Privacy Policy

1. Introduction

Streamind (“we,” “us,” or “our”) develops AI-powered communication restoration technology that helps individuals with speech impairments — including those affected by ALS, stroke, aphasia, and traumatic brain injury — communicate naturally. We are committed to protecting your privacy and handling your personal information with care and transparency.

This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website at streamind.co (the “Website”), our mobile applications for Android and iOS (the “Apps”), and our desktop applications for Windows and macOS (collectively, the “Services”).

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please discontinue use of our Services.

2. Information We Collect

2.1 Information You Provide to Us

When you create an account, use our Services, or contact us, we may collect the following:

• Account Information: Your name, email address, phone number, and mailing address when you register for an account.
• Authentication Data: Login credentials and OAuth tokens when you sign in via third-party authentication providers (e.g., Google, Apple).
• Voice and Audio: Audio from your microphone — which may include the speech of people near you — is processed in real time to deliver our speech assistance features and is not stored or recorded. The only audio we may retain is an optional short voice sample that you choose to upload so we can create a personalized synthetic voice for you; we keep it solely for that purpose.
• In-App Messages: Text and messages you generate within the app as part of the communication process.
• Photos: Images you choose to upload or share within the app (e.g., for your profile or for use in communication boards).
• Contacts: If you grant permission, we may access your device contacts to help you communicate with your contacts more easily through the app.
• Other User-Generated Content: Any additional content you create or submit through our Services, such as custom phrases, vocabulary preferences, and communication settings.
• Support Communications: Information you provide when contacting our support team, including any medical or health-related context you voluntarily share to help us assist you better.
• Inquiry & Fit-Check Information: If you complete a form on our website (such as our fit-check form) or otherwise contact us, we collect the details you provide — which may include your relationship to the person who would use Streamind, the relevant communication condition, current communication methods, available devices, and your organization or professional role.

2.2 Information We Collect Automatically

When you use our Services, we may automatically collect certain technical and usage data:

• Device Information: Device identifiers, operating system type and version, app version, device model, and language settings.
• Usage Data: App interactions, features used, session duration, in-app search history, and navigation patterns.
• Crash Logs and Diagnostics: Technical data about errors and crashes to help us improve app stability and performance.

2.3 Information We Do NOT Collect

We want to be clear about the data we do not collect:

• We do not collect precise or approximate location data.
• We do not collect financial information, payment card numbers, or purchase history (payments are handled entirely by the respective app store platforms).
• We do not collect web browsing history.
• We do not collect information about other apps installed on your device.
• We do not collect racial, ethnic, political, religious, or sexual orientation data.

3. How We Use Your Information

We use the information we collect for the following purposes:

We do not use your conversations, room audio, or voice samples to train AI models — ours or any third party’s. Personalization happens only within your own account, to tailor suggestions to you.

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following limited circumstances:

• Service Providers: We work with trusted third-party service providers who assist us in operating our Services (e.g., cloud hosting, analytics, customer support). These providers are contractually obligated to protect your information and may only use it to provide services on our behalf.
• AI Processing Partners: Your voice and text input may be processed by third-party AI infrastructure providers to deliver our core speech assistance features. This data is transmitted securely and is not used by these partners for their own purposes.
• Legal Requirements: We may disclose your information if required to do so by law, in response to a court order or subpoena, or to cooperate with law enforcement or regulatory authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

5. Data Security

We take the security of your information seriously, particularly given the sensitive nature of health-related communication data. We implement the following measures:

• All data transmitted between your device and our servers is encrypted in transit using industry-standard TLS/SSL protocols.
• Data at rest is encrypted using AES-256 encryption or equivalent.
• We implement access controls to ensure that only authorized personnel can access personal data, and only to the extent necessary for their role.
• We conduct regular security reviews and assessments of our systems and infrastructure.

While we strive to use commercially acceptable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach, we are committed to notifying affected users and the relevant authorities without undue delay — and, where the GDPR applies, within 72 hours of becoming aware of it — in accordance with Israel’s Privacy Protection Law and other applicable law.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. Specifically:

• Account Data: Retained for the duration of your account and for up to 30 days following account deletion to allow for account recovery.
• Voice and Audio Data: Conversation and room audio is processed in real time and is not stored. Any optional voice sample you upload to create a personalized synthetic voice is retained only until you delete it or close your account.
• Conversation Text & Personalization Data: Saved conversation text, phrases, and “memories” are retained while your account is active so the app can personalize suggestions for you, and are deleted when you remove them or delete your account.
• Usage and Analytics Data: Retained in an aggregated, anonymized form for up to 24 months for service improvement purposes.
• Crash Logs: Retained for up to 12 months to assist with troubleshooting and quality assurance.

