Privacy policy

Who we are

Sayella provides an augmentative and alternative communication (AAC) app and this website. In this policy, "we" and "Sayella" mean the company that operates Sayella, acting as the data controller for the personal data described here. Our registered details will be confirmed before launch.

Data we collect

We try to collect as little as we can. Where we do collect data, it falls into these groups:

• Account data. If you create an account, your email address and a hashed password, plus any team or licence details.
• Vocabulary and board data. The boards, words, symbols and photos you create. If you turn on cloud sync, an encrypted copy is stored so it can sync across your devices. With sync off, this stays on your device only.
• Usage and diagnostic data. Limited, aggregated information to keep the app reliable, such as crash reports. We do not track the content of what a person says with Sayella for advertising, ever.
• Payment data. Handled by our payment provider. We receive confirmation of a purchase, not your full card details.

How we use your data

• To provide the app and your account, including syncing your boards across devices when you ask us to.
• To keep Sayella secure, reliable and working, and to fix problems.
• To respond to you when you contact support or report an accessibility barrier.
• To meet our legal and accounting obligations.

We do not sell personal data, and we do not use a child's communication content to train advertising or unrelated products.

Our legal basis

Under UK GDPR we rely on: performance of our contract with you (to provide the app and account), our legitimate interests (to keep the service secure and improve reliability, balanced against your rights), your consent (for anything optional, which you can withdraw), and legal obligation (for example, financial records).

Children and vulnerable users

Sayella is often set up by a parent, carer, teacher or therapist on behalf of the person using it. Accounts and payment are intended to be managed by an adult. We design with the UK Age Appropriate Design Code (the Children's Code) in mind and avoid profiling or nudging.

Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or incomplete.
• Erase your data ("the right to be forgotten"), subject to legal limits.
• Restrict or object to certain processing.
• Withdraw consent at any time, where we relied on consent.
• Data portability: receive your data in a usable, machine-readable format.
• Complain to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.

Data portability and ownership

Your words are yours. Sayella supports exporting your boards in the Open Board Format (.obf and .obz) at any time, so you can move to another tool, keep your own backup, or simply hold a copy. We also support importing boards from other apps. We will not hold your vocabulary hostage.

How long we keep data

We keep account and synced data for as long as your account is active. If you close your account, we delete or anonymise your personal data within a defined period, except where we must keep certain records (such as financial records) by law.

How we protect your data

We use encryption in transit and at rest for synced data, access controls, and the principle of least privilege. No system is perfectly secure, but we take reasonable and proportionate steps to protect the data we hold and to notify you and the regulator promptly if anything goes wrong.

Contact us about privacy

For any question about your data, or to exercise any of the rights above, contact us and a person on the Sayella team will help.