Early access —not a medical, clinical, or emergency tool. For emergencies, call your doctor or 911. Learn more →
Data protection
Two lists tell the whole story: what stays on your device, and the little we hold so your account works. There is no third list.
These are created and stored on the family’s device. We do not collect them, we cannot read them, and no consent setting changes that. Custom text about your child never leaves the device.
Email and a hashed password. Deleted when you delete the account.
A dated record of what you agreed to — that record is the point.
How many credits your account holds. Numbers, no content.
When you invite a therapist, suggestions travel as encrypted envelopes we cannot open. Undelivered envelopes are dropped after 72 hours; delivered ones are deleted on receipt.
Boards, photos, recordings, history — yours to take, anytime, even if your plan has lapsed. Payment gates the service, never your family’s data.
Deleting a profile destroys its keys — the data becomes unreadable, permanently. We always offer archiving first so a tired tap can’t erase a child’s history.
SonSpeak is designed around children’s-privacy law from the ground up: the operator does not collect children’s personal information. The child’s content — photos and voice recordings included — is created and stored on the family’s device under keys we do not possess.
Parental-consent records exist so that you hold the record of what you agreed to. Voice recordings are treated as the most sensitive class of data there is: they never leave the device, and no AI ever generates or receives your child’s voice.
Write to us and a human answers. See also Security and our privacy promise.
hello@sonspeak.com