This page summarizes — in everyday language — how VoiceBloom handles data when your child uses the app. For the full legal text, see our Privacy Policy. If anything below contradicts the full Privacy Policy, the full Privacy Policy controls.
VoiceBloom is an Augmentative and Alternative Communication (AAC) app for children. It is intended to be set up and operated by an adult — a parent, legal guardian, therapist, or organization staff member — on behalf of a child user.
VoiceBloom does not ask children to fill in forms, create accounts, enter their location, or upload anything. Every piece of information about a child is entered by the responsible adult on the adult's account.
When you create a child profile, the following is stored:
That's it. We don't record audio. We don't take photos through the camera. We don't track location. We don't put advertising cookies anywhere in the app. We don't sell any data.
You. Through the Parent tab in the app.
Only if you give them your child's share code from Settings. You can revoke access any time from the Profile Access panel in Settings.
If your child uses VoiceBloom through an organization subscription, the organization administrator and any staff member you've authorized can see your child's progress for the duration of that authorization.
We use a small set of vetted third-party companies (Supabase, Vercel, Stripe, Anthropic, Google Cloud Text-to-Speech, Resend, Sentry, and Google Analytics / Firebase Analytics) to run and improve the app. They are all bound by contracts that limit them to operating VoiceBloom on our behalf. The premium voice option sends the text being spoken to Google to synthesize audio; the default on-device voice sends nothing. See the full subprocessor list.
We use Google Analytics and Firebase Analytics to understand how the app and website are used (for example, which screens are opened, and which features and sign-up steps people use) so we can improve them. This is set up for privacy: advertising is turned off, no advertising identifier is collected, and it does not receive your child's name, your email, or the words your child taps. On the website, analytics only runs after you accept optional cookies, and you can decline with "Essentials only".
At any time you can:
We respond to all data requests within 30 days.
During onboarding you confirmed that you are the parent or legal guardian (or that you are acting under the parent's authorization, if you are a therapist or organization staff member). This consent is logged in our database with a timestamp and the consent method. We can show you that record any time you ask.
The 30-day free trial does not require a credit card. During the trial, the parent or legal guardian establishes verifiable parental consent by creating and signing in to an account they control and confirming, during onboarding, that they are the parent or legal guardian (logged with a timestamp and the consent method, as described above). When you continue on a paid Family or Therapy plan, the payment transaction processed through Stripe adds the "monetary transaction" verification method recognised by COPPA's Rule, 16 CFR § 312.5(b), and the payment record becomes part of the consent audit trail. For Education accounts, consent flows through the FERPA "school official" framework instead, see our FERPA addendum.
You may withdraw your consent at any time. Withdrawing consent results in the deletion of your child's data on the schedules described above.
If we discover we've collected information from a child under 13 without proper parental consent — or if you let us know you didn't realize what was being collected — we will delete that data promptly. Just email info@voicebloom.ca.
If you operate an organization or clinical practice and want to use VoiceBloom for the children in your care:
See our pages for Education and Therapists for more.
Email: info@voicebloom.ca
Privacy Officer: VoiceBloom, a Canadian business. Full operator details available on request.
You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your local data-protection authority.