Student privacy and data at PrepPal

An online tool for speech-language pathologists: therapy materials and games for each student's goals, AAC core boards, a caseload scheduler, session data and notes, a service log for IEP minutes, and SMART goal and treatment plan drafts. Accounts belong to adult professionals.

Names, birthdates, student ID numbers, addresses, photos, disability or diagnosis records, IEP documents or parent contact details. PrepPal has no place to upload student records.

PrepPal's forms remind SLPs to use initials only. A free-text box can't stop someone from typing a name, so SLPs are asked never to.

Kept in the SLP's own web browser:

• The caseload: student initials, grades, goals, IEP service minutes, schedules and groups
• Session data (correct and incorrect trials, cue levels), session notes and progress graphs
• The service log: attendance, minutes given, make-ups, meetings, and IEP and re-evaluation dates
• Student initials on any saved work

Optional encrypted saving. To use the caseload on more than one device, an SLP can turn on “Save to my account”. The browser then encrypts the whole caseload (AES-256-GCM, with a key made from the SLP's passphrase using PBKDF2) before it is sent. PrepPal stores only the encrypted copy, plus when and from which kind of device it was saved. The passphrase never leaves the SLP's device, so PrepPal can't read the caseload or reset a forgotten passphrase. Turning saving off deletes the encrypted copy.

Without it, the caseload lives only in that browser, and clearing browser data deletes it. SLPs can download spreadsheets of their session data and service log to keep with their own records.

• The SLP's account: name, email address and plan. Passwords are handled by our login provider and never stored in plain text.
• Encrypted caseload (only if the SLP turns it on): a copy PrepPal can't read, as described above.
• Saved work: materials, games, core boards, stories, saved goals and treatment plans, so they're available on the SLP's devices. Student initials are replaced with “[Student]” before saving.
• Devices: a random device ID and a label like “Chrome on Mac”, to limit each account to two devices.
• Feature use: which tools are used and when, to keep the service running. These records contain no student information.
• Billing: plan and subscription status. Card payments are handled by Stripe; PrepPal never sees full card numbers.

When an SLP asks PrepPal to make something (a worksheet, game words, a SMART goal, a treatment plan), the request is sent to Anthropic (Claude) to write the content: the goal, target sounds or skills, theme, grade or age and settings. Any student initials are swapped for a placeholder in the SLP's browser first, so they are never sent.

Pictures are drawn by OpenAI from single words (for example “rabbit”). Most pictures come from PrepPal's existing picture bank.

Under their business terms, these providers do not use requests sent through their services to train their models. They may keep requests for a limited time to prevent misuse.

Data tracking, session notes, progress graphs and the service log don't use AI. Notes are built only from what the SLP recorded. Everything AI drafts is a starting point for the SLP to review.

• Supabase: sign-in and database (accounts, devices, saved work)
• Vercel: website hosting
• Stripe: payments and billing
• Resend: sign-in codes and account emails
• Anthropic: writing text for materials, goals and plans (no student initials)
• OpenAI: drawing pictures from single words

• Encrypted connections (HTTPS) everywhere
• Sign-in codes emailed for every new device, and a two-device limit per account
• Database access rules so each account can only reach its own data
• Payments processed by Stripe; no card details on PrepPal's servers

• Account and saved work: kept while the account is active.
• After a subscription ends: saved work is kept for 30 days in case the SLP returns, then deleted.
• On request: we delete an account and its saved work within 30 days (billing records we must keep by law excepted). Email support@preppaltherapy.com.
• Student details in the SLP's browser can be deleted by the SLP at any time.

We're glad to review your district's student data privacy agreement and answer your privacy team's questions. Email support@preppaltherapy.com. The full policy is at www.preppaltherapy.com/privacy.

PrepPal is run by Ayaat Quazi.