SpeechStarsSpeechStars Privacy Policy
SpeechStars is a speech-practice app for children aged 2–12, set up and managed by a parent or guardian. This policy explains what we collect, why, who processes it for us, how long we keep it, and how you can delete it. It also serves as our notice to parents under the Children's Online Privacy Protection Act (COPPA).
Summary
Who We Are
SpeechStars is operated by Veloptix, Methuen, Massachusetts, USA. For any privacy question or request, email aleem.rz@gmail.com. We reply within 5 business days.
What We Collect and Why
| Data | Why | Where it's kept |
|---|---|---|
| Parent account: email address or Sign in with Apple identifier, and an account ID | Sign-in, and keeping your child's progress across devices | Google Firebase Authentication |
| Parental consent record: when you confirmed you are the parent or guardian, the verification method, the policy version, and your AI and SLP-sharing choices | To record your consent and honour your choices | On the device and in Google Firebase |
| Child profile: first name or nickname, date of birth, avatar colour, and the speech areas you select | Personalising practice and choosing age-appropriate exercises | Google Firebase Firestore |
| Practice data: words attempted, the text recognised from each attempt, accuracy scores, sound mastery, session length, XP, streaks and badges | Scoring, progress charts and reports for you | Google Firebase Firestore |
| SLP account data (only for speech-language pathologists who sign up): name, credentials, licence number, clinic name, and assigned practice | Running the SLP portal | Google Firebase Firestore |
| Device push token | Delivering notifications you have turned on | Google Firebase Cloud Messaging |
| App settings: reminder times, practice limits, preferences. Your parental PIN is kept in the device Keychain. | Making the app work the way you set it | On the device only |
We do not collect location, contacts, photos, advertising identifiers or browsing history. We do not use third-party analytics or advertising SDKs.
Microphone and Speech
When your child practises, the app listens through the microphone and uses Apple's speech recognition on the device to turn the attempt into text. The app is set to require on-device recognition, so audio is not sent to Apple's servers or to us. If on-device recognition isn't available, the attempt isn't scored. Audio is never saved or uploaded. The recognised text and the score are saved to your account as practice data (see above).
You can turn off microphone access at any time in iPhone Settings → Privacy & Security → Microphone.
Camera and Face Data (Mirror Mode)
The optional Mirror Mode uses the front camera and Apple's ARKit face tracking to measure mouth and jaw movement as numbers. These numbers are processed in memory on the device only, are discarded when the screen closes, and are never saved, uploaded or shared. We never capture photos or video of your child.
AI Coach Messages (Google Gemini)
Aria, the in-app coach, can write encouraging messages and practice notes using Google's Gemini models through Google Cloud Vertex AI. This is off by default and only runs if a parent turns on "AI coach messages" during setup or later in Parental Controls → Privacy Choices.
When it's on, our server sends Google only de-identified practice context: an age band, the target sound, practice scores, the word the speech recognizer heard when an attempt was missed, and your child's typed or spoken replies in the picture-talk game. Names and other personal details are removed from these before they are sent. We do not send your child's name, exact age, date of birth, speech diagnosis, account details or audio. Your child's name is added to the message on the device after the reply comes back. Without AI, Aria uses built-in messages and every practice feature still works.
AI messages are for encouragement only. They are not diagnosis, treatment or clinical advice.
Who Processes Data for Us
We use these service providers only to run SpeechStars. They process data on our instructions and may not use it for their own purposes.
- Google (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging): sign-in, data storage, our server functions, and notifications. Data is stored in the United States.
- Google (Vertex AI, Gemini models): AI coach messages, only if you turn them on, using the de-identified data described above.
- Apple: Sign in with Apple, on-device speech recognition, App Store purchases and subscriptions. We never see your payment details.
We share your child's information with a speech-language pathologist only if you turn on "Share with an SLP" and choose to send a report. Shared reports include your child's first name and age. Once you share a report outside the app, the recipient's own privacy practices apply.
We do not sell or rent personal information, and we do not share it for advertising. We may disclose information if the law requires it.
How Long We Keep Data
- Account, child profile and practice data are kept while the account exists, so you can see progress over time.
- When you delete your account, we delete the account, every child profile and all practice history from our systems. Backups are overwritten within 30 days.
- Accounts with no sign-in for 24 months are deleted, together with their child data.
- Data sent to Google Vertex AI for AI messages is processed to produce a reply and is not kept by us.
- Data stored only on the device is removed when you delete the app.
How to Delete Data
- In the app: Settings → Privacy & Security → Delete Account. This permanently deletes your account and all child data.
- By email: write to aleem.rz@gmail.com from your account email (or tell us your Sign in with Apple email). We'll confirm and delete within 30 days.
- Deleting the app alone does not delete the data stored in your account. Use Delete Account to remove it.
As a parent you can, at any time: review the information we hold about your child; ask us to delete it; and refuse further collection or use, by turning off features or deleting the account. We will not require a child to share more information than is reasonably necessary to take part. To make a request, email aleem.rz@gmail.com. Operator: Veloptix, Methuen, MA, USA.
Security
Data is encrypted in transit (HTTPS) and at rest in Google Cloud. Access is limited to the signed-in account owner by database security rules. The parent area is protected by a PIN and Face ID, and purchases, external links and sharing in the app are behind a grown-up check.
Your Rights (GDPR, UK GDPR, US State Laws)
Depending on where you live, you may have the right to access, correct, export or delete your and your child's data, to object to or restrict processing, and to withdraw consent. Where GDPR applies, our legal bases are consent (child data, AI features, SLP sharing) and performance of our contract with you (the parent account). You can also complain to your local data protection authority. To exercise any right, email aleem.rz@gmail.com.
Not a Medical Service
SpeechStars is a practice tool. It is a supplement to, not a replacement for, care from a licensed speech-language pathologist, and it does not diagnose or treat any condition.
Changes to This Policy
If we make a material change, we'll update the policy version above and ask you to review it and give consent again in the app before the change applies to your child's data.
Privacy Questions?
Contact Veloptix about anything in this policy or about your child's data.
aleem.rz@gmail.com