SayPlay

Last updated: 2026-05-17

Privacy Policy

The short version: SayPlay does not collect, transmit, or store your data anywhere outside your phone.

Plain-language summary

SayPlay is designed to be a private, on-device speech development tracker. All audio recording, speech recognition, vocabulary analysis, and milestone tracking happens locally on your iPhone or iPad. Nothing is uploaded. We do not operate any servers that receive your data. We do not use analytics, advertising, tracking pixels, or any third-party SDKs that send data off the device.

We don't have an account system. We don't collect your email unless you write to us. We have no way to identify, profile, or follow you.

1. Who we are

SayPlay is published by Aranyo Ray (“we”, “us”). Contact: inclusiveheart.us@gmail.com.

2. Information SayPlay processes on your device

When you use SayPlay, the following information is created and stored locally in the app's sandbox on your device. It never leaves the device:

  • Child profile data: the name (or nickname) and birth date you enter, plus your home-language selection.
  • Audio recordings: short clips captured during recording sessions and Play activities. By default, only short utterance clips referenced by the Sticker Book / First Word celebrations are retained; older clips are pruned automatically after 30 days or 250 MB.
  • Transcripts: produced on-device using Apple's SFSpeechRecognizer with on-device recognition required. If your device does not have on-device dictation installed for the selected language, SayPlay refuses to start a session rather than falling back to network recognition.
  • Vocabulary, milestones, sessions, stickers: derived locally from your sessions.
  • Voice enrollment fingerprints (optional): if you enroll your child's voice, a compact spectral fingerprint computed locally is stored to filter non-target speakers from later sessions.
  • App preferences stored in UserDefaults: feature flags, current profile ID, locale picker state.

3. Information we do not collect

  • No analytics. No crash-reporting SDKs.
  • No advertising identifiers. No App Tracking Transparency prompt (because we don't track).
  • No account, email address, or password.
  • No location data.
  • No contacts, calendar, photos, or other system data.
  • No third-party SDKs. The app bundle contains no Firebase, Sentry, Mixpanel, Crashlytics, Segment, Amplitude, AppsFlyer, Adjust, Branch, Facebook SDK, or similar.

4. Permissions SayPlay asks for

  • Microphone: required to record sessions. Audio is held only in memory and (optionally) short clips written to the app's local Documents directory. Never uploaded.
  • Speech Recognition: required to transcribe utterances on-device. Apple's framework runs the model locally; SayPlay sets requiresOnDeviceRecognition = true and refuses to start otherwise.

SayPlay does not request access to your camera, photo library, location, contacts, calendar, health, motion, or any other sensor.

5. Research export

You may optionally generate an anonymized JSON file summarizing per-session statistics, vocabulary entries, and milestone evaluations. The child's name and birth date are stripped. The file is written to your device's local cache and is shared only when you tap the iOS share sheet and choose a destination yourself. SayPlay never auto-uploads this file. Once you share it, it is governed by whatever destination service you chose (e.g. Mail, AirDrop, Files).

Both the Research Export and the Wipe-All-Data actions are gated behind an arithmetic parental check, per App Store Kids guidelines.

6. Children's privacy

SayPlay is designed to be used by an adult on behalf of a young child. Although audio of a child may be captured, that audio is never transmitted to us or any third party. SayPlay complies with the U.S. Children's Online Privacy Protection Act (COPPA) and the EU GDPR by simply not collecting personal data — we have nothing to send, store, or share.

7. Data retention

All data lives on your device. You can delete it instantly using Settings → Wipe All Data (parental gate). Deleting the app removes all SayPlay data from your device.

8. Security

SayPlay relies on the iOS application sandbox to isolate its data. No data is transmitted over the network, so there is no transport-layer surface to attack. Speech recognition runs in Apple's sandboxed system process.

9. Required-reason API usage

Per Apple's privacy manifest requirements, SayPlay declares the following Required Reason API uses in PrivacyInfo.xcprivacy:

  • UserDefaults (CA92.1): app preferences and feature flags, scoped to the same app.
  • File timestamp APIs (C617.1): displayed to the user in-app and used to prune old audio clips locally.
  • Disk space APIs (E174.1): checked before writing new audio clips so the app does not exceed its retention budget.

10. International users

Because no data leaves your device, no cross-border data transfer occurs. EU/UK residents have all rights under GDPR/UK-GDPR — but with no personal data held by us, requests for access, rectification, erasure, or portability are satisfied locally via the iOS app itself.

11. Changes to this policy

We may update this policy if the app gains new functionality. Any material change will be reflected here with an updated “Last updated” date. The fundamental promise — no data leaves your device without an explicit user-initiated share — will not change without a new major version, a fresh permissions prompt, and clear in-app disclosure.

12. Contact

Email inclusiveheart.us@gmail.com with privacy questions, GDPR requests, or anything else. We answer every email.