Skip to content
TalkPebble
Legal

Security

TalkPebble: Speech & Language — how we protect accounts and information on our website and in the mobile app.

Last updated: September 1, 2026

1. Overview

TalkPebble takes reasonable administrative and technical measures appropriate to the nature of the information we handle. This page summarizes our security practices. Related details are in our Privacy Policy.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

2. Accounts and Authentication

Parent accounts are created in the mobile app. Passwords are stored hashed on our servers. You may sign in with email and password or with Google (where available). Accounts created with Google may not have a TalkPebble password until you add one in a future update. API requests from signed-in users are authenticated with tokens presented by the app; on mobile devices, access and refresh tokens are stored in the device's secure storage (not in ordinary app storage).

You are responsible for keeping your login credentials confidential and for activity under your account. Notify us at info@talkpebble.com if you suspect unauthorized access.

3. Transport and Storage

  • Production API traffic uses encrypted transport (HTTPS/TLS)
  • Staff admin tools on the website use cookies solely for authenticated staff access
  • Some information (for example vocabulary lists, goals, and daily check-ins) may be stored primarily on your device
  • Account, profile, and Communication Check data may be stored on our servers so you can use the app across sessions
  • Activity completion records may be stored on our servers and tied to your child profile

4. Push Notifications

Optional push notifications use a device push token registered with our servers when you allow notifications and are signed in. You can turn off daily reminders in Profile or disable notifications for TalkPebble in your device settings. Push messages are sent through our push provider; we do not use notifications for advertising.

5. Service Providers

We use service providers (for example website hosting, API hosting, database hosting, and analytics) to operate TalkPebble. They process information only as needed to provide their services to us. See our Privacy Policy for categories of providers.

6. What We Ask of You

  • Use a unique password you do not reuse on other services
  • Do not share your account with others
  • Keep the app and your device software up to date
  • Sign out on shared devices

7. Reporting a Concern

If you believe you have found a security issue, or if you suspect unauthorized access to an account, contact us at info@talkpebble.com with the subject line Security.

8. Contact

TalkPebble: Speech & Language
Website: https://talkpebble.com
Email: info@talkpebble.com