Draft for legal review. Highlighted items are still to be confirmed.
Privacy Policy
This policy explains what personal information SoundPath collects, why, and how we look after it. SoundPath is used by learners, many of them children, so we keep what we collect to the minimum the program needs. It covers the SoundPath website and app, and is written with the Australian Privacy Principles in mind.
SoundPath is operated by Penny Widdowson, trading as SoundPath Learning (ABN 26 289 980 423). Contact: penny@connectmultisensory.com.au.
What we collect
About you (the parent, carer or teacher)
- Your name and email address, and your password if you don't sign in with Google. Passwords are handled by our sign-in provider; we never see them.
- Your school or family name, and whether your account is for a school or a family.
- That you accepted our sign-up notice, and when.
- Your membership and payment status. Payments are handled by Stripe, which holds your card details; we don't receive them.
- Anything you write in SoundPath, such as notes and reports about a learner.
About learners
- Their first name, and optionally their age and a class ID. We don't ask for a last name or date of birth.
- Their work in SoundPath: answers they type, lesson progress and scores, and the results of placement checks.
- Voice recordings made in lessons, such as a learner saying a sound or reading a word aloud. Recordings are only made when the learner presses record.
- Their reading settings, such as font and display choices.
Learners don't have their own email or password. They sign in with a short-lived code or a link from your account.
How we use it
- To run SoundPath: showing lessons, saving progress, and finding a learner's starting point.
- To show you, and the learner's teacher, how they are going, including letting you listen to their recordings.
- To manage your account and membership, and to contact you about them.
- To support you and fix problems. Our small team (the founder and our developer) can see account and learner information when needed for this.
- To improve lessons, using information about how lessons are used.
We don't sell personal information, use it for advertising, or use learners' recordings to train AI systems.
Who we share it with
We only share personal information with services that help us run SoundPath:
- Google (Firebase and Google Cloud): sign-in, data storage, recordings and hosting of the app.
- Stripe: payments.
- Cloudflare: hosting of this website.
- Google Fonts: our pages load their font from Google, which receives your device's IP address when they do.
We will also share information if the law requires it.
Where it's stored
Account and learner information, including learners' answers and progress, is stored in Australia, in Google Cloud's Melbourne region. Recordings: storage location to be confirmed.
Some processing happens overseas: the parts of SoundPath that run on Google's servers (such as signing in and saving results) run in the United States, and Stripe and Cloudflare may process information outside Australia. We choose providers with strong security and privacy commitments.
Cookies and browser storage
The website sets no cookies and has no analytics or tracking. The app stores your sign-in session and reading settings in your browser so you stay signed in and keep your preferences. We don't use advertising or tracking cookies.
Keeping it safe
Information is sent over encrypted connections and stored with access controls, so each account can only reach its own learners. If a data breach is likely to cause serious harm, we will tell the people affected and, where required, the Office of the Australian Information Commissioner.
How long we keep it
We keep information while your account is open. If you ask us to delete a learner or close your account, we will delete their information, including their recordings. Retention period after closing an account to be confirmed.
Your choices and rights
- You can see and update your learners' details in the app.
- You can ask us for a copy of the information we hold about you or your learners, ask us to correct it, or ask us to delete it, by emailing us.
- You can ask us to delete individual recordings.
Questions and complaints
Email penny@connectmultisensory.com.au and we'll respond within 30 days. If you're not happy with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
We may update this policy. The version and date at the top show when it last changed. For significant changes, we'll tell you by email or in the app.