Privacy Policy

1. Who we are

OrthoPragma publishes the OrthoPragma app (identifier com.orthopragma.app on Google Play and the App Store), an augmentative and alternative communication (AAC) tool based on pictograms, together with language therapy activities, designed for families and professionals who support children.

OrthoPragma is the data controller for the personal data described here. For any question about your data, write to privacy@orthopragma.com.

2. Who the app is for

An OrthoPragma account is created and managed by an adult: a parent, a guardian, a speech and language therapist or another professional. You must be at least 18 years old to create an account.

Children use the pictogram boards under the supervision of that adult, through a "member" profile the adult creates. We never ask a child for information directly and we never create an account in a child's name.

3. The data we collect

Account data, provided by you:

• your email address, used to sign in with a one-time code;
• your first and last name, shown in the app;
• the account type (family or clinic) and its status.

Member profiles, entered by the account holder for each person who uses the boards:

• the member's first name;
• their preferences: language, difficulty level, board layout, text-to-speech voice settings, avatar colour;
• their weekly activity calendar, if filled in;
• the pictograms used recently or frequently, so they can be offered faster.

Content you create:

• custom pictograms: a picture taken with the camera or chosen from your gallery, a label, and an optional audio recording;
• custom activities and their picture.

Technical data:

• the IP address, device type and timestamp of requests, kept in the technical logs of our hosting providers for security and troubleshooting;
• a session token stored on your device to keep you signed in.

Internal notes: our team may record notes about your account (for example to follow up on a support request). These notes are visible only to our team.

We do not collect dates of birth, diagnoses, health data, location or contacts. We use no analytics, advertising or tracking tools.

4. Why we use this data

• to provide the service: authenticate you, sync your boards and content across your devices, and display member profiles (performance of the contract);
• to adapt the app to each member according to their preferences (performance of the contract);
• to keep the service secure, prevent abuse and diagnose failures (legitimate interest);
• to answer your support requests (legitimate interest);
• to comply with our legal obligations.

We never sell your data and we do not use it for advertising or profiling.

5. Device permissions

The app requests the following permissions, only when you use the corresponding feature:

• Camera: to photograph a custom pictogram.
• Photos and gallery: to choose an existing image as a custom pictogram.
• Microphone: to record a sound attached to a custom pictogram.

You can decline these permissions; the app remains usable without custom pictograms. The images and recordings you confirm are uploaded to a private storage space tied to your account, then cached on your devices.

6. Who we share data with

We rely on the following processors, who handle data on our behalf and under our instructions:

• Supabase: authentication, database and file storage.
• PrivateEmail (Namecheap): delivery of the emails containing your sign-in codes.
• Render: hosting of the administration website.
• Google Fonts: the app downloads a font from Google servers on first launch; Google receives your IP address on that occasion.

Within one account, custom pictograms are visible to every user of that account, and custom activities to the members you assign them to. Nothing is shared with other accounts or made public.

We may also disclose data when required by law or to protect our rights, those of our users or those of third parties.

7. International transfers

Your account data, member profiles and content are hosted by Supabase in the European Union. Some of our providers, such as the email delivery service or Google Fonts, may process data outside the European Union. Where that is the case, we rely on their data processing agreements and on the standard contractual clauses approved by the European Commission.

8. Security

• all communication between the app and our servers is encrypted (TLS);
• sign-in uses a one-time code sent by email, with no stored password; the code expires quickly;
• your files are stored in a private space and access rules ensure that only your account can reach them;
• our team's access to data is limited to the people who need it for support and service administration.

9. Data stored on your device

To work offline, the app keeps on your device a copy of the boards, the pictograms, your custom content and the last selected member. This data is removed when you uninstall the app.

10. Retention

We keep your data for as long as your account is active. When you request deletion of your account, it is deactivated immediately and its personal data, including images and recordings, is deleted within 30 days, unless a longer retention is required by law. Technical logs are kept for at most 90 days.

11. Your rights

Under the General Data Protection Regulation (GDPR) and applicable laws, you have the following rights:

• to access the data we hold about you and obtain a copy;
• to have inaccurate data corrected; your first and last name can be edited directly in the app;
• to request erasure of your data;
• to request restriction of processing or to object to it;
• to receive your data in a structured format (portability);
• to lodge a complaint with your country's data protection authority, for example the CNIL in France.

To exercise these rights, write to privacy@orthopragma.com from the email address linked to your account. We reply within one month.

You can also delete member profiles, custom pictograms and activities, with their images and recordings, yourself at any time in the app. On a partial erasure request, we delete the data concerned within 30 days. The data needed to run your account (email address, first and last name) is kept as long as the account exists, and technical logs for at most 90 days (see section 10).

12. Deleting your account

You can request the deletion of your account and all associated data at any time. Send an email to privacy@orthopragma.com from your account's email address, with the subject "Account deletion".

Deletion covers:

• your account and your sign-in information;
• the profiles of all members of the account and their preferences;
• custom pictograms and activities, including images and audio recordings.

Your account is deactivated as soon as we receive the request and the data is erased within 30 days. Remember to uninstall the app to remove the local copy kept on your devices.

13. Children's privacy

Information about a child (their first name and preferences) is entered only by the adult account holder, who keeps control of it and can edit or delete it at any time. We use it only to run that child's communication boards. If you believe a child has sent us data without the consent of their legal guardian, contact us and we will delete it.

14. Changes to this policy

We may update this policy to reflect changes in the app or in regulations. The version number and effective date appear at the top of this page, and previous versions remain available in the history below. For significant changes, we will notify you in the app or by email.

15. Contact

OrthoPragma · privacy@orthopragma.com · https://orthopragma.com

Version history

• Version 1.117 September 2026Added the list of devices using an account, to prevent abuse.
• Version 1.08 September 2026First published version.