When data is no longer needed, we delete or anonymize it in accordance with our internal data management policies.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete personal information.
• Deletion: You may request that we delete your personal information. You can submit a deletion request at streamind.co/delete-account or by contacting us at the email address below.
• Portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
• Opt-Out of Communications: You can opt out of non-essential communications at any time by using the unsubscribe link in our emails or by contacting us.
• Withdraw Consent: Where we rely on your consent to process your data, you may withdraw that consent at any time.
• Device Permissions: You can control app permissions (microphone, contacts, camera) through your device settings at any time.

To exercise any of these rights, please contact us at privacy@streamind.co. We will respond to your request within 30 days, or sooner where required by applicable law.

8. International Data Transfers

Streamind operates internationally. Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. When we transfer data internationally, we take appropriate steps to ensure that your information receives an adequate level of protection, including the use of standard contractual clauses approved by relevant authorities or other legally recognized transfer mechanisms.

9. Third-Party Services and Links

Our Services may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to Streamind's Services. We are not responsible for the privacy practices of any third-party websites or services. We encourage you to read the privacy policies of any third-party services you interact with.

Third-party services we currently use include:

• Authentication Providers: Google and Apple for OAuth-based account sign-in.
• Analytics: Google Analytics (GA4) to understand general usage patterns and improve our Website. Google Analytics may set cookies and process usage data on our behalf; see Google's Privacy Policy for details.
• Cloud Infrastructure: Trusted cloud hosting providers for secure data storage and processing.

10. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If a parent or guardian becomes aware that their child has provided us with personal information without their consent, they should contact us at privacy@streamind.co. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

For users between the ages of 13 and 18, we recommend that a parent or guardian supervise the use of our Services and account setup.

11. Cookies and Tracking Technologies

Our Website uses Google Analytics (GA4) to measure traffic and understand general usage patterns. Google Analytics uses cookies and similar technologies to collect aggregated, statistical information about how visitors use our Website. We do not use third-party advertising cookies, and we do not sell your personal information.

Essential cookies may also be used solely to ensure the proper functioning of our Website (e.g., session management, security). These are strictly necessary and do not track you across other websites.

You can control or block cookies through your browser settings, and you can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

12. Accessibility of This Policy

As a company dedicated to helping people communicate, we are committed to making this Privacy Policy accessible to all users, including those using assistive technologies. If you have difficulty accessing or understanding this policy, please contact us and we will provide it in an alternative format.

13. Additional Disclosures for U.S. Residents

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These include the right to know what personal information we have collected about you in the past 12 months, the right to request deletion, the right to opt out of the sale or sharing of your personal information (we do not sell or share your personal information for cross-context behavioral advertising), and the right to non-discrimination for exercising your privacy rights.

California residents may submit requests by emailing privacy@streamind.co or visiting streamind.co/delete-account.

Other U.S. States

Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and others) may have similar rights. We honor all such requests in accordance with applicable law. Please contact us to exercise your rights.

14. Additional Disclosures for European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Performance of a Contract: To provide you with our Services as agreed when you create an account.
• Legitimate Interests: To improve our Services, ensure security, and communicate with you, where these interests are not overridden by your rights.
• Consent: Where you have provided explicit consent (e.g., for optional communications or access to device contacts).
• Legal Obligation: To comply with applicable laws and regulations.

Under the GDPR, you have the right to access, rectify, erase, restrict processing, object to processing, and request portability of your personal data. You also have the right to lodge a complaint with your local data protection authority.

15. Google Play and App Store Disclosures

In compliance with Google Play and Apple App Store requirements, we disclose the following:

• All user data collected by our app is encrypted in transit.
• Users may request deletion of their data by visiting streamind.co/delete-account.
• Our app supports account creation via OAuth (e.g., Google Sign-In, Apple Sign-In).
• We do not share personal data with third parties for advertising purposes.

Our Data Safety disclosures on the Google Play Store and App Privacy details on the Apple App Store reflect the data practices described in this Privacy Policy.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our Website with a revised “Last Updated” date. For significant changes, we may also notify you via email or through an in-app notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

17. Contact Us