Pip Talk is a free speech-practice app for children aged about 3 to 7, used with a parent, carer or teacher. It is made by Wraplet (info@wraplet.app) ("we", "us"). This policy explains, in plain language, what the app keeps, what it never collects, and the two things that can involve the internet: the optional one-time "Pip Plus" purchase in the grown-up area (handled by Google Play), and an optional link to your child's speech therapist.
The short version
- Practice works offline. Everything your child does in the app stays on your phone.
- Your child's voice never leaves the phone. Speech recognition runs on the phone, offline.
- No ads, anywhere in the app.
- No analytics or tracking tools, no accounts.
- All speech practice is free. A grown-up can optionally buy Pip Plus once (extra games, buddies and sticker pages). It is only reachable behind the parental gate and is paid through Google Play; we never see card or payment details (section 4).
- One optional feature: a grown-up can choose to share daily practice counts with the child's speech therapist. No names, no audio, no words the child said. You can stop at any time and the shared data is deleted.
1. What stays on your phone
Pip Talk stores these things only on your device, in the app's private storage. We cannot see them.
| What | Why | How to delete |
|---|---|---|
| Child profile: a nickname (up to 20 characters) and the buddy picture you picked | To greet the child and keep progress apart if several children use the phone | Settings > Children, or Settings > Delete ALL data |
| Practice history: which sounds and steps were practiced, each try's result (right, almost, not yet, not judged) and the date | To choose the next words and move up levels | Settings > Delete ALL data |
| Voice clips: at most one short recording per sound per week (the first good try), for "Then vs Now" | So a grown-up can hear progress | Then vs Now > delete a clip or Delete all recordings; Settings > Delete all recordings |
| Stickers, Pip's growth, settings (music, sensitivity, language) | Rewards and preferences | Settings > Delete ALL data |
| An error log (short error codes, no audio, no names) | So a grown-up can share diagnostics with us if something breaks | Settings > Delete ALL data |
Uninstalling the app also deletes all of this. Android's cloud backup is switched off for Pip Talk
(allowBackup: false), so none of it is copied to Google Drive.
Things you choose to share. In the grown-up area you can save a backup file, share a PDF progress report, or share diagnostics text. These open Android's share sheet; the file goes only where you send it (for example email or a messaging app), under that service's privacy policy. We never receive these files unless you send them to us.
2. Microphone and speech recognition
- The games listen to the microphone while a turn is running, to move the game (loudness and length of the voice) and to check the child's words. The app asks Android for microphone permission first.
- Words are checked by the phone's own offline speech recognition (Android's on-device recognizer). Pip Talk only uses it when the offline language model is installed; otherwise it judges by voice length and steadiness. The child's voice is never sent to us, to Google or to anyone else.
- Other recordings are temporary files in the app's private cache, used to play the try back. They are deleted the next time the app starts; only the one weekly "Then vs Now" clip described above is kept.
- Nothing is recorded in the background. Background recording is switched off.
3. The optional therapist link (off unless a grown-up turns it on)
If your child's speech therapist uses Pip Talk Pro, a grown-up can link the app to the therapist with an 8-character code. This is behind the parental gate and needs a consent tick box. The app works exactly the same without it.
What is sent, and only after you link: for each day the child practiced, per sound and step:
| Field | Example |
|---|---|
| day | 2026-10-02 |
| sound | s |
| step | words (start) |
| number of tries that were right / almost / not yet / not judged | 7 / 2 / 1 / 0 |
Plus a random link token the server gave this phone when you linked (it proves the uploads come from the linked phone; the server stores only a scrambled hash of it). The app sends the last 2 weeks when you link, then updates after each practice.
Never sent: the child's name or nickname, voice or recordings, the words they said, their buddy, photos, contacts, location, advertising ID, device ID, or anything about other children on the phone. The therapist sees only the nickname or initials they typed in themselves.
Where it goes: our server on Cloudflare (Cloudflare Workers and D1 database), over encrypted HTTPS only. Cloudflare processes it as our service provider. Like any web service, Cloudflare handles your phone's IP address to deliver the request, and uses it for a few seconds to limit repeated sign-in or link-code attempts (abuse protection); our server does not store IP addresses or log request contents. The data is shown only to the therapist who created the link code. We do not sell it, share it with advertisers, or use it for anything else.
