Privacy Policy

Data Controller

Arcano Designs is the data controller for the purposes of GDPR. Contact: support@arcanodesigns.com

Data We Collect

• Account information (name, email) when you sign up
• Profile information you provide during onboarding
• Communication preferences and session data
• Voice recordings for voice cloning (optional)
• Usage data including sessions, symbols used, and accuracy

Children's Data

We collect data about children only through their parent or therapist accounts. We never collect data directly from children. Data includes: name (optional), age, session activity, and communication progress.

How We Use Your Data

• To provide and improve our communication services
• To track session progress and generate insights
• To personalize the experience with voice cloning
• To communicate with you about your account
• To comply with legal obligations

Legal Basis

We process data based on: Consent (for optional features like voice cloning), Contract (for providing our services), and Legal Obligation (for data retention).

Data Sharing

We do not sell your data. We share data only with: Service providers (hosting, database, voice AI), Legal authorities when required by law. All processors are GDPR-compliant.

Data Retention

We retain account data while your account is active. You can request deletion at any time. Session data is retained for 2 years after last use, then automatically deleted.

Your Rights

• Access — Request a copy of your data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data
• Portability — Request data in a portable format
• Objection — Object to processing based on legitimate interests

You can withdraw consent for optional features at any time in your profile settings.

Cookies

We use essential cookies for authentication (Clerk). No tracking or advertising cookies. Your browser settings can block cookies, but some features may not work.

Security

We implement appropriate technical and organizational measures: encryption in transit (HTTPS), secure database storage, access controls, regular security reviews.

Data Breaches

In case of a data breach that affects your rights, we will notify you and the relevant authority within 72 hours of becoming aware.

Children's Privacy

We do not knowingly collect data from children under 16. Parents and therapists are responsible for ensuring appropriate consent and supervision.

Changes to This Policy

We may update this policy. We will notify you of material changes via email before they take effect.

Contact

For questions about this policy or to exercise your rights, contact: support@arcanodesigns.com