1. Who We Are
OpenSpeak AAC is operated by the OpenSpeak AAC Foundation, a 501(c)(3) nonprofit organization registered in Wyoming. Our mission is to provide free communication tools to non-verbal children and their families.
2. Information We Collect
a. Information you provide
- Beta signup form: First name, last name, and email address when you sign up on our website.
- Google Sign-In: If you choose to sign in, we receive your email address, display name, and profile photo from your Google account. This is optional and used only for cloud backup.
- Child profiles: Name, avatar, preferred language, grid size, and voice settings that you create within the app.
b. Information collected automatically
- Usage data: Symbol taps, sentences built, session duration, and category usage. This data powers progress tracking and analytics visible to parents and therapists.
- Device identifier: A locally generated ID (UUID) stored only on your device. This is not tied to your identity and never leaves your phone unless you sign in.
- Communication history: Sentences your child builds and speaks are saved locally for review and progress reports.
c. Information we do NOT collect
We do not use third-party analytics or advertising SDKs. We do not collect location data. We do not record audio or video. ASL detection runs entirely on-device and no camera data is ever transmitted. We do not collect financial or payment information.
3. How We Use Your Information
- To provide and improve the OpenSpeak app and communication tools.
- To sync your child's data across devices when you choose to sign in.
- To generate progress reports for parents, educators, and speech therapists.
- To send you updates about OpenSpeak if you signed up for our beta (you can unsubscribe at any time).
- To improve the app based on aggregate, anonymized usage patterns.
4. Offline-First Design
OpenSpeak works entirely offline by default. All symbols, grammar engines, voice output, and user data are stored locally on your device. No internet connection is required. Cloud sync is optional and only activates when you sign in with Google.
5. Data Storage and Security
- Local data: Stored in an encrypted SQLite database on your device.
- Cloud data: If you sign in, data is stored with row-level security. Each user can only access their own data.
- Authentication tokens: Stored securely using your device's secure keychain (Android Keystore / iOS Keychain).
- PIN protection: Parent mode is protected by a PIN stored as a hash on your device. It is never sent to any server.
6. Third-Party Services
We use the following third-party services:
- Supabase: Cloud database and authentication (only when you sign in). Supabase Privacy Policy
- Google Sign-In: Authentication provider (optional). Google Privacy Policy
- ARASAAC: Symbol images used under Creative Commons license. No user data is shared with ARASAAC.
We do not share, sell, or rent your personal information to any third parties for advertising or marketing purposes.
7. Children's Privacy (COPPA)
OpenSpeak is designed for use by children, including children under 13. We take children's privacy seriously:
- The app is managed by a parent or caregiver through a PIN-protected parent mode.
- Children do not create accounts or provide personal information directly.
- All child data (profiles, communication history, usage) is controlled by the parent or authorized caregiver.
- We do not display advertising to children.
- We do not collect more data than necessary for the app to function.
- Parents can review, download, or delete their child's data at any time by contacting us.
8. Your Rights
- Access your data: View all data stored in the app through the settings and progress screens.
- Delete your data: Delete child profiles and their associated data from within the app. For cloud data deletion, contact us.
- Opt out of cloud sync: Simply don't sign in. The app works fully offline.
- Unsubscribe: Remove yourself from beta communications at any time.
- Data portability: Export your child's communication data through progress reports.
9. Data Retention
Local data remains on your device until you delete it. Cloud data is retained as long as your account is active. If you delete your account, we will remove your cloud data within 30 days. Beta signup information is retained until you unsubscribe.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page and notify users through the app or by email if the changes are significant.