Privacy Policy

Information We Collect

• Account information: your name, email address, and a securely hashed password when you create an account.
• Purchase information: records of the courses you buy. Payments are processed by Stripe — your card details are entered directly into Stripe's secure payment fields and never touch our servers. We store only Stripe's transaction identifiers.
• Contact form submissions: the name, email, optional phone number, and message you send us.
• Technical information necessary to operate the Website, such as session cookies that keep you signed in.
• Referral information: if you reach the Website through a link we have shared — an email, a social post, a conference handout — we record which campaign it was, and store that alongside any resulting purchase so we can tell which of our own efforts are useful. This is a plain text label such as “newsletter” or “spring-conference”. We do not record your IP address for this, we do not build a profile of you, and it is never sent to an advertising network.

How We Use Your Information

• To provide your account, deliver the courses you purchase, and maintain your access.
• To process payments and refunds through Stripe.
• To respond to your inquiries and provide support.
• To send you service emails such as password resets.

Marketing Email

If you opt in to our newsletter, we will use your email to send course updates, resources, and offers. You can unsubscribe at any time using the link in any newsletter email.

KuzminAAC Communication Board

The Website hosts KuzminAAC, a free communication board for children, parents, caregivers, and speech-language pathologists.

• When you first open the board we ask the supervising adult for a name and email address, and for agreement to the KuzminAAC terms, which you can also read at any time on our KuzminAAC Terms of Use page. We record that agreement, along with basic technical information about your browser.
• Marketing email is a separate, optional question on that same screen, and leaving it unticked does not stop you using the board. Until 6 September 2026 the two were one checkbox — agreeing to the terms also consented to receiving news and promotional email — so people who first used the board before that date agreed to both together. Whichever way you answered, you can unsubscribe at any time using the link on every email we send.
• On each day you open the board we record one return-visit entry: the date, the name and email address given on that first screen, and basic technical information about your browser. This happens whether or not you are signed in. It counts visits — it records nothing about what was done on the board.
• If you submit feedback about the board, we store the feedback, an optional rating, and any name or email you choose to include.
• If you use the board while signed in to your KuzminSLP account, we record daily usage counts (such as how many words were tapped and phrases spoken) linked to your account, so you can view them on your profile. We do not collect these usage statistics for visitors who are not signed in.
• If you use the board while signed in, your board settings and recent sentence history sync to your account so they follow you across devices. For visitors who are not signed in, settings and sentence history are saved only on the device and are not transmitted to us.
• Words and sentences composed on the board are spoken by your own device's built-in speech engine; no audio is sent to us.
• All of the information above is stored in our own database — the same infrastructure as the rest of the Website. It is never sold, and it is shared with no one outside the service providers that run the Website for us, listed under Third-Party Services below, each of which processes it only to provide that service.

KuzminPlay Therapy Games

KuzminPlay is a set of speech-therapy games a speech-language pathologist plays together with a child, and it keeps a record of that practice so the therapist can see how the child is getting on. A child never creates an account, never signs in, and is never asked for their name or any contact details. Everything described below is either entered by the therapist or produced by the child playing a game the therapist chose.

Recording a child's practice is what this tool is for, so this section sets out plainly what is kept, who can see it, and how to have it removed.

