On this page
1. Who we are
SpeechZoo is a pediatric speech-therapy iOS app operated by Wellnest Group ("SpeechZoo", "we", "us", "our"). Our app is designed for parents of children ages 1-6 who want to support their child's speech development at home. We are not a kids-category app — a parent creates and controls the account, and the child uses the app under parental supervision.
Contact: hello@wellnestgroup.life
2. What we collect
We collect only what's needed to run the app and help your child practice. Here's the full list:
From the parent (account holder)
- Email address — for your account, support, and important service updates.
- Name (optional) — so the app can greet you.
- Parent voice recording (~30 seconds) — used to clone your voice for practice audio. This is biometric data. See Section 4.
- Parent face photo — used (in a future release) to generate a parent-like avatar for video practice. This is also biometric data. See Section 4.
- Device identifiers — iOS device type, OS version, and an internal app-install ID for diagnostics and crash reports. We do not use IDFA or cross-app advertising identifiers.
About the child
- Child's first name (or nickname — your choice).
- Child's age or date of birth — to serve age-appropriate content and milestones.
- Screening answers — your responses to the speech-development screening questions (based on ASHA + REELS milestones).
- Practice session data — which activities were played, time on task, completion, and (if enabled) a short audio sample of your child's attempt for progress tracking.
We do not collect your child's last name, government ID, geolocation, contacts, photos, or browsing history. We do not use behavioral advertising SDKs.
3. Why we collect each piece
| What | Why |
|---|---|
| Parent email | Account login, password reset, service updates. |
| Parent voice (biometric) | Generate your cloned voice so practice audio sounds like mama or papa. |
| Parent face (biometric) | Generate a parent-like avatar for video practice (future feature). |
| Child first name | Personalize the app greeting and activity prompts. |
| Child age | Serve age-appropriate activities and screening questions. |
| Screening answers | Generate a non-diagnostic developmental screening result for the parent. |
| Practice data | Show progress over time and tune activity difficulty. |
| Device identifiers | Crash diagnostics, fraud/abuse prevention, in-app entitlement (subscriptions). |
4. Voice & face (biometric data)
How voice cloning works
When you record your voice in the app, we send the recording to ElevenLabs, Inc., a voice-AI provider, to create a private voice model. That voice model is used to synthesize the practice audio your child hears. You can read ElevenLabs' privacy practices at elevenlabs.io/privacy.
How face avatars work
Face-avatar generation is not active at launch. When we ship it, your face photo will be sent to an avatar-generation provider (currently planned: HeyGen or Hallo2) to produce a parent-like avatar for video practice. We will update this policy and request your explicit opt-in consent before enabling that feature.
Your biometric rights
- You give written consent the first time you record your voice or upload your face — via an in-app consent screen that you must actively tap through.
- You can delete your voice model and your face photo at any time in Settings → Privacy → Delete Biometric Data. Deletion propagates to ElevenLabs (and any future avatar provider) within 30 days.
- We do not sell, lease, or trade your biometric data. Ever.
- We retain biometric data only as long as your account is active, plus up to 90 days after account deletion to complete backend removal. See Section 7.
5. Who we share with
We share only what is necessary to run the app. We never sell your data, and we never share it with advertisers.
| Provider | What they receive | Purpose |
|---|---|---|
| ElevenLabs | Parent voice recording, voice-model ID | Voice cloning and text-to-speech synthesis. |
| HeyGen / Hallo2 (planned) | Parent face photo | Avatar generation. Not active until you opt in. |
| Apple | Subscription receipts, device identifiers | In-app purchase and App Store delivery. |
| Cloudflare | Backend hosting, request logs | Running the backend API and website. |
| Crash / diagnostics | Anonymous crash traces | Fixing bugs. No personal content is included. |
We do not share data with:
- Advertising networks or ad-tech companies
- Data brokers
- Analytics platforms that build behavioral profiles of children
- Social-media SDKs (Facebook, TikTok, etc.) that track users across apps
We may disclose information if required by valid legal process (e.g., subpoena, court order), or to protect the rights, property, or safety of our users. We'll notify you when legally allowed.
6. Children under 13 (COPPA)
Because we collect information about children under 13 (name, age, screening answers, practice data), we comply with the U.S. Children's Online Privacy Protection Act (COPPA).
Data minimization
We collect only first name (or nickname), age, screening answers, and practice activity data. We do not collect last name, home address, school, geolocation, photos of the child's face, or online contact information.
