Privacy Policy

This Privacy Policy explains how Little Talker, Inc. (“Little Talker,” “we,” “our,” or “us”) collects, uses, and protects information from users of our web application at littletalker.io (the “Service”).

Operator: Little Talker, Inc., reachable at support@littletalker.io.

By using the Service, you agree to the practices described in this Policy. This Policy is governed by applicable US federal and state law, including the Children's Online Privacy Protection Act (COPPA) and, for California residents, the California Consumer Privacy Act (CCPA).

• Parent account data: email address and hashed password.
• Child profile: first name, age, and gender (optional) — collected with the parent's or legal guardian's consent.
• Usage data: lesson history, exercise results, session duration, and in-app progress.
• Audio data: during speech exercises, audio may be sent to Google Cloud Speech-to-Text for transcription. Audio is used only for the current exercise and is not retained on our servers. Some browsers may transcribe speech locally via the Web Speech API without any server transmission.
• Camera data: when articulation analysis is enabled, video is processed locally in your browser (via MediaPipe) and is never transmitted to our servers.
• Technical data: IP address, browser type, and session cookies — used for security, authentication, and free-trial access control.
• Analytics data: with your consent, anonymized visit statistics collected through a third-party analytics service.
• Payment data: not stored by us. Website payments are processed by Stripe. iOS In-App Purchases are processed by Apple.

• Providing and personalizing access to the Service.
• Tracking your child's lesson progress and generating recommendations.
• Processing speech recognition during exercises.
• Managing subscriptions and payments.
• Providing customer support.
• Detecting and preventing fraud and abuse.
• Improving the Service through aggregated, anonymized statistics (with your consent).

The Service is designed for children ages 3–12 and is used under parental supervision. Accounts are created by a parent or legal guardian. We do not knowingly collect personal information from any child without verifiable parental consent.

A child's personal data — including first name, age, and learning progress — is collected and processed only with the consent of the parent or guardian provided at registration. Parents may review, correct, or delete their child's data at any time by visiting their profile settings or contacting support@littletalker.io.

The demo lesson (no account required) may request microphone and camera access solely to run exercises. No profile is created and no biometric data is stored during a demo session.

If you believe we have inadvertently collected information from a child without proper parental consent, please contact us immediately and we will delete that information promptly.

Account data is stored on secured servers located in the United States. We apply the following safeguards:

• Passwords hashed with bcrypt.
• All data transmitted over HTTPS/TLS.
• Least-privilege access controls on all systems.
• Authentication cookies set with httpOnly and secure flags.

Data is retained for as long as your account is active. You may delete your account and all associated data from your profile settings or by emailing support@littletalker.io.

We do not sell personal data. We may share limited data with the following service providers as required for the Service to function:

• Stripe — website payment processing.
• Apple — In-App Purchase processing in the iOS app.
• Google Cloud Speech-to-Text — speech recognition (audio is transmitted temporarily for transcription and is not retained on our servers).
• Analytics provider — web analytics (only with your cookie consent).
• Law enforcement or government agencies — only when required by applicable law.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data (via profile settings or by email).
• Withdraw consent for data processing at any time.
• Opt out of analytics cookies via the cookie banner or your browser settings.

California residents (CCPA): You have the right to know what personal information we collect, to request deletion, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising your rights.

To exercise any of these rights, contact us at support@littletalker.io.

Strictly necessary cookies:

• access_token, refresh_token — httpOnly session cookies for authentication.

Analytics cookies (with your consent only):

• Third-party analytics cookies for visit counting and Service improvement.

Only the session expiry timestamp (not the token itself) may be stored in localStorage. We do not use advertising cookies.

We may update this Policy from time to time. The current version is always available on this page. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

• Company: Little Talker, Inc.
• Email: support@littletalker.io
• Website: littletalker.io