Privacy policy

Last updated:

Dec 28, 2025

Flexspeak Privacy Policy

Effective Date: December 28, 2025

Flexspeak, Inc. (“Flexspeak,” “we,” “us,” or “our”) is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, protect, and retain personal data when you use our websites, applications, and services (collectively, the “Services”).

1. Scope of This Policy

This Privacy Policy applies to all Flexspeak Services.

Some Services, including Flexspeak Studio, are provided to schools, school districts, and other educational institutions under institutional agreements. When Services are used in an educational or school-managed context, Flexspeak processes student data solely on behalf of and under the direction of the contracting institution, and the student-specific provisions described in this policy apply.

Where Services are used directly by individuals or families (including AAC users who access Flexspeak outside of a school setting), Flexspeak acts as a service provider directly to the user, subject to applicable law.

If there is any conflict between the general provisions of this Privacy Policy and provisions governing school-managed educational use, the education-specific provisions control with respect to student data.

2. Definitions

Student Data
Personal data and user-generated content associated with students using Flexspeak in a school-managed or institution-licensed context, including data protected under FERPA.

Professional Users
Educators, clinicians, administrators, or other professionals using Flexspeak for instructional, clinical, or administrative purposes.

3. Information We Collect

3.1 Information You Provide

Depending on how the Services are used, we may process:

  • Account and contact information

  • User profile details

  • User-generated content (e.g., communication boards, symbols, text, audio)

  • Accessibility and configuration settings

  • Progress or usage data to support communication, educational, or therapeutic use

3.2 Automatically Collected Information

  • Device and application performance data

  • Authentication, security, and audit logs

  • Aggregated or de-identified usage metrics necessary to operate and maintain the Services

4. How We Use Personal Data

We use personal data to:

  • Provide, operate, and support the Services

  • Maintain system security and reliability

  • Respond to support requests and communications

  • Meet legal and regulatory obligations

Product Analytics

Flexspeak uses third-party analytics tools, including Mixpanel, to understand how the Services are used and to improve functionality.

Analytics data is collected and processed in an anonymized or de-identified manner and is not used to identify individual users. Analytics are used to understand system performance, feature usage trends, and product reliability.

5. Educational Use and Student Data

When Flexspeak is used in a school-managed or institution-licensed context:

  • Student Data is processed solely to provide educational and assistive communication services

  • Flexspeak does not use Student Data for advertising, marketing, or commercial purposes

  • Flexspeak does not sell Student Data

  • Student Data is not used to train or improve products or services for students

  • Student Data is not used for non-educational research, profiling, or targeted analytics

Any analytics involving Student Data are limited to operational functionality, performance, and reliability, and are conducted only in an aggregated or de-identified form.

Flexspeak acts as a data processor with respect to Student Data and processes such data only in accordance with institutional instructions and applicable law, including FERPA.

6. Minors

Flexspeak’s Services may be used by minors who require AAC or educational supports.

  • When Services are used through a school or educational institution, the institution controls account creation and data use

  • When Services are used directly by families or individuals, parents or guardians are responsible for account management and consent, in accordance with applicable law

7. Sharing of Personal Data

We share personal data only as necessary to provide the Services, including with:

  • Cloud hosting and infrastructure providers

  • Security, authentication, and support vendors

  • AI service providers operating under contractual privacy protections

All service providers are subject to written agreements requiring data protection obligations consistent with this Privacy Policy.

Flexspeak does not sell Student Data.

8. Data Retention and Deletion

Student Data is retained only for as long as necessary to provide educational services or to support the user’s use of the Services.

Upon request from a school or institution, or upon termination of an institutional agreement, Student Data will be securely deleted or de-identified, subject to legal obligations and limited backup retention periods required for disaster recovery.

Data associated with non-educational use is retained in accordance with operational needs, user preferences, and legal requirements.

9. Access, Review, and Deletion Requests

  • For school-managed use, requests to access, review, correct, or delete Student Data must be submitted through the school or contracting institution

  • For direct users, requests may be submitted directly to Flexspeak, subject to verification and applicable law

10. Data Security and Encryption

Flexspeak maintains administrative, technical, and physical safeguards consistent with industry standards.

  • Data is encrypted in transit using TLS

  • Data is encrypted at rest using AES-256

  • Sensitive credentials are encrypted at the application level

  • Flexspeak’s backend infrastructure provider, Supabase, is SOC 2 Type II compliant

Access to personal data is restricted to authorized personnel based on role and necessity.

11. Use of Artificial Intelligence (AI)

Flexspeak may use AI features to provide the Services.

When AI features process user data:

  • Data is processed through a zero data retention workflow

  • Data is not logged, stored, or retained by AI providers

  • Data is not used to train or improve AI models

Flexspeak maintains contractual agreements with AI providers to ensure compliance with applicable privacy and student data protection laws.

12. Legal Compliance

Flexspeak complies with applicable federal, state, and local laws, including FERPA, COPPA, IDEA, and relevant student privacy regulations.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through our Services or other appropriate means.

14. Contact Information

For questions or privacy-related requests, contact:

Flexspeak, Inc.
Email: support@flexspeak.com
Address: 14561 Wakefield St, Westminster, CA 92683
Attn: Data Protection Officer
Website: https://www.flexspeak.com