Privacy Policy

Last updated: March 12, 2026

1. Introduction

Canary Speech, Inc. ("Canary Speech," "Canary Wellness," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Canary Wellness Employee Wellness platform, including our website, SMS messaging program, voice assessment tools, and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information provided by your employer:

• Name and email address
• Mobile phone number
• Employee identifier
• Job role, division, and location (if provided)

Information you provide directly:

• Phone number submitted through the SMS opt-in form
• Voice recordings submitted during wellness assessments
• Consent records (date, time, and source of opt-in)

Information collected automatically:

• SMS delivery and response data (e.g., opt-in, opt-out, HELP requests)
• Assessment completion timestamps
• Device type and browser information when accessing web-based assessments

3. How We Use Your Information

We use the information we collect to:

• Deliver wellness check-in invitations, appointment reminders, and account notifications via SMS
• Process and analyze voice recordings to generate wellness insights using our patented voice-biomarker technology
• Provide aggregated, de-identified wellness reports to your employer
• Manage your SMS consent preferences (opt-in, opt-out, HELP requests)
• Improve and maintain the performance and security of our Services
• Comply with legal obligations

4. How We Protect Your Information

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS) and at rest
• Role-based access controls limiting who can view personal data
• Infrastructure hosted on Microsoft Azure with enterprise-grade security certifications
• Regular security assessments and monitoring

5. Individual Wellness Results

Your individual voice assessment results are confidential. Your employer receives only aggregated, de-identified data showing organizational wellness trends. Individual results are never shared with your employer, manager, or coworkers without your explicit consent.

6. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service providers: We use trusted third-party services (e.g., Azure cloud infrastructure, SMS delivery providers) that process data on our behalf under strict contractual obligations
• Employer (aggregated only): Your employer receives only de-identified, aggregated wellness reports
• Legal requirements: We may disclose information if required by law, regulation, or legal process
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction

7. SMS-Specific Privacy Practices

For our SMS messaging program:

• Your phone number is used solely to deliver messages related to the Canary Wellness program
• We store your phone number and consent record (date, time, source) to comply with carrier and regulatory requirements
• We do not share your phone number with third parties for marketing purposes
• SMS opt-in data and consent are not shared with or sold to third parties
• You can opt out at any time by replying STOP
• Reply HELP for support or contact support@canaryspeech.com

8. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy. Specifically:

• Account and contact information is retained while your employer maintains an active subscription
• Voice recordings are processed and may be retained for analysis improvement, in de-identified form
• SMS consent records are retained for a minimum of 5 years to comply with carrier and regulatory requirements
• Upon termination of your employer's subscription, personal data is deleted within 90 days unless retention is required by law

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of SMS messages at any time by replying STOP
• Withdraw consent for data processing

To exercise any of these rights, contact us at support@canaryspeech.com.

10. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Services after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us