Privacy Policy

Last updated: March 2026

1. Introduction

SLPMate ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the SLPMate platform ("the Service").

We are registered in the United Kingdom and this policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

SLPMate is the data controller for personal data collected through the Service. If you have any questions about how we handle your data, please contact us at privacy@slpmate.com.

3. Data We Collect

3.1 Account Data

When you register for SLPMate, we collect:

Your name and email address
Your professional details (title, clinic name, specialisations)
Your password (stored in encrypted form — we cannot access it)

3.2 Practice Data

When you use the Service, you may enter data about your clients, including:

Client names, ages, and contact information
Session notes, goals, and activity results
Diagnoses and clinical observations
Billing records

You are the data controller for client data. We act as a data processor on your behalf. You are responsible for ensuring you have the appropriate legal basis to store this information in the Service.

3.3 Usage Data

We may collect technical data about how you use the Service, including browser type, device information, and feature usage. This data is used to improve the Service and is not linked to individual client records.

4. How We Use Your Data

We use your personal data to:

Provide and maintain the Service
Process your subscription payments
Send you service-related communications
Respond to your support requests
Improve and develop the Service

We do not use your data or your clients' data for advertising, marketing to third parties, or any purpose other than providing the Service.

5. Legal Basis for Processing

We process your personal data under the following legal bases:

Contract: Processing necessary to provide the Service you have subscribed to
Legitimate interests: Processing necessary to operate, maintain, and improve the Service
Legal obligation: Processing required to comply with applicable law

6. Data Storage and Security

Your data is stored securely using Supabase, a database platform with encryption at rest and in transit. Our servers are located in the European Union.

We implement the following security measures:

Encryption of data in transit using TLS
Encryption of data at rest
Row-level security ensuring each user can only access their own data
Secure authentication with password hashing

Despite these measures, no method of internet transmission or electronic storage is completely secure. You use the Service at your own risk.

7. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, we will retain your data for 30 days to allow you to export it, after which it may be permanently deleted.

You may request deletion of your data at any time by contacting us at privacy@slpmate.com.

8. Data Sharing

We do not sell, rent, or trade your personal data or your clients' data to any third party.

We share data only with the following third-party service providers:

Supabase (database and authentication) — supabase.com/privacy
Vercel (hosting and deployment) — vercel.com/legal/privacy-policy

Each provider is contractually bound to process data only on our instructions and to maintain appropriate security measures.

9. International Transfers

Your data may be processed in countries outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of the data we hold about you
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your data
Right to restrict processing: Request that we limit how we use your data
Right to data portability: Request your data in a machine-readable format
Right to object: Object to certain types of processing

To exercise any of these rights, please contact us at privacy@slpmate.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Cookies

SLPMate uses only essential cookies and browser local storage necessary for the Service to function, including authentication session management. We do not use tracking, advertising, or analytics cookies.

12. Healthcare Data

SLPMate is not currently certified as HIPAA compliant, PIPEDA compliant, or compliant with equivalent healthcare data protection legislation in Australia. If you are subject to these laws, you are solely responsible for ensuring your use of the Service complies with them. We strongly recommend obtaining independent legal advice before storing identifiable patient data in the Service.

13. Children's Data

SLPMate is designed for use by adult healthcare professionals. SLP practitioners using SLPMate are responsible for ensuring they have appropriate consent and legal authority to store data about their minor clients.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice within the Service.

15. Contact Us

For any privacy-related questions or to exercise your rights, please contact:

SLPMate — Privacy Team

Email: privacy@slpmate.com

Website: slpmate.com