How long it is kept: at most 730 days (2 years). Older daily counts are deleted automatically every day.
How to delete it:
- Stop sharing (Grown-up area > Link to my speech therapist > Stop sharing) unlinks the phone and deletes everything this phone uploaded from the server, straight away.
- The therapist can delete the child from their account, which deletes all of that child's data on the server.
- Or email us (section 8) and we will delete it within 30 days.
Note: deleting the child, or all data, on the phone (or uninstalling) stops future uploads but does not by itself delete what was already shared. Use Stop sharing first, or ask the therapist or us to delete it.
4. In-app purchase (Pip Plus)
Pip Plus is an optional, one-time purchase for grown-ups. All speech practice stays free without it.
- The purchase screen is only in the grown-up area, behind the parental gate. Child screens never show prices, purchase prompts or locked items.
- The purchase is handled entirely by Google Play (Google Play Billing). You pay Google, using the payment method in your Google account. We never receive your card or payment details.
- Google tells the app only whether this Google account owns Pip Plus (a purchase token and order details). This stays on the phone: the app checks it on the phone, has no server check and no account, and sends nothing about the purchase to us or anyone else. The app remembers "Pip Plus is on" in its private storage and re-checks with Google Play when it starts or the grown-up area opens; "Restore purchases" asks Google Play again.
- The payment itself, receipts and refunds are covered by Google's terms and privacy policy, https://policies.google.com/privacy. Refunds are handled through Google Play.
5. What Pip Talk does not do
- No ads, anywhere in the app. The app does not use the Android advertising ID (the permission is blocked).
- No analytics, crash-reporting or tracking tools. The app is built with open-source Expo and React Native libraries that run on the phone; none of them send data to us or to others. The only network use is the optional therapist link (section 3, our server) and, when a grown-up opens the Pip Plus screen or the app checks a purchase, Google Play's billing service through the Play Store app (section 4).
- No accounts, sign-in or social features for families. No chat, no links to social media.
- No purchases on child screens. The only purchase is the optional Pip Plus, behind the parental gate (section 4).
- No location permission, contacts, photos, camera or file access (storage permissions are blocked).
- Pip's voice is a set of clips recorded ahead of time and shipped inside the app; it is not generated online.
6. Children's privacy (COPPA, GDPR and UK Children's Code)
Pip Talk is designed for children and follows Google Play's Families policy.
- We do not knowingly collect personal information from children. Everything the child does stays on the phone.
- There are no ads. The only purchase (Pip Plus) is behind the parental gate and aimed at grown-ups (section 4).
- The only practice data that can leave the phone (section 3) is sent only after a parent or carer passes the parental gate and gives consent. It contains no name, contact details, audio or location, and it is limited to what the therapist needs to follow practice.
- The grown-up area (settings, progress, sharing, deletion) is protected by a parental gate that young children cannot pass.
- Parents and carers can review and delete the child's data at any time (sections 1 and 3), and can withdraw consent with Stop sharing.
If you are in the EU/EEA or UK, the legal basis for the optional therapist link is the parent's or carer's consent; you can withdraw it at any time. You have the right to access, correct, delete and receive a copy of the data, and to complain to your data protection authority. Data on the phone is under your control. For the therapist link, we are the data controller.
7. Security
Data on the phone sits in the app's private storage, which other apps cannot read. The therapist-link token is kept in Android's encrypted secure storage. All of the app's own network traffic uses HTTPS; Pip Plus purchases go through the Google Play Store app, which encrypts its traffic. On the server, every secret is stored only as a hash.
8. Contact and deletion requests
Questions, or a request to see or delete data shared through the therapist link: info@wraplet.app - please include the therapist's name or the date you linked, never your child's full name. We answer within 30 days. We do not hold payment data; for Pip Plus payments and refunds, see Google Play (section 4), or ask us and we will help you contact Google.
9. Changes
If this policy changes, we will update the effective date above and describe the change in the app's release notes. If a change would collect anything new, we will ask for consent in the app first.