Terms and Conditions of Service

Last updated: [date] · Versions: ES · IT · EN

1. Identification and scope

These terms govern the subscription to and use of SpeakiKids, an online platform supporting speech therapy intervention, owned by [company name / owner], tax ID [tax ID], registered address [address], email hola@speakikids.com ("SpeakiKids"). By creating an account you accept these terms, the Privacy Policy and the Cookie Policy.

2. The service

SpeakiKids lets speech therapy professionals ("the Professional") create patient records, assign exercises and weekly plans, give families access to practise at home, and review progress through reports. The platform is a support tool: it does not provide healthcare services, does not issue diagnoses and in no case replaces the Professional's clinical judgement.

3. Accounts and user types

• Professional account: reserved for speech therapists and related healthcare professionals acting in the course of their professional activity (B2B use). You are responsible for the accuracy of your details and the confidentiality of your credentials.
• Family access: credentials (username and password, no email) that the Professional generates and hands to each patient's family so the child can practise at home under adult supervision. Each family can only see their own child's data.

4. Free trial and plans

• The free trial lasts 30 days and allows up to 3 patients, with no card required.
• When the trial ends, access is blocked until a plan is purchased. Data is kept for a reasonable period in case you decide to subscribe; after that, it is deleted with prior notice.
• Paid plans are subscriptions (monthly or annual) processed through Stripe; they renew automatically and can be cancelled at any time, effective at the end of the period already paid. Prices are shown on the website and include the taxes indicated in each case.
• Each plan includes a maximum number of active patients. Archiving a patient frees a slot without deleting their data.

5. Obligations of the Professional

As controller of their patients' data, the Professional undertakes to:

1. Obtain and keep the informed consent of parents or guardians before registering a minor and before providing family access.
2. Register patients using only a first name or alias, without surnames or unnecessary identifying details, following the platform's minimisation-by-design approach.
3. Not include in clinical notes more identifying data than strictly necessary for their work.
4. Hand over family credentials securely and inform us of any unauthorised access.
5. Comply with data protection law and with the professional-secrecy and deontological obligations applicable to them.

6. Acceptable use

You may not use the platform for purposes other than speech therapy intervention, attempt to access other users' data, reverse-engineer the software, resell the service without authorisation or upload unlawful content. We may suspend accounts that breach these terms, with prior notice where possible.

7. Intellectual property

The software, games, content and the SpeakiKids brand belong to the owner or its licensors. The subscription grants a limited, non-exclusive, non-transferable licence to use the service for the duration of the contract. The data the Professional enters remains theirs (or their patients'): we acquire no rights over it beyond what is needed to provide the service.

8. Availability and support

We work to provide the service continuously but do not guarantee 100% availability: interruptions may occur due to maintenance, technical causes or force majeure. Planned maintenance will be announced with reasonable notice. Support: hola@speakikids.com.

9. Liability

SpeakiKids is a professional support tool. To the extent permitted by law, our total liability is limited to the amount paid by the Professional in the 12 months preceding the event giving rise to it, and we are not liable for indirect damages or loss of profit. Nothing above limits liability that cannot legally be excluded.

10. Data protection

The processing of personal data is governed by the Privacy Policy and, for patient data, by the following Data Processing Annex, which forms an integral part of these terms (Art. 28 GDPR).

11. Changes

We may update these terms for legal or technical reasons or as the service evolves. Substantial changes will be notified by email at least 30 days in advance; if you disagree, you may cancel your subscription before they take effect.

12. Governing law and jurisdiction

These terms are governed by Spanish law. As this is a professional (B2B) service, the parties submit to the courts of [city], without prejudice to any mandatory rules applicable in the Professional's country.

---

Annex · Data Processing Agreement (Art. 28 GDPR)

This annex governs the processing SpeakiKids ("Processor") carries out on behalf of the Professional ("Controller") over the data of their patients and families.

A.1 Subject matter, duration and nature

The Processor will process the data solely to provide the service described in these terms (hosting, interactive exercises, recording of results, reports and family access), for the duration of the subscription.

A.2 Types of data and data subjects

Data subjects: under-age patients and their families. Data: first name or alias, age, language, level, clinical notes, exercise results (including health-related data) and family access credentials (pseudonymous username and encrypted password).

A.3 Obligations of the Processor

1. Process the data only on the Controller's documented instructions and for the purposes of the service.
2. Ensure that authorised persons are committed to confidentiality.
3. Apply the security measures of Art. 32 GDPR (encryption in transit, role-based access control with row-level security, pseudonymisation of minors, backups).
4. Not engage sub-processors without the general authorisation granted here for those listed in A.4; any change will be notified in advance and the Controller may object.
5. Assist the Controller in handling data-subject rights and the obligations of Arts. 32–36 GDPR.
6. Notify the Controller without undue delay of any security breach it becomes aware of, with the information available.
7. Upon termination of the service, delete or return the data, at the Controller's choice, and delete copies unless legally required to retain them.
8. Make available to the Controller the information necessary to demonstrate compliance with this annex.

A.4 Authorised sub-processors

Supabase (database and authentication), Vercel (hosting) and Stripe (payments). Where they process data outside the EEA, transfers rely on adequacy decisions or Standard Contractual Clauses (Arts. 45–46 GDPR).

← Back to home