• Before a therapist can create a profile for a child, they must confirm that they have the parent or guardian's permission to record practice activity. We keep that confirmation and its date. We do not obtain that permission ourselves — the therapist holds it, and the therapist decides what is recorded. If you are a parent and you do not believe you gave it, ask your therapist first; you can also write to us at info@kuzminslp.com and we will contact them.
• A child profile holds a nickname, an optional age range (such as “3-4”), an animal emoji and a colour, and up to three practice areas the therapist is working on, chosen from a fixed list (for example articulation or fluency). There is no date of birth, no address, no school and no photograph — those fields do not exist, and the age range is a band rather than a birth date. The nickname is an ordinary text box: we ask therapists for a first name or initials only, and tell them so on the screen where profiles are made, but we do not technically prevent them from typing more.
• As a child plays, we store the outcome of each activity: which game, how hard the level was, how much help the child needed, how many answers were right out of how many, how long it took, and when. Depending on the activity the therapist may also record a short practice target in their own words, and clinical detail about how a sound was produced — for example whether it was substituted, left out, distorted, or self-corrected. Together these form a running record of the child's speech practice, which is the point of the tool.
• A per-child settings blob is also stored, so the games look and sound the way that child needs. Besides volumes and motion settings it includes an artwork preference for skin tone and for whether faces are drawn as female or male. These describe the pictures the child is shown, not facts we assert about the child, but a therapist will usually set them to match, so we mention them here rather than leave them unlisted.
• These records are visible to the therapist who created the profile, to a parent or guardian that therapist invites, and to us as the operator of the Website — which in practice means the site's owner and any staff member with access to the internal dashboards, where child nicknames appear. They are never shown to another therapist, never sold, and never used for advertising.
• If a therapist sets up home practice, they invite a parent or guardian by email address. That parent gets a sign-in link or a six-digit code — there is no password to choose — and accepting it creates an account for them on the Website. They can then see the practice activity of the child or children they were invited for, and nothing about anyone else's child. The therapist may add a short line for the family in their own words, which we pass on exactly as written. A parent can ask their therapist to remove their access at any time, or write to us, and can delete their account from their account page.
• There is no advertising, no page-view counting, no visitor analytics and no session recording anywhere inside the KuzminPlay app, and no third-party tracker of any kind runs while a child is playing. The public KuzminPlay information page — the one adults read before signing up — is an ordinary marketing page and does use a Cloudflare bot check on its sign-up form; no child ever sees it.
• The game screens themselves send us no error reports at all. The behind-the-scenes services that save a child's results do report technical faults so we can fix them, and those reports are configured to carry no cookies and no request or response contents. They can still contain the detail of the failure itself, which may include a child's internal profile identifier or a practice target a therapist typed. We use them only to fix faults.
• A therapist can archive a profile, which hides it but keeps its history, or delete it permanently, which removes the profile together with every practice record, assignment, reward and parent invitation attached to it. There is no automatic expiry: a profile that is not deleted is kept indefinitely. We also take a nightly backup of our whole database and keep the most recent thirty, so a deleted record can persist in those backups for up to about a month before ageing out.
• The information lives in our own database and is not shared with anyone outside the child's therapist and the parent they invite. It is handled on our behalf by the service providers that run the Website — the companies that host the site and the database, the storage provider holding our nightly backups, our error-monitoring provider, and the service that delivers our email. Each processes it only to provide that service. The email service handles the messages sent to an invited parent, which contain the child's nickname, any line the therapist wrote, and in the weekly recap how many days were practised and how many stars were earned.
• Two smaller things, for completeness. While a session is open, the child's nickname is stored in a cookie on the therapist's own device so the app does not lose track of who is playing between screens; it is cleared when the browser closes. And one optional check-in, which a therapist can switch on, asks the child by nickname how they are feeling and shows four faces to choose from — the answer is shown to the grown-up in the room and is never recorded or sent to us.

Cookies and Tracking

We do not run third-party advertising or analytics trackers on the Website. There is no Google Analytics, no advertising pixel, and no third-party session recording. Everything described below is stored in our own database.

We count how many times each page is viewed, and which site or campaign a visitor arrived from. Those counts are totals for a day — we do not store your IP address, your device details, or any identifier that could single you out, and there is no record of the individual path any one person took through the site. To avoid counting the same browser twice in a day, we store today's date on your device; it is a date and nothing else, and it cannot tell one visitor from another.

The Website sets a small number of first-party cookies, and no others: one that keeps you signed in; one that remembers which child profile is in use while a KuzminPlay session is open, so a therapist does not have to re-select after every screen; one that lets an administrator preview an unpublished course; and one that remembers which of our campaigns brought you to the site, for up to 90 days, so we can tell which of our own posts, emails and handouts are worth repeating.

None of these cookies follow you to other websites, and none of them are used for advertising. The campaign cookie holds a plain text label and the date it was set — nothing that identifies you. If your browser blocks cookies, everything on the Website continues to work; we simply record the visit as having no known source.

We run no analytics inside KuzminAAC or KuzminPlay: no page-view counting, no visitor tracking, no advertising, and no third-party measurement of any kind. Those are used by children. The only cookie set inside KuzminPlay is the one described above, which keeps track of the child profile in use during a session.

Third-Party Services

We rely on a small number of service providers to operate the Website. Each processes only what it needs to provide its service, under its own privacy policy, and none of them is an advertising or audience-analytics company. We do not sell your information to anyone.

