Donate
HomeAboutResearchDonateLighthouse AACDonate
Lighthouse AAC

Lighthouse AAC Privacy Policy

What Lighthouse collects: nothing leaves your device unless you choose to send it.

Last updatedJune 2, 2026

Lighthouse AAC runs entirely on your family's device. It has no user account, no login, no advertising, no analytics or tracking of any kind, and no automatic crash reporting. No server we operate receives your child's communication. Because the app is open source (MIT, on GitHub), you can verify every claim on this page against the code.

What stays on the device, and never leaves.

Everything your child and you create stays on the device and is never transmitted to us or anyone else:

  • Your child's communication activity: the words and buttons they tap, and the on-device learning that gently surfaces their most-used words.
  • Your customizations: custom buttons and their images, home favourites, board layout, and any vocabulary boards you import.

We deliberately exclude all of this from your device's cloud backup, so it does not sync to your Apple or Google account. Only basic app settings (such as your language and navigation choices) are part of your device's standard backup, and those contain nothing your child has communicated.

Because this data never reaches us, Kinder Horizon Foundation is not the holder of it. It stays under your control on your device, and you can erase it at any time by clearing the app's data or uninstalling.

If you record a custom voice.

An upcoming feature will let you, the parent, record a short voice clip with your device's microphone to set the spoken word for a button. The feature is not active yet. If you choose to record one, here is how it is handled:

  • It stays on your device. If you record a custom voice for a button, the recording is saved only on your device. It is never transmitted to us or to any third party.
  • It is never used for anything else. A recording is not used for any analytics, and it is never included in a crash report or in feedback you send. Audio is not something we collect.
  • Only a grown-up can record. Recording is available only to an adult, behind a parental gate, so a child cannot start a recording on their own.
  • You stay in control. You can delete or replace a recording at any time.
  • Your own backup may include it. A recording may be part of your device's own backup, for example iCloud or Google backup. That copy lives in your account, not with us, and is not data we receive.

What you can choose to send (and nothing is sent automatically).

There are four things you, the parent, can deliberately choose to send. In each case you decide what to share and where it goes:

  • Sending a crash report. If something goes wrong, you can open Settings and send a technical error report. It contains the app version and build, your device model and operating-system version, your language setting, the time of the error, the error itself (its type, message, and code trace), and a few diagnostics about the app's own state at that moment (the last screen that was open, the size of the on-device database, and indicators of whether the learning data was healthy). When you tap Send, the app opens an email addressed to bugs@kinderhorizon.org with the report attached; you can review or change it first, and nothing is sent until you send that email from your own mail app, so it is never sent to us automatically. You can view the exact contents on the "View crash logs" screen beforehand. The app is built not to record the words your child taps, and none of these fields is your child's words or messages.
  • Sharing a vocabulary board. You can share a board you have built with another family using your device's share screen. You choose the recipient.
  • Checking for content updates. The app includes a "Check for updates" action in Settings that you can tap to receive corrected words, pictures, or sounds. When you tap it, the app sends only its own version number to our update service over a secure connection, so it can tell whether newer content is available. It sends no device identifier, no usage information, and nothing about your child. The app never checks for updates on its own; it does so only when you tap.
  • Sending feedback. Settings includes a "Send feedback" form. If you choose to use it, then when you tap Send the app transmits, over a secure connection: the message you typed and the category you chose (bug, suggestion, or other), an email address only if you chose to provide one, basic technical details (the app version, your device's operating-system version, and your language setting), and a random reference number generated for that one submission, which identifies nothing and is never stored as a device or installation identifier. It sends nothing about your child or their boards. Your message is delivered to a Kinder Horizon Foundation inbox and handled by our staff; it is not stored in any database, and the content of your message is not written to any log. This information is processed in Canada. The message, and any email you provide, are your own information that you choose to send.

Children.

Lighthouse exists for non-speaking children. The app runs on your device, requires no account, contains no analytics, and does not transmit your child's data. We do not knowingly receive personal data about a child, because the app is designed so that a child's communication never leaves the device.

Data controller and contact.

Kinder Horizon Foundation, a British Columbia Society (S0085100), Langford, British Columbia, Canada. For any privacy question, write to privacy@kinderhorizon.org. We answer personally and respond within 30 days.

Your rights.

Most data Lighthouse handles never reaches us, so it is not ours to produce or delete. You control it directly on your device. For anything you do choose to send us (for example, if you email us a crash report, send feedback in the app, or contact us), you have the GDPR and UK GDPR rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Write to privacy@kinderhorizon.org to exercise them. You also have the right to lodge a complaint with a supervisory authority (in the UK, the ICO; in the EU, your national authority; in Switzerland, the FDPIC). Feedback you send through the app reaches our inbox and is not stored in any database, so beyond that inbox there is no standing record to extract; the route for any request about it is privacy@kinderhorizon.org.

If you do email us (for example, a crash report), we keep that correspondence only as long as needed to handle it and for a reasonable period afterward, typically up to two years, the same as other email you send us.

Email privacy@kinderhorizon.org