No recording of a child's voice is kept without a parent's separate consent
A draft under review by counsel. Notice version 2026-11.
Who runs Wren
Wren is a speech-sound practice app that schools, speech-language pathologists and teachers use with children. This notice says what it collects, who handles it and how long it is kept.
Wren is run by Muscoota Ventures LLC. Write to privacy@muscoota.com.
What Wren collects
- About a child: a nickname or first name, an avatar and a secret picture for signing in, birth month and year (never the day), the dialect and languages the child speaks, support settings and speech targets an adult chooses, and practice records: the words tried, how each try was scored and adults' marks.
- About adults: email, display name, a hashed PIN, and the classes they belong to with their role.
- About grown-ups at home who open a home link: reminder days and time, suggested languages and, only if they choose to give one, an email or phone number used for reminders and nothing else.
- A log of product events such as a session starting, with the day, the age band and a count, never a child, a session or a time of day.
Children have no accounts, emails or passwords, and Wren never asks a child for personal information. It collects no photos, full dates of birth, locations or free-text descriptions of a child.
A child's voice
When a child says a word, the recording of that one try goes to Wren's server and to Microsoft Azure Speech in the United States. It is scored in memory and released at once; Microsoft's audio logging is off. The Hear me button replays the last try from the device's memory only.
No voiceprint is made: Wren never identifies anyone by their voice.
A recording is kept only for a research study a parent has agreed to in a separate consent. It is encrypted, stored apart from the app and its backups, heard only by the study's raters, deleted at the end of the study's retention period, and deleted at once if the parent withdraws.
Who else handles data
Render
Hosts the app and its database in the United States
Everything this notice lists, encrypted at rest
Microsoft Azure Speech
Scores each try and voices the model words, in the United States
The audio of one try and its word, with no names or ids; nothing is kept
Cloudflare
Runs the domain, forwards email and stores the off-site backups
Backups encrypted before they leave the server, which Cloudflare cannot read
Anthropic
Claude drafts adults' progress notes, only when a school switches it on; it is off in the beta
Numbers and dates only, never audio, names or notes
Wren shows no ads and loads no analytics, tracking or third-party scripts. It does not sell data or use it to train AI models.
How long data is kept
Your child's voice on each try
Not kept
Scored in the server's memory and released at once, never written to a disk or the browser
The Hear me replay of the last try
The current try only
Held in the device's memory and cleared at the next word or when the child leaves
Research recordings, kept only with a parent's separate research consent, with the raters' ratings and play log
The study's retention period, then deleted; at once if the consent is withdrawn
An encrypted store outside the app's disk and backups; deleted nightly and on withdrawal
Practice records: sessions, tries and their scores, adults' marks, progress, approvals, flags and progress notes
The end of the school year they last changed in, plus 90 days
Deleted nightly once that date passes; a sound pattern flagged for a speech-language pathologist stays until they review it
A child's profile and targets: nickname, avatar and secret picture, birth month and year, dialect, languages and support settings
Until the child or class is archived, then 30 days, or within 30 days of a school's request
Deleted nightly 30 days after archiving; the operator deletes on request
Classes: name, class code, time zone and the school's consent record
Until the class is archived, then 30 days
Deleted nightly 30 days after archiving, with every child in it
Practice and research consent records
As long as the child's profile; a withdrawn consent until the end of that school year plus 90 days
Deleted with the child, or nightly once a withdrawn consent's date passes
Home links and the grown-ups who open them: reminder days and time, suggested languages and an opt-in contact
30 days after the link expires or is turned off
The contact is cleared when the link ends, and the rest deleted nightly 30 days later
Adult accounts: email, display name and a hashed PIN
Until deletion is requested, or after 24 months without signing in
Deleted nightly after 24 months without a sign-in; the operator deletes on request
Which adults belong to which class, and their role
While they belong; after leaving, until the end of that school year plus 90 days
Deleted with the class or the adult, or nightly once that date passes
Permissions for supervised scorers to mark a child's tries
While granted; after revoking, until the end of that school year plus 90 days
Deleted with the child or the adult, or nightly once that date passes
Invite codes for adults, stored hashed
30 days after the code is used or expires
Deleted nightly
School and caseload names
While a class or adult belongs to them
Deleted nightly once nothing belongs to them and they are 30 days old
Research rater accounts: email, display name and a hashed PIN
Until revoked and none of their ratings remain
Deleted nightly once both are true
Product event log: the kind of event, its day, the age band and a count, never a child, a session or a time of day
90 days
Deleted nightly
Audit log: the action, the role, record ids and the time, never names or content
Kept while the service runs
It holds no names, contacts or content, so a deleted record's ids identify no one
Scheduled job log: when each nightly run started and finished, and its counts
1 year
Deleted nightly
Speech engine versions, accuracy checks per sound and the cache of spoken words, with no child or adult details
Kept while the service runs
They hold no personal details
Server logs, never with request bodies, audio or names
At most 30 days
The host's log retention
Encrypted backups of the database
Deleted within 36 days
Off-site copies expire after 35 days, so a deletion reaches the backups when they do
Microsoft Azure Speech: the audio of one try and its word, with no names or ids
Not kept
Processed in memory with audio logging turned off
Anthropic Claude, when switched on (off in the beta): numbers and dates for a progress note, never audio, names or notes
Up to 30 days at Anthropic
Anthropic's API retention
Parents' rights
A parent or carer may see their child's practice records, ask that their child stop using Wren, or ask for everything about their child to be deleted. Ask the child's teacher or school, or the operator directly; a deletion is done within 30 days. How to ask for a deletion
Who agrees to this
A school or district authorizes Wren for its own educational purpose, as the US children's privacy law, COPPA, allows; an administrator signs, never a teacher alone. A research recording needs a parent's own consent as well. A school is told before any change to this notice or to the companies that handle data.