Verifiable Parental Consent (VPC)
Before any information about a child is collected, we obtain consent from the parent via:
- A parent-only account creation flow (the app is not listed in the Kids category on the App Store)
- A subscription payment made through Apple In-App Purchase (credit-card-based consent is a recognized VPC method under COPPA)
- An explicit in-app consent screen describing what we collect before any child information is entered
Parent rights (for a child under 13)
As the parent, you can at any time:
- Review the information we've collected about your child
- Delete your child's information
- Refuse further collection (this will disable most app features — we'll tell you before that happens)
See our COPPA Notice for the full disclosure, or email hello@wellnestgroup.life.
7. How long we keep data
| Data | Retention |
|---|---|
| Parent account info (email, name) | While your account is active, plus up to 30 days after deletion. |
| Parent voice recording + voice model | While your account is active. Deletable on demand. Up to 90 days after deletion to propagate to ElevenLabs. |
| Parent face photo | Until you delete it, or 12 months after last app use, whichever is sooner. |
| Child's name & age | While your account is active. Deletable on demand. |
| Screening answers | While your account is active; used to show progress over time. |
| Practice session data | Up to 24 months; after that, aggregated and stripped of identifiers for product improvement. |
| Diagnostic logs | 90 days. |
To delete your account and all associated data, open Settings → Account → Delete My Account, or email us. We'll confirm deletion within 30 days.
8. Your rights
No matter where you live, you can:
- Access — request a copy of the personal data we hold about you and your child.
- Correct — update information that's wrong.
- Delete — ask us to erase your data.
- Port — receive your data in a portable format (JSON).
- Opt out of non-essential communications (marketing emails).
- Withdraw consent for voice/face biometric processing at any time.
Email hello@wellnestgroup.life with the subject line "Privacy request". We respond within 30 days.
9. California residents (CCPA / CPRA)
If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know — the categories and specific pieces of personal information we've collected about you in the last 12 months, the sources, the purposes, and who we share with.
- Right to delete — ask us to delete your personal information.
- Right to correct — ask us to fix inaccurate information.
- Right to opt out of "sale" or "sharing" — we do not sell or share personal information for cross-context behavioral advertising, and we never will. There's nothing to opt out of.
- Right to limit use of sensitive personal information — biometric data is "sensitive" under CPRA. We only use it for the purpose you consented to (voice/face cloning for your own child's practice) and will not use it for any other purpose.
- Non-discrimination — we won't deny service or charge you more for exercising these rights.
You can also designate an authorized agent to make a request on your behalf. Contact us at hello@wellnestgroup.life.
10. Illinois residents (BIPA)
Illinois' Biometric Information Privacy Act (BIPA) gives you specific rights over biometric identifiers, including voiceprints and facial geometry. SpeechZoo:
- Obtains written consent before collecting your voice recording or face photo (via an in-app consent screen you must actively tap through).
- Does not sell, lease, trade, or otherwise profit from your biometric data.
- Retains biometric data only for the period described in Section 7, and permanently destroys it within the earlier of (a) the initial purpose being satisfied, or (b) three years after your last interaction with SpeechZoo.
- Stores biometric data using industry-standard encryption in transit (TLS) and at rest.
11. International users (GDPR / UK GDPR)
SpeechZoo is currently offered in the United States and English-speaking international markets. If you are in the European Economic Area, the United Kingdom, or Switzerland, the following applies:
- Legal bases: We process your data based on (a) your explicit consent (voice/face biometrics), (b) contract performance (running the app you signed up for), and (c) legitimate interests (security, abuse prevention).
- International transfers: Your data is stored and processed in the United States. We rely on Standard Contractual Clauses for transfers where required.
- Rights: In addition to the rights listed above, you have the right to lodge a complaint with your local data-protection authority.
12. Security
We use industry-standard measures to protect your data:
- TLS 1.2+ encryption for all data in transit
- Encryption at rest for biometric data and account info
- Principle of least privilege for employee access
- Regular backups with encrypted storage
- Third-party providers (ElevenLabs, Cloudflare, Apple) are contractually bound by data-protection agreements
No system is 100% secure. If a breach affecting your personal data occurs, we'll notify you within 72 hours of discovery (or as required by law).
13. Changes to this policy
We may update this policy over time. For material changes (e.g., new data collection, new sharing, new biometric uses), we'll:
- Update the "Last updated" date at the top
- Notify you in-app and/or by email
- For biometric or children's-data changes, ask for fresh consent before the change takes effect
14. Contact us
Questions, requests, or concerns:
- Email: hello@wellnestgroup.life
- Subject line: "Privacy request" (helps us route it faster)
- Mail: Wellnest Group — address to be listed before public launch
We answer every privacy request personally. No bots.