Privacy and Security

We believe that trust, transparency, and child safety are at the heart of educational technology.

This page explains how Chatter Labs Speech and Language Games protects your data and your learners’ information under the world’s leading privacy frameworks.

Is Chatter Labs safe and appropriate for my child?

Chatter Labs Speech and Language Games is a simple, child-friendly app made for ages 3–12, especially kids who need extra help with speech and language. All words, pictures, and activities are created by licensed Speech-Language Pathologists—there are no ads, no chatting, no outside links, and nothing your child can upload or share.

The games focus on early literacy, sound awareness, vocabulary, and articulation. Every activity is short, predictable, and visually supported to help young children stay calm and successful.

Parents stay fully in control. Only adults can create accounts, adjust settings, make purchases, or turn on optional voice-processing features for articulation games. All data stays private and secure, and the app is COPPA compliant with clear consent options.

Designed for ethical, positive engagement and confidence-building, Chatter Labs offers a gentle, structured learning space that helps children practice communication skills in a fun, stress-free way.

Read the full Age Suitability Details

How does Chatter Labs protect user data?

We use bank-level enterprise-grade encryption standards (AES-256) for settings and game logs. We do not send data to third-party, all data is encrypted and saved on your own device. Most games do not require third-party processing though using specifically articulation games which use speech analysis for game interactinos requires parental consent, opt-in and a subscription to comply with privacy laws. Audio recordings are encrypted in transit and deleted immediately once processed. We do not do any device fingerprinting or cross-site advertising cookies.

Yes. Chatter Labs follows the requirements of both the EU General Data Protection Regulation (GDPR) and the UK GDPR, including:

Data minimization: We collect only what’s needed to deliver the service.
Legal bases: Primarily “legitimate interest” for core operations and “consent” for advanced analytics for articulatioon games.
Data subject rights: Access, deletion, portability, and objection rights are available in your profile settings.
Retention: Personal data auto-deletes after 90 days unless an account remains active.

If you’re an EU or UK resident, you can contact our Data Protection Office (DPO) for any GDPR-related requests.

How does Chatter Labs tablet app comply with COPPA?

The Children’s Online Privacy Protection Act (COPPA) is a US law that protects children under 13. Chatter Labs complies with COPPA by:

Requiring verified adult accounts (parents, teachers, SLPs) before children use any features,
Processing only the minimum information necessary to deliver real-time pronunciation feedback,
Not storing, sharing, or selling any data,
Providing parents with the right to review or delete any data processed.

We work with licensed professionals who must obtain parental consent before using the product with children.

What about Chatter Labs tablet app FERPA compliance for US schools?

Yes - Chatter Labs supports FERPA (Family Educational Rights and Privacy Act) compliance.

When used in educational settings:

Schools act as the data controller.
Chatter Labs acts as a school official / data processor under a written Data Processing Agreement (DPA).
Student data is used solely for educational purposes. We never collect advertising or profiling data.

Schools can request a signed FERPA Data Processing Addendum (DPA).

What about Chatter Labs tablet app HIPAA compliance for clinics?

Health Insurance Portability and Accountability Act of 1996 (HIPAA) applies when individually identifiable information is created or used as part of providing or paying for healthcare. Our platform is designed for educational use and does not collect or store protected health information (PHI). We allow only limited, non-medical identifiers (e.g., first name and gameplay results).

As such, use of the Chatter Labs Games tablet application does not constitute a Business Associate relationship under HIPAA. Clinics remain responsible for ensuring that no PHI is entered into the system. Although a clinic is a covered entity under HIPAA, but using our tool for a non-clinical educational function which does not store or collect PHI then our solution is outside of the HIPAA scope.

Who are your Chatter Labs tablet app subprocessors and where is data stored?

User data for Chatter Labs Games tablet app is stored on tablet but for articulation games specifically where a subscription, acceptance of terms and conditionos and opt-in is required:

Microsoft Azure (EU/UK region) – real-time speech analysis

You can view our full vendor and subprocessor list for details on regions, purposes, and safeguards.

How long do you retain data in Chatter Labs Games tablet app?

Data Type	Retention	Purpose
Anonymous session data	30 days	Maintain consistent user experience, retain encrypted settings only
Game logs and progress	Until app or data deletion	Support, debugging, and product improvement
User accounts	Until deletion	Service delivery

All data is automatically deleted or anonymized when no longer required.

How can I make a privacy or data request?

If you’re using our tablet app, you can also directly export or delete your information directly from the settings page.

If you have any questions, we’d be happy to answer any privacy and security questions.

How often do you review your security and privacy practices?

We perform:

Quarterly security and privacy reviews,
Annual GDPR audits, and
Triggered reviews when adding new features or vendors.

Each review is documented and signed off internally as part of our privacy and security review process.

Summary

No advertising, profiling, or tracking of children.
Opt-in and parental coonsent gated real-time voice processing only, no recordings kept.
Encryption of data at rest
Parental consent and professional oversight always required.
Transparent subprocessors and audit schedule.