VoiceBloom is committed to protecting your privacy. This page explains your rights under Canadian and international privacy law, and how to exercise them.
Your rights under PIPEDA
Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) gives you the following rights over your personal information:
- Right to know: You have the right to know what personal information we collect, why we collect it, and how it is used
- Right to access: You can request a copy of all personal data we hold about you and your children
- Right to correct: You can ask us to correct any inaccurate or incomplete information
- Right to withdraw consent: You can withdraw your consent for data collection at any time, though this may affect our ability to provide the service
- Right to complain: If you believe your privacy rights have been violated, you can file a complaint with the Office of the Privacy Commissioner of Canada
Additional rights under GDPR
If you are in the European Economic Area (EEA) or the United Kingdom, you also have:
- Right to erasure: Request the permanent deletion of your personal data
- Right to portability: Receive your data in a structured, machine-readable format
- Right to restrict processing: Ask us to limit how we use your data
- Right to object: Object to processing based on legitimate interests
Additional rights under CCPA
If you are a California resident, you have:
- Right to know: What personal information we collect and how it is used
- Right to delete: Request deletion of your personal information
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights
- Right to opt out of sale: VoiceBloom does not sell personal information, so this right is automatically satisfied
How to exercise your rights
Download your data
Export all of your personal data as a JSON file. This includes your profile, subscription, all child profiles, session data, symbol taps, weekly reports, billing events, and consent records.
Go to account settings
Delete your account
Permanently delete your account and all associated data. This cancels any active subscription, removes all child profiles, session history, reports, and consent records. This action cannot be undone.
Go to account settings
Contact us for other requests
For data corrections, access requests, objections, or any other privacy-related inquiry, email our Privacy Officer. We respond to all requests within 30 days.
Email info@voicebloom.ca
Parental consent
VoiceBloom requires express parental consent before collecting any child data. During onboarding, we ask you to confirm that you are the parent or legal guardian and that you consent to data collection for the purpose of providing the service.
You can withdraw consent for your child's data at any time by deleting the child's profile or your entire account. See our Privacy Policy for full details.
How we protect your data
- All data encrypted in transit (TLS 1.2+) and at rest
- Row Level Security on every database table — users can only access their own data
- API keys stored in environment variables, never in client-side code
- Payment data handled entirely by Stripe (PCI DSS Level 1)
- Infrastructure providers hold SOC 2 Type II certifications
- Comprehensive data breach response plan in place
For full technical details, see our Security and Compliance page.
Related policies