Privacy Policy

Draft for legal review. Updated April 12, 2026.

This Privacy Policy describes how Mosaic Voice LLC ("Mosaic Voice," "we," "us," or "our") collects, uses, discloses, retains, and protects information in connection with Mosaic Voice AAC, mosaicvoiceaac.com, and any related applications, websites, products, and services that link to this Privacy Policy (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree with this Privacy Policy, do not use the Service.

Mosaic Voice accounts are intended to be created and controlled by adults. A child does not create, own, or control a Mosaic Voice account. If the Service is used for a child, the child is represented as a caregiver-managed profile under an adult-owned account.

When an adult creates a child profile, Mosaic Voice records one-time caregiver consent and stores a consent record associated with the adult account and the child profile. Backend phrase generation and child-profile personalization are enabled only after caregiver setup and consent for the applicable profile.

We do not knowingly permit a child under 13 to create an account directly. We do not sell child-profile information, and we do not use child-profile information for behaviorally targeted advertising.

Depending on how the Service is used, we may collect, receive, create, or process the following categories of information:

• account information, including the adult account holder's name, email address, authentication identifiers, account status, and related account records
• profile information, including self-profile data and caregiver-managed child profile data such as profile identifier, display name, birthday, age, gender, caregiver-entered profile notes, active profile selection, profile type, and profile status
• caregiver consent information, including consent type, notice version, verification method, grant status, and consent timestamp
• communication and personalization information, including selected cards, card context, generated sentences or phrases, regeneration requests, feedback, personalization history, and free-tier generation usage state
• custom content and media, including custom cards, categories, uploaded images, generated symbols, generated audio, and related organization choices
• subscription and purchase information, including product identifier, entitlement or subscription status, expiration date, renewal state, trial state, restore-purchase status, and subscription-access records
• device, diagnostics, and analytics information, including app version, device or operating-system information, crash reports, performance data, product interaction events, and other usage information used to operate, debug, secure, and improve the Service
• support and communications information, including information you submit through the website contact form, by email, or through other support channels

The Service may store certain information locally on your device, such as authentication token metadata, active profile identifiers, cached history, recent activity, cached images, and local app state. Local device storage supports login persistence, profile restore, app continuity, and user-interface state.

Deleting local app data, logging out, or deleting the app may remove certain device-local information but may not delete server-side account, profile, subscription, support, diagnostics, or personalization records. Server-side deletion requests are described below.

We use information for the following business and operational purposes:

• to create, authenticate, maintain, and secure adult-owned accounts
• to create, manage, select, update, and delete self profiles and caregiver-managed child profiles
• to record and maintain caregiver consent records
• to provide AAC boards, cards, categories, phrase generation, audio output, personalization, and related app functionality
• to associate generation, regeneration, feedback, and personalization history with the applicable pseudonymous profile identifier
• to provide, verify, restore, and enforce subscription access and usage limits
• to respond to support requests, contact-form submissions, and other communications
• to detect, troubleshoot, debug, analyze, secure, and improve the Service
• to comply with legal obligations, enforce our terms, protect rights and safety, prevent misuse, and preserve records where required or permitted by law

Some features use third-party artificial-intelligence providers to generate phrases, symbols, audio, or related outputs. When you request those features, we may process selected cards, profile context, generated text, feedback, and related request data as reasonably necessary to provide the requested output and personalize future output for the applicable profile.

AI-assisted output may be inaccurate, incomplete, inappropriate, or unsuitable for a particular context. Do not include information in prompts, profile notes, or custom content unless you are authorized to provide it and comfortable having it processed for the purposes described in this Privacy Policy.

We may disclose information as described in this Privacy Policy and in the following circumstances:

• to service providers and processors that help us operate, host, secure, analyze, support, and improve the Service
• to authentication, billing, diagnostics, analytics, cloud hosting, storage, database, and AI-service providers as needed to provide the Service
• to app-store platforms and billing providers as necessary to process subscriptions, restore purchases, manage refunds, and enforce access
• to professional advisers, such as lawyers, auditors, accountants, insurers, and security consultants, where reasonably necessary for business, compliance, or risk-management purposes
• to comply with law, legal process, lawful requests, or enforceable governmental demands
• to protect the rights, property, safety, and security of Mosaic Voice, users, children, caregivers, service providers, or the public
• in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate protections for personal information

We do not sell child-profile information. We do not disclose child-profile information for behaviorally targeted advertising.

The Service may use third-party services including Auth0 for authentication, RevenueCat and app-store billing systems for subscriptions, Sentry for diagnostics, PostHog for analytics, MongoDB and cloud hosting providers for backend storage, AWS S3 for media or user-content storage, and AI service providers such as OpenAI, Anthropic, Hugging Face, Google Gemini, Replicate, and ElevenLabs where enabled for app features.

These third-party services may process information according to their agreements with us and, where applicable, their own terms and privacy policies. The Service may also link to third-party websites or services that we do not control. We are not responsible for the privacy practices of third parties that are not acting on our behalf.

The website and app may use cookies, local storage, SDKs, analytics tools, diagnostics tools, and similar technologies to operate the Service, remember preferences, maintain sessions, analyze use, measure performance, detect errors, and improve functionality.

Browser and device settings may allow you to limit certain cookies or tracking technologies. Some choices may affect whether the Service functions correctly.

Adult account owners may review, update, correct, or delete caregiver-managed child profiles through the app where available or by contacting us. Adult account owners may also contact us to request review or deletion of child-profile data associated with their account.

If you ask us to delete a child profile or account, we will take reasonable steps to delete or de-identify information associated with that profile or account, subject to information we may retain where legally required, necessary for security, needed to complete a transaction, or otherwise permitted by law.

Deleting a Mosaic Voice account or child profile does not automatically cancel an App Store or Google Play subscription. Subscriptions must be managed through the applicable app-store account.

We retain information for as long as reasonably necessary to provide, maintain, personalize, secure, and improve the Service; maintain account and subscription access; provide support; comply with legal obligations; resolve disputes; enforce agreements; and protect rights and safety.

Retention periods may vary based on the type of information, the profile or account to which it relates, the purpose for which it was collected, legal and operational requirements, and whether the information is stored by Mosaic Voice or a third-party service provider.

We use reasonable technical, administrative, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, and disclosure. These safeguards include authenticated backend access and secure transmission where supported.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk to the extent permitted by law.

Mosaic Voice is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, or processed in the United States or other jurisdictions where we or our service providers operate. Those jurisdictions may not provide the same level of data protection as your home jurisdiction.

The Service may be subject to child-privacy, app-store, consumer-protection, data-safety, and other legal or platform requirements. We intend this Privacy Policy to describe the Service as currently implemented, but app-store privacy labels, Google Play data-safety disclosures, in-app caregiver notices, and other notices may provide additional information and should be kept aligned with this Privacy Policy.

The Service is not intended to create a provider-patient relationship, and Mosaic Voice is not a covered entity or business associate under HIPAA solely by making the Service available to consumers. If a health-care provider, school, clinic, or other organization uses or recommends the Service, that organization is responsible for its own legal obligations.

We may update this Privacy Policy from time to time. The updated date above indicates when this Privacy Policy was last revised. Changes are effective when posted unless a later effective date is stated. Your continued use of the Service after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.

Questions, requests, or concerns about this Privacy Policy or child-profile information may be sent to mark@mosaicvoiceaac.com.