Privacy Policy

nanoGOAT LLC ("nanoGOAT," "we," "us," or "our") builds nanoGOAT AAC as a local-first communication app for children, families, caregivers, educators, clinicians, and other AAC users. Our current app design keeps AAC content on your device. The app sends information off the device in two limited ways: diagnostic reporting through Sentry, and, only when you choose to download a content package, the download request itself, which we count by package and day.

This Privacy Policy explains what leaves the device, what stays local, and how we handle any information you choose to send us directly. Website account, waitlist, and browser practices are also described in the Website Privacy Policy.

No account is needed to use the AAC app. Optional website accounts are separate from local communicator profiles and do not upload or sync AAC content. The current AAC app has no cloud sync. nanoGOAT Parent is a separate product with its ownPrivacy Policy. Parent's cloud sync does not sync content from the AAC app.

1. What Stays on Your Device

The current nanoGOAT AAC app stores AAC data locally on your device. This includes:

• Communication boards, button labels, button actions, colors, layouts, and navigation links
• Stories, story pages, starter content, and imported AAC content
• Custom symbols, photos, thumbnails, and image cache data
• Communicator names, profiles, preferences, themes, and app settings
• PIN, lock, kiosk, onboarding, and local device-security settings
• Local audit, export, deletion, and consent records used by the app
• Backup or export files you create and choose where to store or share

We do not currently upload this AAC content to nanoGOAT servers as part of normal app use. If you delete the app data from your device, uninstall the app, or delete an export you created, we do not have a server copy of that local AAC content to recover or delete.

2. Information We Collect Automatically

2.1 Sentry Crash and Error Diagnostics

When Sentry is enabled for a released app build, Sentry may send us diagnostic events when the app crashes or encounters certain errors. These events help us find and fix reliability problems.

A Sentry diagnostic event may include technical details such as:

• App version, release, environment, and event timestamp
• Device type, operating system, and general runtime information
• Error messages, exception types, stack traces, and related diagnostic context
• Event or session identifiers used to group related crash reports

2.2 Content Package Downloads

We offer ready-made content packages, such as core words and phrases in several languages, that you can add to the app by scanning a QR code or tapping a link, for example onnanogoat.io/aac/languages. Downloading a package is always your choice. The app never downloads one on its own.

When you download a package, your device connects to our content server at aac-gen.nanogoat.io. Like any web server, it receives standard request information: your IP address, the time, the package requested, and basic technical details such as the app or browser making the request. The server uses this information to deliver the package and keep the service running and secure. Server request logs are deleted automatically within 15 days.

We also count downloads so we know which packages and languages families need most. Each count records only the day, the package, whether it was downloaded or its link was opened, and a number. Counts do not include your IP address, device, account, or anything else that identifies a person or device. We never receive the boards, photos, or messages already in your app.

2.3 No Product Analytics

We do not currently run product analytics in the app. We do not track which buttons a user presses for marketing or profiling, and we do not use advertising SDKs. Package download counts measure packages, not people.

3. Information You Choose to Send Us

The app's off-device collection is limited to Sentry diagnostics and the content package downloads you choose to make, described in Section 2. Separately, you may choose to send information to nanoGOAT outside the local app. For example, if you email us, request support, join a waitlist, create a website account, or use a password reset flow, we receive the information needed for that request, such as your email address, name, authentication provider details, and the message or request you submit.

Please do not include sensitive AAC content, medical information, or a child's personal information in a support message unless it is necessary for your request. We use voluntary communications only to respond, manage the requested account or waitlist action, and maintain our records.

4. How We Use Information

We use the limited information described above to:

• Find, diagnose, and fix app crashes and errors
• Improve app stability, compatibility, and security
• Deliver the content packages you download, and use download counts to decide which packages and languages to offer and improve
• Respond to support requests or messages you send us
• Operate website account, waitlist, or password reset features when you choose to use them
• Comply with legal obligations and protect the safety and security of nanoGOAT and our users

We do not use AAC content for advertising, profiling, sale, rental, or trade, and we do not monetize children's data. The only in-app promotion is a first-party suggestion about our own product for parents (for example, nanoGOAT Parent), shown in a parent-controlled area — it uses no child data and is not advertising to children.

5. How We Share Information

We do not sell, rent, or trade personal information. We share information only in limited circumstances:

• Sentry: We use Sentry as our crash and error diagnostic provider. Sentry processes diagnostic events for us.
• Hosting: Our content download server is hosted by DigitalOcean, which processes the download requests it receives for us.
• Website and account service providers: Providers that operate website hosting, authentication, email, waitlist, or support workflows may process information you voluntarily submit for those purposes.
• App stores: If you download nanoGOAT AAC through Apple, Google, Amazon, or another app marketplace, that marketplace handles your account, download, purchase, and device information under its own privacy policy.
• Legal and safety reasons: We may disclose information if required by law or if necessary to protect the rights, property, or safety of nanoGOAT, our users, or the public.
• Business transfers: If nanoGOAT is involved in a merger, acquisition, financing, or sale of assets, relevant records may transfer as part of that transaction, subject to this policy or a successor policy with notice where required.

6. Children's Privacy

nanoGOAT AAC is designed for use by children with involvement from parents, guardians, caregivers, educators, or clinicians. The current app does not require anyone to create an account, provide an email address, or send AAC content to nanoGOAT servers.

Sentry diagnostic events are technical app reliability reports. We do not intentionally send children's names, board content, photos, messages, or protected health information to Sentry.

A content package download sends no child information. The request carries the device's IP address, as any internet request does. We use it only to deliver the package and to keep the server running and secure, never to identify, contact, profile, or advertise to anyone. We delete it within 15 days. Download counts contain no identifiers.

Please see our COPPA Compliance Policyfor more information about children's privacy commitments.

7. Health and Therapy Information

nanoGOAT AAC is a communication tool, not a medical device. The app may be used in therapeutic, educational, or caregiving settings. People can put sensitive information into their own boards and photos. Local storage does not change the sensitivity of that content. The app is not designed to serve as a medical record system.

Because AAC content stays local in the current app, we do not have access to therapy notes, communication boards, spoken phrases, custom photos, or progress records unless you separately choose to send information to us.

8. Security and Retention

Local AAC data is protected by your device's security features and any app-level lock settings you enable. You are responsible for choosing where to store or share any backup or export files you create.

We keep Sentry diagnostics and voluntary communications only as long as needed for reliability, support, security, legal, and business record purposes. Because AAC content stays on your device, nanoGOAT cannot remotely delete, restore, or modify local app data for you.

Content packages are downloaded over encrypted connections (HTTPS) and are digitally signed, so the app can check that a package came from nanoGOAT. Content server request logs are deleted automatically within 15 days. Download counts identify no one, and we keep them as long as they help us decide which content to offer.

9. Your Choices and Rights

You control the AAC content stored in the app. You can edit or delete local boards, buttons, stories, profiles, photos, and settings using app controls, device storage controls, or by uninstalling the app.

You may contact us to request access, correction, deletion, or other help with information you have sent to us directly, such as support messages, waitlist records, or website account information. We honor applicable privacy rights, including rights available under Colorado, California, and other privacy laws where they apply.

We do not sell personal information, use targeted advertising, or profile users for decisions that produce legal or similarly significant effects.

10. Future Features

If nanoGOAT introduces cloud sync, sharing, product analytics, accounts that store AAC content, or any other feature that changes what information leaves your device, we will update this policy before that collection begins and provide any required notice or consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and provide additional notice when required by law.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise privacy rights, please contact us:

We will respond to privacy requests within the timeframe required by applicable law.