Wren is practice support under a speech-language pathologist's direction
Draft terms under review by counsel. Notice version 2026-11.
Who may use Wren
- Schools and districts that authorize it, and the adults they invite: teachers, speech-language pathologists and their assistants.
- Children, only through their own class on a device an adult has set up.
- Parents and carers, through a home link an adult gives them for their own child.
What Wren does
Wren models speech sounds, counts a child's tries and gives gentle feedback, so children can practise between sessions with their speech-language pathologist. It is not a medical device and makes no medical claim. It does not test or screen children or decide anything about their care: a qualified speech-language pathologist does. Automatic scores are estimates, and an adult can mark any try.
What we ask of adults
- Keep PINs, login cards and home links private, and share a home link only with the child's family.
- Enter only what Wren asks for: no surnames, full dates of birth or medical details.
- Use Wren only for the children in your own classes.
The school's data
A school's records about its children stay the school's. Wren uses them only to run the practice, as the privacy notice describes, and deletes them on the school's request.
A service in beta
Wren is in its beta. Features change, and updates are made outside school hours, when the app can be unavailable for a few minutes.
Stopping
A school can stop using Wren at any time. A class is deleted 30 days after it is archived, or within 30 days of a request on the delete data page.
Contact
Wren is run by Muscoota Ventures LLC. Write to privacy@muscoota.com.
How long data is kept
Wren runs on Render in the United States. Microsoft Azure Speech scores each try and keeps nothing, Cloudflare stores the encrypted backups, and Anthropic drafts adults' progress notes only when a school switches Claude on, which is off in the beta. The privacy notice says more.
Show how long each kind of data is kept
Your child's voice on each try
Not kept
Scored in the server's memory and released at once, never written to a disk or the browser
The Hear me replay of the last try
The current try only
Held in the device's memory and cleared at the next word or when the child leaves
Research recordings, kept only with a parent's separate research consent, with the raters' ratings and play log
The study's retention period, then deleted; at once if the consent is withdrawn
An encrypted store outside the app's disk and backups; deleted nightly and on withdrawal
Practice records: sessions, tries and their scores, adults' marks, progress, approvals, flags and progress notes
The end of the school year they last changed in, plus 90 days
Deleted nightly once that date passes; a sound pattern flagged for a speech-language pathologist stays until they review it
A child's profile and targets: nickname, avatar and secret picture, birth month and year, dialect, languages and support settings
Until the child or class is archived, then 30 days, or within 30 days of a school's request
Deleted nightly 30 days after archiving; the operator deletes on request
Classes: name, class code, time zone and the school's consent record
Until the class is archived, then 30 days
Deleted nightly 30 days after archiving, with every child in it
Practice and research consent records
As long as the child's profile; a withdrawn consent until the end of that school year plus 90 days
Deleted with the child, or nightly once a withdrawn consent's date passes
Home links and the grown-ups who open them: reminder days and time, suggested languages and an opt-in contact
30 days after the link expires or is turned off
The contact is cleared when the link ends, and the rest deleted nightly 30 days later
Adult accounts: email, display name and a hashed PIN
Until deletion is requested, or after 24 months without signing in
Deleted nightly after 24 months without a sign-in; the operator deletes on request
Which adults belong to which class, and their role
While they belong; after leaving, until the end of that school year plus 90 days
Deleted with the class or the adult, or nightly once that date passes
Permissions for supervised scorers to mark a child's tries
While granted; after revoking, until the end of that school year plus 90 days
Deleted with the child or the adult, or nightly once that date passes
Invite codes for adults, stored hashed
30 days after the code is used or expires
Deleted nightly
School and caseload names
While a class or adult belongs to them
Deleted nightly once nothing belongs to them and they are 30 days old
Research rater accounts: email, display name and a hashed PIN
Until revoked and none of their ratings remain
Deleted nightly once both are true
Product event log: the kind of event, its day, the age band and a count, never a child, a session or a time of day
90 days
Deleted nightly
Audit log: the action, the role, record ids and the time, never names or content
Kept while the service runs
It holds no names, contacts or content, so a deleted record's ids identify no one
Scheduled job log: when each nightly run started and finished, and its counts
1 year
Deleted nightly
Speech engine versions, accuracy checks per sound and the cache of spoken words, with no child or adult details
Kept while the service runs
They hold no personal details
Server logs, never with request bodies, audio or names
At most 30 days
The host's log retention
Encrypted backups of the database
Deleted within 36 days
Off-site copies expire after 35 days, so a deletion reaches the backups when they do
Microsoft Azure Speech: the audio of one try and its word, with no names or ids
Not kept
Processed in memory with audio logging turned off
Anthropic Claude, when switched on (off in the beta): numbers and dates for a progress note, never audio, names or notes
Up to 30 days at Anthropic
Anthropic's API retention