• Stripe — payment processing. Your card details are typed directly into Stripe's own secure fields and never reach our servers. We send Stripe the amount, the currency, identifiers for what is being bought and for your account, any discount code used, and the campaign label described under “Referral information” above.
• Vimeo — video hosting for course lessons. The player loads together with the lesson page, so Vimeo receives your IP address and the fact that a lesson was opened, whether or not you press play. We ask Vimeo not to track viewers.
• YouTube — the optional preview video on a course sales page, in privacy-enhanced mode. Nothing is loaded from YouTube until you click play; if you never press it, your browser never contacts them.
• Cloudflare — the bot check that protects our public forms, and the storage that holds course download files and images. The bot check receives your IP address so it can judge whether a submission is automated. ⚠ It loads when a page carrying a form is drawn, not when you submit, so your browser contacts Cloudflare on those pages even if you never type anything — the home page, the blog and its articles, the resources page, the contact, sign-in, sign-up and password-reset pages, the checkout page when you are not signed in, and the KuzminPlay sign-up and parent sign-in pages. Inside KuzminAAC it loads only if an adult opens the feedback form.
• Sentry — error monitoring, so we learn when something breaks. It receives the technical detail of a fault, and a small sample of ordinary requests for performance measurement: the address requested and the request and response headers. It is configured to receive no cookies and no request or response contents, and nothing at all is reported from a KuzminAAC or KuzminPlay screen. The behind-the-scenes services behind both apps do report faults — the KuzminPlay section above describes what such a report can contain.
• Resend — email delivery. It handles the messages we send you, so it receives the recipient address and the message itself.
• Vercel and Neon — the companies that run the Website and host its database. Everything the Website stores necessarily passes through them.
• Cloudflare R2 and GitHub — a nightly backup of our database is produced by an automated job on GitHub and stored in a private bucket at Cloudflare over an encrypted connection, with the most recent thirty kept. That copy contains everything the Website holds.
• Mailchimp — newsletter list management, used only if we have connected it. When it is connected, a subscriber's email address, first name and a short label for where they signed up are synchronised to it. It is never given course, payment or KuzminPlay information.
• Livestorm — the platform that runs our live webinars, used only for courses delivered live. If you buy one we register you for the session, so Livestorm receives your first name, last name and email address.
• Some book links on our Resources page go to Amazon through a referral link, which means Amazon knows the visit came from us and we may earn a small commission. Nothing is sent until you click one, and we are not told what you go on to browse or buy.
• We do not use Google Analytics, Google Tag Manager, an advertising pixel, a session recorder, or any similar product. Fonts are served from our own servers rather than from a font network, so no font company is contacted to draw a page.

Data Retention and Security

We retain account and purchase records for as long as your account is active or as required for legal and accounting purposes. Passwords are stored using industry-standard hashing, and all traffic to the Website is encrypted (HTTPS). We take a nightly backup of the whole database and keep the most recent thirty, so anything you ask us to delete can survive in those backups for up to about a month before ageing out.

Your Rights

You may request a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and associated data (subject to records we must keep for legal or accounting reasons). Contact us at info@kuzminslp.com for any privacy request.

Children's Privacy

The Website and its course content are intended for adults. A child never creates an account and is never asked for their name or any contact details.

Two parts of the Website are used by children under the supervision of an adult, and both are described in full in their own sections above. In KuzminAAC, the name, email address and consent we record belong to the supervising adult, as does the daily return-visit entry; if the board is used while signed in to a KuzminSLP account, we also store that account's daily usage counts and its most recent sentences, which are composed on the board and may well be composed by the child. Without signing in, what we hold is that adult's consent record and those return-visit entries, and nothing the child taps or says on the board reaches us.

In KuzminPlay, a speech-language pathologist creates a profile for a child and we keep a record of that child's speech practice — a nickname, an optional age range, the practice areas being worked on, and the outcome of each activity. That information is entered by the therapist, or produced by the child playing, and the therapist must confirm they hold the parent or guardian's permission before any of it is recorded. We are not the ones who ask for that permission, and we have no direct relationship with the child.

If you are a parent or guardian and you want to know what is held about your child, or want it corrected or deleted, the fastest route is your child's therapist — they can show you the record and delete the profile outright. You can also write to us at info@kuzminslp.com; because a child's record is held under their therapist's account and we hold nothing linking you to it directly, we will ask you to identify the therapist so we can act on your request without disclosing a child's records to the wrong person.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective when posted on this page.

Contact

Questions about this policy? Email us at info@kuzminslp.com.