Children's privacy

A child is never a user

There is no child login on Articarry. A child has no password, no email on file, no session of their own. A child practices inside their guardian's signed-in session. The guardian is the account holder, and the guardian is the only party who interacts with us by entering credentials. The first name a clinician enters for the child is the only child-identifying string Articarry stores.

Consent comes from the guardian

Before any audio is recorded, the guardian must read and sign a consent page that names exactly what gets recorded (short voice clips during the practice activities the clinician has assigned) and what those clips are used for (the clinician's review, and the operations that keep the service running). Articarry using the recordings to build the product is a SEPARATE, optional permission that a guardian can decline with no effect on anything. The consent is per enrollment, versioned, signed, and revocable at any time. After a guardian revokes, the server refuses any new recording creation for that child: the consent gate is enforced server-side, not just in the UI.

What is collected, and why

• The child's first name, so the guardian and clinician can tell their list of children apart. Articarry does not ask for a last name.
• The child's date of birth, used only as an age band for the clinician's planning.
• Short audio recordings from the practice activities the clinician has assigned. Used by the clinician to read what happened between sessions, and by Articarry itself to debug the upload + scoring path and to manually review a recording that a clinician or guardian has flagged. That is the full list, unless a guardian separately gives the optional permission described below. Recordings are never used to train any model, ours or anyone else's, without that permission; they are not shared with any third party; they are not resold. The consent a guardian reads at signup states all of this before any audio is recorded.

Articarry does not collect a child's address, school name, face data, location, or device identifiers. The practice surface uses only the device microphone, and only while the child has the recorder open.

No clinical claims

Articarry does not diagnose. Articarry does not treat. The product surfaces a record of practice: when it happened, what was practiced, what the scoring engine heard. A clinician reads that record using their own training and tools. The no-clinical-claims posture is a compile-time rule in the codebase, not a policy: a lexicon scanner blocks the words a diagnostic claim would require from every template before it can be deployed.

How a family takes it back

A guardian can remove a child or their entire account from the account page. It disappears from the product straight away, stays recoverable by you for a while in case you change your mind, and is permanently removed no later than 180 days. Ask us and we do it sooner, and confirm in writing when it is done. The audit log records that a deletion happened; the data itself is gone.

A school district or pediatrician can request a deletion on a guardian's behalf by emailing privacy@articarry.com. We acknowledge in writing and confirm with the guardian on file before acting.

COPPA and HIPAA posture

Articarry treats a child's voice recordings as protected information whether or not COPPA or HIPAA applies to a particular deployment. Both of those laws are addressed directly rather than by posture:

• HIPAA. Where a practice is a covered entity and Articarry handles protected health information for them, Articarry acts as their business associate and offers a business associate agreement, which a clinician reads and accepts when they create their account. Every part of the platform that touches a child's audio (storage, database, application, and the speech-scoring service) runs with Microsoft under a business associate agreement, in one United States region.
• COPPA. A guardian reads a direct notice and gives consent before any audio is recorded, and that consent is versioned, signed, and withdrawable. The list of companies that ever touch the data is short, published, and current.

How we ask a parent, and how you take it back

The consent a guardian signs names exactly what is collected, who receives it, why, how long it is kept, and when it ends. It is signed by typing a name from an account the clinician invited by email, and the version of the text, the signature, and the timestamp are stored with it, so what a family agreed to is always recoverable rather than a matter of memory.

Withdrawing it takes two clicks from your account page, needs no reason, and stops recording at the server rather than in the interface. A second, entirely optional permission (letting Articarry's own team listen while working on the product) is asked for separately, is off unless you tick it, and can be withdrawn on its own. Nothing about your child's practice depends on it.