Privacy Policy

Last updated: April 10, 2026

Digital Mundo, LLC, a Delaware limited liability company that operates SpeechTherapyMagic (“we,” “us,” or “our”), is the controller of the personal data described in this Privacy Policy. We are committed to protecting your privacy and the privacy of children who use our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at speechtherapymagic.com.

Because our platform is designed for use by children ages 3-12, we take extra care to follow the principles of the Children's Online Privacy Protection Act (COPPA) and implement data minimization practices. Please read this policy carefully.

Information We Collect

Account Information (Adults Only)

When a parent or speech-language pathologist creates an account, we collect: name, email address, password (stored in hashed form), and billing information (processed securely by Stripe and never stored on our servers). This information is collected directly from the adult user and is necessary to provide our services.

Child Profile Information

Child profiles are created by a parent or SLP, never by the child directly. We collect only the minimum information needed: a first name or nickname, age or grade level, and target speech sounds. We do not collect a child's full name, email address, photo, or any other personally identifying information unless voluntarily provided by the parent.

Usage and Progress Data

When a child uses our games, we collect session data including: games played, scores and accuracy, time spent, and target sounds practiced. This data is used solely to provide progress tracking to parents and SLPs and to improve the effectiveness of our games. If speech recording features are used, audio is processed for pronunciation scoring and is not stored permanently unless the parent opts in for session review.

How We Use Your Information

We use the information we collect to:

  • Provide and maintain our services, including game access and progress tracking
  • Generate personalized content (custom stories, word lists, and activities) based on target sounds and age level
  • Allow SLPs to view progress data for students connected to their account
  • Process payments through our payment processor (Stripe)
  • Send account-related communications (password resets, billing notifications)
  • Improve our games and services based on aggregate, anonymized usage patterns

We do not sell personal information. We do not display advertising. We do not use children's data for marketing purposes.

Children's Privacy

We design our platform with children's privacy as a priority, following the principles of the Children's Online Privacy Protection Act (COPPA). Our practices include:

  • Children under 13 never create accounts directly. All accounts are created and managed by a parent or SLP.
  • We collect the minimum amount of information necessary to provide the service.
  • Parents can review, modify, or delete their child's profile and data at any time from their account settings.
  • We do not condition a child's participation on disclosing more personal information than is reasonably necessary.
  • When a parent or legal guardian creates a child or student profile, that action constitutes verifiable parental consent under COPPA for the collection of the minimal information described in this policy (first name or nickname, age or grade level, and practice session data).
  • Parents may request deletion of their child's data at any time by emailing us at hello@speechtherapymagic.com or using our contact form at speechtherapymagic.com/contact. We will fulfill deletion requests within 30 days.
  • We do not share children's personal information with third parties except as necessary to provide the service (e.g., pronunciation scoring APIs).

Data Security

We implement industry-standard security measures to protect your data, including: encryption in transit (TLS/SSL) and at rest, secure password hashing, regular security audits, access controls limiting data access to authorized personnel, and infrastructure hosted on reputable cloud providers with SOC 2 compliance. While no system is 100% secure, we take reasonable steps to protect the information entrusted to us.

Your Rights

You have the right to:

  • Access and review all personal information we hold about you or your child
  • Correct any inaccurate information
  • Delete your account and all associated data at any time
  • Export your child's progress data in a portable format
  • Opt out of non-essential communications
  • Withdraw consent for audio recording features at any time

To exercise any of these rights, contact us using the information below. We will respond to all requests within 30 days.

Third-Party Services

We use limited third-party services to operate our platform: Stripe for payment processing, cloud infrastructure providers for hosting and data storage, speech recognition APIs for pronunciation scoring (audio is processed and not permanently stored by these services), and analytics tools that collect only anonymized, aggregate data. We do not use third-party advertising or social media tracking pixels.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. For significant changes affecting children's data, we will provide direct notice to parents via email and may require renewed consent.

HIPAA & Protected Health Information

SpeechTherapyMagic is not a HIPAA Business Associate and the Service is not a medical record system. Digital Mundo, LLC does not sign Business Associate Agreements (BAAs) and the Service is not designed, marketed, or warranted for use as a clinical record, evaluation tool, or any system that stores Protected Health Information (“PHI”) as defined under the Health Insurance Portability and Accountability Act.

Do not enter PHI into any field on the Service. This includes, but is not limited to: medical diagnoses received from a healthcare provider, treatment plans, evaluation reports, IEP documents, insurance or billing information, prescriptions, or any clinical notes about an identified patient. The free-text fields on the Service (such as nicknames, interests, and character descriptions) are intended for personalization of practice activities only.

If you are a licensed healthcare provider operating in a setting regulated by HIPAA, you are responsible for ensuring that no PHI is entered into or transmitted through the Service. The Service is intended as a supplementary practice tool, not as a substitute for the clinical recordkeeping systems your organization is required to maintain.

Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle personal information, please contact us at:

SpeechTherapyMagic Privacy Team
Email us at hello@speechtherapymagic.com or contact us via our contact form at speechtherapymagic.com/contact.