Subprocessors & Third-Party Services
Last updated: August 6, 2026
Digital Mundo, LLC uses the providers below to operate SpeechTherapyMagic. Whether a provider receives personal information or child-related practice data depends on the feature used and the information entered or generated. This page describes factual service and data categories; it does not promise a particular provider retention period, processing region, certification, contractual addendum, or regulatory status.
SpeechTherapyMagic does not enter into Business Associate Agreements for the Service and must not be used for PHI or HIPAA-regulated workflows. See our Privacy Policy.
| Provider | Purpose | Data categories |
|---|---|---|
| OpenAI | AI content generation, moderation, image generation, and text-to-speech | Prompts, free text, target settings, character and theme descriptions, generated content, moderation inputs, text-to-speech text, and related feature inputs. |
| SpeechAce | Pronunciation analysis and scoring | Raw pronunciation audio, expected text, and technical request information; scores and feedback are returned to the Service. |
| Stripe / Stripe Connect | Subscriptions, payments, seller onboarding, payouts, tax, and fraud prevention | Adult account, billing, transaction, identity-verification, seller, payout, and device or fraud-prevention information. |
| Cloudflare Workers / R2 | Frontend delivery, network security, and object storage | Requests, IP and device information, cookies, generated files and images, and stored application assets. |
| Resend | Transactional account and service email, onboarding, and marketing drip email delivery | Adult recipient email address, first name, plan tier, transactional, onboarding, or drip message content, related account or service context, unsubscribe state, and delivery metadata. |
| Brevo | Marketing automation contact sync and contact form delivery | Adult email, first and last name, plan tier, account role, signup date, whether the adult account has student profiles, contact-form role and message, and delivery metadata. |
| Google OAuth | Optional adult-account authentication | Google account identifier, name, email address, and authentication metadata. |
| Sentry | Error monitoring and application diagnostics | Error and stack information, route or page, IP address, browser, device, and related technical context; submitted values may appear in diagnostic context. |
| DigitalOcean / Laravel Forge | Backend application and database hosting and server management | Account, profile, practice, transaction, support, application-log, and other backend application data. |
| PostHog | Analytics and attribution on public marketing, legal, and account-access pages | Current URL or route, automatic page views and permitted interactions, referrer and campaign parameters, IP-derived information, device and browser details, and persistent analytics identifiers. PostHog does not initialize on direct dashboard visits, events from nonmarketing routes are rejected, and session recording is disabled. |
| Linear | Support, feedback, and issue management | Feedback and support content, contact and account context, attachments if provided, and technical information relevant to an issue. |
| External game hosts, such as Replit | Host and deliver embedded games | IP address, browser and device details, cookies or identifiers, game interactions, and information entered directly into an embedded game. |
Changes to this list
Providers and their functions may change as the Service evolves. We will update this page when the provider list materially changes. Any separate written agreement with an organization controls its applicable notice or objection rights.
Questions
Contact hello@speechtherapymagic.com or use our contact form for questions about a provider or data category.