Privacy Policy

1. Who we are

SpeechStep (“SpeechStep”, “we”, “our”, “us”) is a product operated by Mendios Technologies Bangalore Pvt Ltd (the company behind WebMobi). Accounts are held by parents and guardians; children use SpeechStep under their parent’s supervision and account. This policy applies to speechstep.com and the SpeechStep apps.

2. Information we collect

From the parent/guardian

• Email address — to create and secure your account (we use passwordless email one-time codes; we do not store a password).
• Child profile — an optional display name (defaults to “My child”) and, if you provide it, your child’s age in months only (we do not collect a full date of birth).

From your child’s practice

• Voice recordings — only when you have turned on cloud feedback (see §4). By default, practice runs on your device and no audio is sent or stored.
• Practice results — scores, sounds practiced, progress and streaks. These are stored against a random child identifier, not your child’s name.

From our free tools

• If you use a free tool (e.g. the Speech Delay Quiz or Milestone Checker) and choose to get results by email, we collect the email you enter, the child age you provide, and the tool result. This policy explains how we handle that data and how you can delete it.

3. Information we do NOT collect

• We do not use third-party advertising or analytics trackers.
• We do not sell, rent, or trade your or your child’s personal information.
• We do not collect a child’s full date of birth, address, or precise location.

4. Voice recordings & AI feedback

Practice is on-device by default — nothing leaves the device. To give your child spoken-word AI feedback, you can turn on cloud feedback, which you control:

• Cloud feedback (recording consent). Each attempt’s audio is sent securely to our AI scoring service to be analysed, and — because you are signed in — saved to your account so you can review it. We verify this consent on our servers before a recording is stored, and you can turn it off at any time.
• Help improve SpeechStep (training consent). A separate, optional choice. Only if you grant it may a saved recording be used — with clinician review — to improve our scoring models. You can decline this and still use cloud feedback.

You can change or withdraw either choice at any time in your account. Withdrawing stops future use; to remove already-stored recordings, use “Delete recordings” or contact us.

5. How we use information

• To provide practice, scoring, feedback, and progress tracking.
• To create and secure your account and send service messages.
• With your separate consent, to improve our AI scoring models.
• To operate, debug, and protect the service, and to comply with law.

6. Children’s privacy (COPPA)

SpeechStep is designed to be used by a child through a parent/guardian account. We treat children’s data as sensitive and apply extra protections. See our dedicated Children’s Privacy (COPPA) page for what we collect from children, the parental-consent model, and your rights as a parent.

7. How we share information — our providers

We do not sell your data. We use a small set of vetted service providers (subprocessors) to run SpeechStep. They may process data only to provide their service to us:

• Supabase — database, authentication, and file storage (accounts, profiles, recordings).
• Hugging Face — hosts our AI pronunciation-scoring model (receives audio for cloud feedback).
• Vercel — website and application hosting.
• Amazon Web Services (AWS) — planned, for our machine-learning data and model infrastructure.

We may also disclose information if required by law, or to protect rights, safety, and the integrity of the service.

8. Data security

We protect data with encryption in transit and at rest, strict per-account access controls (row-level security), a private recordings store that is not publicly accessible, and passwordless sign-in. Details are on our Security page.

9. Data retention

We keep your account data while your account is active. Recordings are retained until you delete them or close your account. Practice results are retained to show progress. We are rolling out automatic time-based deletion of recordings that are not needed; until then you can delete recordings at any time.

10. Your rights & choices

Depending on where you live, you may have rights under laws such as the GDPR (EU/UK), CCPA (California), and DPDP (India) — including to access, correct, delete, or export your data, and to withdraw consent. Parents may exercise these on their child’s behalf. You can:

• Manage consent and delete recordings in your account.
• Email privacy@webmobi.com to request access, deletion of your account and associated data, or a copy of your data. We respond to verified requests within 30 days (or sooner where required by law).

11. International data transfers

SpeechStep is operated by an India-based entity and uses providers that may process data in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

12. Cookies

We use only essential cookies needed to sign you in and keep your session secure. We do not use advertising or third-party analytics cookies.

13. Changes to this policy

We may update this policy. We will change the “Last updated” date above and, for material changes, notify you by email or in the app. Continued use after an update means you accept the revised policy.

14. Contact us

Privacy questions: privacy@webmobi.com. General support: support@webmobi.com.