Privacy & Data Protection

InnerVoice Privacy Policy

Effective Date: August 3, 2026

In Short

InnerVoice does not sell personal information or build advertising profiles. Working boards, goals, and language samples are stored on the device. Features that need cloud generation send only the selected text or image needed for that request; Section 4 explains those flows. Because many InnerVoice users are children, Section 6 sets out our children's privacy practices in detail.

1. Scope

This Privacy Policy explains how iTherapy, LLC ("iTherapy," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the InnerVoice iOS application distributed through Apple's App Store and the InnerVoice website at innervoiceapp.com (together, the "Service").

InnerVoice uses Apple's standard Licensed Application End User License Agreement. If your school, district, or clinic ("Educational Agency" or "Organization") has a separate data privacy agreement or district-level license with iTherapy, that agreement controls to the extent it conflicts with this Policy.

2. Information We Collect

Information you or your organization provide:

  • Communication boards, buttons, words, and images you create or add for the AAC user.
  • Goals and progress information entered by a parent, caregiver, or clinician, including goals imported through our multi-goal photo import feature, which reads text from a photographed goal sheet or document to help populate goals.
  • Recorded conversation turns and locally stored language samples, including speaker, input mode, timestamps, descriptive sample counts, and any goal links. Export occurs only when a user explicitly opens the iOS Share sheet.
  • Purchase confirmation for an InnerVoice subscription through Apple's App Store. Apple handles the transaction under its privacy terms; we receive purchase status, not your full payment-card details.
  • Anything you send us directly, such as a support request.

Information collected automatically:

  • Device and diagnostic information (device type, operating system version, app version, crash logs) used to keep the app working and fix bugs.

Information processed through AI-powered features: described in Section 4.

3. How We Use Information

We use the information above to:

  • Provide InnerVoice's communication, speech-generation, and AAC functionality;
  • Personalize vocabulary, goals, and content to the individual AAC user;
  • Create reviewable goal summaries and language-sample exports requested by the user;
  • Maintain, secure, and troubleshoot the Service and provide customer support;
  • Comply with legal obligations and enforce our Terms and Conditions.

We do not use InnerVoice data to sell advertising, build behavioral advertising profiles, or serve targeted ads, and we do not sell personal information.

4. AI-Powered Features and Third-Party Processing

Certain features, including Chat, Scene Talk, goal-photo extraction, and Board Mirror label reading, send the text or image needed for that request to a third-party AI model. These features currently run on Anthropic's Claude models through AWS Bedrock. Board Mirror keeps the working source photo on the device while a temporary, downscaled reader copy is processed for labels.

iTherapy does not store those temporary cloud-processing inputs on its own servers after the request is delivered. Under Anthropic's commercial terms, API data is not used to train Anthropic's models.

Photos submitted through the goal-import feature are processed to extract text and populate your goals, and are not retained beyond completing that import.

The InnerVoice 7 V4 avatar does not use gaze tracking, facial-expression analysis, or other biometric identification.

5. How We Share Information

We do not sell or rent personal information. We share it only with:

  • Service providers who host, secure, or operate parts of the Service under contract, including our cloud infrastructure and the AI providers described above, and who are bound to use the data only to provide services to us;
  • An Educational Agency, where InnerVoice was procured on behalf of a specific student, limited to that student's data and governed by our agreement with that Educational Agency;
  • Law enforcement or regulators, where required by law or to protect the rights, property, or safety of iTherapy, our users, or others;
  • A successor entity in the event of a merger, acquisition, or sale of assets, subject to this Policy or a policy offering comparable protections.

6. Children's Privacy (COPPA)

InnerVoice is designed for use by children, including children under 13, and iTherapy is an "operator" under the Children's Online Privacy Protection Act (COPPA).

What we collect from children. We limit information collected directly from a child user to what is reasonably necessary for the AAC and communication features to function: communication-board content, goals and progress data entered on the child's behalf, and the usage/diagnostic data described in Section 2. We do not require a child to disclose more information than is reasonably necessary to use the Service.

Consent. Where a parent or guardian purchases InnerVoice directly, we treat that payment-card purchase, together with acceptance of this Policy, as our method of obtaining verifiable parental consent. Where InnerVoice is provided through a school or district, the school consents on the parent's behalf for educational use, consistent with FERPA's school-official exception, and the district's contract with iTherapy governs data handling for that deployment.

Parental rights. A parent or guardian may, at any time, review the personal information we've collected from their child, request that it be deleted, and refuse further collection or use of their child's information, which will discontinue that child's access to cloud-powered features. To exercise these rights, contact admin@itherapyllc.com.

What we don't do. We do not condition a child's participation on providing more information than is reasonably necessary, use children's information for behavioral advertising, or disclose children's personal information to third parties for marketing purposes.

7. Schools, Districts, and FERPA

Where an Educational Agency procures InnerVoice for a specific student, we treat the resulting data as Student Data: used only for the contracted educational purpose, never sold or used for advertising, disclosed only as the Educational Agency authorizes, and deleted or returned within 90 days of contract termination unless the Educational Agency directs otherwise.

8. A Note on Protected Health Information

InnerVoice is a communication and education tool, not a medical records system. Please don't enter Protected Health Information, such as a medical diagnosis, treatment plan, or clinical note, into the app or the Chat feature. For HIPAA-compliant clinical documentation, use your organization's electronic health record system.

9. Data Security

We use encryption in transit and at rest and limit internal access to personal information to what's needed to operate the Service. No system is completely secure and we can't guarantee absolute security, but our practices are consistent with iTherapy's broader information security program.

10. Data Retention and Deletion

  • Communication boards, vocabulary, goals, language samples, and settings stored on your device remain there until they are deleted through the relevant app controls or the app is uninstalled.
  • AI feature inputs and outputs are handled as described in Section 4.
  • Student Data tied to an Educational Agency contract is retained and deleted as described in Section 7.

To request deletion of your data, contact admin@itherapyllc.com.

11. Your Privacy Rights

If you're a California resident, you have rights under the California Consumer Privacy Act, including the right to know what personal information we've collected, to request deletion, to request correction, and to be free from discrimination for exercising these rights. Because we don't sell or share personal information for cross-context behavioral advertising, there's no "Do Not Sell or Share My Personal Information" opt-out to offer, but you can still submit any of the requests above, including through a recognized opt-out preference signal such as Global Privacy Control.

Residents of other U.S. states with comprehensive privacy laws may have similar rights. To exercise any of these rights, contact admin@itherapyllc.com; we may need to verify your identity first.

12. International Users

InnerVoice is available through app storefronts outside the United States, including in the European Economic Area and the United Kingdom. If you're located in one of these regions, you may have rights under the GDPR or similar laws, including the right to access, correct, delete, restrict, or port your personal information, and to object to certain processing. Personal information is processed and stored in the United States; where required, we rely on standard contractual clauses or an equivalent safeguard for that transfer.

13. Changes to This Policy

We may update this Policy from time to time. If we make a material change, we'll update the Effective Date above and, where required by law or by our agreements with Educational Agencies, provide additional notice.

14. Contact Us

All privacy, security, and general questions: admin@itherapyllc.com

iTherapy, LLC

4439 Ryer Road E

Walnut Grove, CA 95690

United States