Privacy & data

Where your data lives

All practice data, child profiles, recordings, and reports are stored on Australian-hosted infrastructure. Database access is protected by row-level security so clinicians can only ever see clients they're assigned to.

Audio recordings

Recordings sit in private storage with time-limited signed URLs. Even if a link leaks, it expires within minutes. Recordings are sent to our transcription provider for the sole purpose of generating a pronunciation score. They are never used to train third-party models.

What clinicians can see

• Clinicians see only the clients assigned to them.
• Practice owners see every client in the practice.
• No clinician outside your practice ever sees any of your data.
• Children's identifiers (last names, DOBs) are kept separate from clinical content where possible.

Exporting your data

1. 1Practice owners: Settings → Data export → 'Request export'.
2. 2Parents: contact your clinician, who can request an export on your child's behalf.
3. 3We email a download link within 24 hours. The link expires after 7 days.

Deleting your data

Cancelling a subscription puts the practice into a 30-day read-only window. After 30 days all data is permanently deleted. Parents can request earlier deletion of their child's data by emailing support@phonicspath.app.