covers the personal information held by us and by service providers processing it on our behalf; we instruct those providers to delete or return it in accordance with our agreements and applicable law. Any retention required by law is limited to that legal purpose and period. Aggregated research statistics that cannot reasonably identify a child may be retained for research and historical reporting without a fixed end date. Because those statistics are no longer linked to an identifiable child, deleting an account does not remove that child’s contribution from statistics already aggregated or published. Underlying identifiable profiles and practice records remain subject to the deletion periods above.

9. Your Privacy Rights (GDPR, CCPA, PIPEDA)

Depending on your jurisdiction, you may have specific rights regarding your personal data, including:

• Right to Access: Request a copy of the data we hold about you.
• Right to Correction (Rectification): Request that we correct any inaccurate data.
• Right to Deletion (Erasure): Request that we delete your data.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Withdraw Consent: Subject to applicable legal and contractual restrictions, you may withdraw your consent to the collection, use or disclosure of your personal information at any time by contacting us. Please note that withdrawing consent may affect our ability to provide certain features or Services to you or your child.
• Right to Opt Out of Sale or Sharing: You may opt out of marketing website disclosures for targeted or cross-context behavioral advertising using the footer’s “Do Not Sell or Share My Personal Information” link or Global Privacy Control, as described in Section 4.

To exercise these rights, please contact us at our email address below.

10. International Data Transfers

Our company is based in Canada. Your information is stored and processed in the United States. Our team in Canada may access it only to operate and support the Services, under the same safeguards described in this policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have provided one) or by posting a notice in the app before the changes take effect. Your continued use of the Services after such a change constitutes your acceptance of the new policy. However, where required by applicable law, we will obtain any additional consent necessary before implementing changes that materially affect the collection, use or disclosure of personal information.

12. Contact Us and Our Privacy Officer

SpeechLP has designated Shail Silver as its Privacy Officer, responsible for overseeing our privacy practices and responding to inquiries and complaints concerning the handling of personal information. You may contact our Privacy Officer at shail@speechlp.com. If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at: SpeechLP Corp. A subsidiary of ParagraphAI Inc. 6 Eglinton Ave E, Suite 200, Toronto, ON M4P 1A6, Canada Email: shail@speechlp.com

Applicable Privacy and Data Protection Laws

SpeechLP complies with applicable privacy and data protection legislation, including HIPAA and its implementing regulations, where applicable to the Services and the capacity in which SpeechLP processes protected health information.