Privacy Policy

Digital Mundo, LLC, a Delaware limited liability company doing business as SpeechTherapyMagic (“we,” “us,” or “our”), operates the website, applications, and services covered by this Privacy Policy (the “Service”). This policy describes the information we collect, why we use it, and when it may be disclosed.

Information we collect

Adult accounts and business activity

We may collect an adult user's name, email address, hashed password, Google authentication identifiers, account role, organization or practice information, plan and subscription status, billing and transaction records, seller or creator profile, Stripe Connect onboarding and payout status, marketplace purchases and sales, support messages, feedback, and communications preferences. Payment card and bank-account details are handled directly by Stripe rather than stored as raw credentials by us.

Child profiles and practice activity

An adult may enter a child's first name or nickname, age or grade, target sounds, goals, group or assignment information, and other profile or practice details. The Service may also collect games and activities used, responses, scores, accuracy, duration, progress history, generated content, downloads, and the adult's notes or other free text. Please do not enter full names, diagnoses, treatment records, or other identifying clinical information that is not necessary to use the Service.

Voice, AI, and generated content

When pronunciation tools are used, raw audio and expected text are scored by ArticScore, our own pronunciation-scoring engine, which runs on our own servers. Recordings are not sent to a third-party speech-scoring service. We store derived information such as pronunciation scores, phoneme feedback, attempts, and practice history.

OpenAI may process free-text prompts, character descriptions, themes, target sounds, age or grade settings, generated text, text submitted for moderation, and text sent for text-to-speech. Uploads or recordings may also be transmitted to a provider when a feature requires them. Users must not submit protected health information (PHI) or identifying clinical information to these features.

Device, network, and usage information

We and our service providers may collect IP address, browser and device type, operating system, page or route, timestamps, referring page, campaign or attribution parameters, cookie and session identifiers, approximate location derived from IP address, feature interactions, performance information, and error diagnostics. We use cookies, session storage, and local storage for sign-in, security, preferences, feature state, attribution, and analytics.

How we use information

• Operate, personalize, secure, troubleshoot, and improve the Service.
• Provide practice activities, progress history, scoring, AI content, downloads, and text-to-speech.
• Authenticate users and manage accounts, subscriptions, payments, marketplace purchases, sellers, and payouts.
• Respond to support and feedback, send service communications, and investigate misuse or security issues.
• Measure public-site engagement and attribution, and monitor Service performance and product reliability.
• Comply with law and establish, exercise, or defend legal claims.

We do not sell personal information or use children's personal information for behavioral advertising.

Service providers and disclosures

We disclose information to providers when reasonably necessary for their services. Depending on the feature and information a user enters, this can include personal information or child-related practice data. Current provider categories include:

• OpenAI processes prompts, story and character descriptions, themes, text-to-speech text, moderation inputs, and other content used for AI-enabled features.
• Stripe and Stripe Connect process subscription, payment, seller onboarding, payout, tax, and fraud-prevention information.
• Cloudflare, Amazon Web Services, and Laravel Forge support application hosting, delivery, security, and file storage, including the servers that run our pronunciation-scoring engine.
• Resend processes transactional account and service emails as well as adult contact and account context for onboarding and marketing drip emails. Brevo handles contact-form delivery and may process adult contact attributes for configured marketing automation or contact sync, including email, name, plan tier, account role, signup date, and whether the adult account has student profiles.
• Google processes authentication information when an adult chooses Google OAuth.
• PostHog provides analytics only on public marketing, legal, and account-access pages, including automatic page views. It may receive current URL or route, permitted page interactions, referrer and campaign information, device and browser details, IP-derived information, and persistent analytics identifiers. It does not initialize on direct dashboard visits, events from nonmarketing routes are rejected, and session recording is disabled.
• Sentry receives application diagnostics such as error details, page or route, device and browser information, IP address, and related technical context.

External embedded games are displayed through third-party frames or websites. Their hosts, including services such as Replit, may receive IP address, browser and device details, cookies or identifiers, and any information entered directly into the embedded game. Third-party terms and privacy policies apply to those services.

We may also disclose information when required by law, to protect users or the Service, in a business transaction, or at an adult user's direction. See our Subprocessors and Third-Party Services page for more detail.

How long we keep data

We keep personal information only as long as we need it for the purpose we collected it for, and then delete it. These are our timeframes, including for information about children. They are enforced automatically by the Service, not applied by hand.

Practice recordings (voice audio)

A recording is sent to ArticScore, our own scoring engine on our own servers, scored, and deleted as soon as the score is returned. By default no recording is stored.

Recordings kept with consent

We keep a practice recording only when there is a documented consent basis: a parent or guardian's signed media release that specifically allows keeping practice recordings to improve scoring accuracy, or an arrangement we have recorded with a speech-language pathologist who asked us to keep the recordings of the practice they run with their own clients. Recordings kept under a media release are deleted when it is revoked, and recordings kept for a speech-language pathologist are deleted when they ask us to. In every case they are deleted when the child's profile or the account is deleted, and no later than 2 years after the recording was made.

Audio sent to the ArticScore developer API

Never stored. Partner audio is scored and discarded, without exception.

Child profiles and practice history

A child's profile, scores, attempts, progress, target sounds, assignments, stories and word lists made for the child, and deck and game plays are kept while the profile exists, so the adult can follow the child's progress. When an adult deletes a child's profile it disappears from the account at once, and all of that child's data, including any kept recordings, is permanently erased 30 days later. Until then the adult can restore the profile, or choose to erase everything immediately.

Accounts

Kept until the account is deleted. Deleting an account from Settings, or asking us to, immediately erases the account with its child profiles, practice history, recordings, decks, and saved content. What remains afterwards: payment and transaction records that Stripe keeps for tax and accounting, support conversations so they can still be answered, usage and cost records with the link to the account removed, and the consent record described next.

Proof of consent after an account is deleted

We keep a minimal record that consent was given (which document and version, when, and how), identified only by a one-way keyed hash of the email address. It contains no name, email address, or information about a child, and it is deleted 3 years after the account deletion.

Sign-in sessions

A sign-in stops working after 90 days without use, and is then deleted.

Server logs

Application error logs on our servers are kept for 14 days. Error reports sent to Sentry, our error-monitoring provider, expire on Sentry's retention schedule.

Backups

Encrypted backups are kept on a rolling schedule: daily copies for 7 days, weekly copies for 4 weeks, and monthly copies for 6 months, plus daily server snapshots kept for 7 days. Deleted information can remain in a backup for up to about 6 months, until that backup expires. Backups are used only to restore the Service after a failure.

We may keep information longer only where the law requires it, or to resolve a dispute, prevent fraud, or respond to a legal claim while that need lasts.

Security

We use reasonable administrative, technical, and organizational safeguards. No transmission or storage system is completely secure, so we cannot guarantee absolute security.

Access, correction, and deletion requests

Adult account holders, parents, guardians, and authorized organizations may request access to, correction of, or deletion of relevant information by using our contact form at speechtherapymagic.com/contact. We may verify identity and authority, and may retain information where permitted or required by law. Some information can be reviewed or edited within the Service where the applicable controls are available.

HIPAA-regulated workflows

Digital Mundo, LLC does not enter into Business Associate Agreements for the Service. The Service is not intended for a covered entity's or business associate's HIPAA-regulated workflow, and users must not upload or enter PHI or identifying clinical records into the Service.

Changes and contact

We may update this policy and will post the revised date on this page. Questions or privacy requests may be sent through our contact form at speechtherapymagic.com/contact.