Privacy Policy

Who this covers

SLP Daybook is used by one person: a speech-language pathologist working in a school. This policy is about two different groups of people, and it is worth being clear which is which.

The SLP is our customer. We hold their email address, their display name, and their subscription status.

The students on that SLP's caseload are not our customers and have no account here. Their information is in the app because their SLP put it there, as part of the work their school district employs them to do. We hold it on the district's behalf and on the SLP's instruction, and we do not do anything else with it.

What is stored

For the SLP: email address, an encrypted password, display name, chosen color theme, an optional lock-screen PIN (stored only as a one-way hash, never as the digits), subscription status, and anything they write in the Journal.

For each student the SLP adds:

• Name, date of birth, grade, and school
• IEP and re-evaluation due dates, eligibility, and communication areas
• Service minutes, frequency, and service model
• Goals, targets, and the data taken against them session by session
• Session notes, observations, and SOAP notes
• Attendance, make-up sessions, and parent contact records
• Evaluation reports, present-levels write-ups, and task records
• Responses to parent, teacher and student input forms the SLP sent out
• Any file the SLP uploads to the Resource Library and attaches to a student

We do not collect anything from a student or a family directly. Everything above arrives because the SLP typed it, or because somebody filled in a form the SLP sent them a link to.

Why it is stored

To run the service the SLP is paying for, and for nothing else.

We do not sell data. We do not share it with advertisers. We do not use it to train artificial intelligence models, our own or anybody else's. There is no analytics product watching what the SLP does inside the app.

The app has a feature that builds a block of text for an SLP to paste into an AI tool of their own choosing. It never sends anything itself, and the text it builds has no place in it for a student's name.

Who else can see it

Each SLP can see only their own account. This is enforced by the database itself, on every table, not by the app remembering to ask — a request for somebody else's rows returns nothing.

Four companies hold parts of the service, and so technically hold data:

• Supabase — the database, uploaded files, sign-in, and the automated emails for confirming an account or resetting a password. Hosted in [YOUR SUPABASE REGION, e.g. US East].
• Vercel — runs the website itself.
• Stripe — takes payment. Card numbers never reach us; Stripe holds them and tells us only whether a subscription is active.
• Sentry — receives a report when something breaks. These reports are stripped first: no request bodies, no query strings, and no recording of the screen. A report says what failed and where, not what was on the page.

We do not give student information to anyone else. If we are ever legally compelled to, we will tell the SLP whose account it is unless we are forbidden from doing so.

FERPA, and schools

Student records in this app are education records. The school district is their custodian; we are a service provider holding them on the district's behalf, in the role FERPA describes as a school official with a legitimate educational interest.

That means we use student information only to provide this service to the SLP, we do not re-disclose it, and we delete it when the account is deleted.

It also means the SLP has to be allowed to use us. Every account confirms at sign-up that their employer authorizes it. If a district needs an agreement signed before their staff use a tool like this, write to us at [YOUR SUPPORT EMAIL] and we will work through it.

How it is protected

• Everything travels encrypted, and is encrypted where it is stored.
• Every table is restricted at the database level to the account that owns the row.
• Passwords are stored only as a hash. Nobody here can read one.
• The app signs itself out after 30 minutes of inactivity, and offers a PIN lock screen for the times a laptop is open in a classroom.
• Links sent to parents, teachers and students expire after 30 days and can be revoked at any moment. A revoked link stops showing the child's name immediately, not just at the next save.
• Student last names appear only on the student's own profile and on referral forms. Everywhere else — lists, notes, reports, exports between pages — shows a first name and a last initial.

No system is beyond reach, and we will not pretend otherwise. If we ever discover a breach affecting student information, we will tell the affected SLPs promptly and directly, with what we know and what we are doing about it.

Keeping it, and getting rid of it

Information stays while the account exists, because an SLP needs several years of history for an evaluation or a dispute.

Any SLP can export everything at any time from Account settings, as a single file. Uploaded Resource Library files are not inside that export; everything else is.

Any SLP can delete their account from the same screen. That removes every student, goal, session, note, report and uploaded file immediately and permanently, cancels any subscription, and cannot be undone. Backups roll off within 30 days.

The app does not erase one student on its own. Taking a student off a caseload — dismissed, transferred, or deleted — files them away and keeps their whole record, deliberately, because an SLP asked to account for a decision three years later needs it. If a district requires a particular student's records to be destroyed, write to [YOUR SUPPORT EMAIL] and we will do it directly and confirm when it is done.

Changes, and how to reach us

If this policy changes in a way that affects what happens to student information, we will tell account holders by email before it takes effect rather than quietly changing the date at the top.

Questions, requests, or a district's paperwork: [YOUR SUPPORT EMAIL].