Valeria+ · Auditory-verbal therapy
Android application eu.futureforkids.valeria
Versión en español · English · Data deletion
This policy explains what personal data the Valeria+ mobile application (“the App”) processes, for what purposes, on what legal basis, who it is shared with, and how you can exercise your rights. It follows Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), and the Google Play Developer Program Policies, including the User Data, Sensitive Permissions and Families policies.
One-line summary: Valeria+ does not sell data, shows no advertising, embeds no analytics or ad-tracking SDKs, and builds no profiles of children. The App collects no data. It has no server and no accounts: what goes in stays on the phone, and only leaves if the adult exports a report and chooses to share it themselves.
| Controller | Dr. Frank Alberto Betances Reinoso — Valeria+ / Future for Kids project |
|---|---|
| Privacy contact | frank.alberto.betances.reinoso@gmail.com |
| Website | https://futureforkids.eu/ |
| Scope | Android app “Valeria+”, package eu.futureforkids.valeria, distributed on Google Play |
Allocation of responsibility in clinical use. When a speech therapist, clinic or association uses Valeria+ to treat patients, that professional or entity is the data controller for the clinical records they enter. The Valeria+ project is not a data processor for that data, because it neither hosts it nor has any access to it: the App sends nothing to any server and the records stay on the phone of whoever writes them. The professional decides what data is entered, how long it is retained and to whom it is disclosed, and is responsible for obtaining informed consent from families. That includes safeguarding the device itself: with no cloud copy, the phone or tablet is the only place the record exists, and its screen lock and encryption are part of the security measure.
Valeria+ supports auditory-verbal therapy and language stimulation. It is designed to be used by a child always accompanied and supervised by an adult — a parent, legal guardian or health professional — and to be configured and administered solely by that adult.
No data leaves this App. Valeria+ has no server, no accounts and no sync: as of version 3.0.0 the code contains no cloud SDK at all — Firebase was removed entirely on 7 September 2026 — and the App makes no network call of its own. Everything the adult enters and everything the session records lives in the phone’s private storage and disappears when the App is uninstalled. The App collects no data. There are only two ways a piece of data can leave the phone, and in neither of them is it the App that sends it: the adult exports a report and chooses who to send it to, and the operating system’s speech recogniser — not the App — processes the speaking-turn audio when the phone cannot recognise it offline. Both are explained below.
Valeria+ therefore separates two categories of data: data that stays on the device and data handled by the operating system.
| Data | What it is used for |
|---|---|
| Patient record: full name, date of birth, medical record number, sex, guardian's name and relationship, contact email and phone, condition or reason for consultation, language the therapy is delivered in and its regional variety, referring physician and speech therapist | Entered by the adult to identify the patient and contextualise the intervention. This includes health data, a special category under Article 9 GDPR. The record exists only on the device: it is kept in the App's private storage and is not sent to any server, because there is none. It leaves the phone only if the adult exports a report and shares it themselves. |
| App preferences (language and dialect variety, noise level, auto-record, reminders) | Remembering the adult's chosen configuration between sessions. |
| Exercise progress, hits and errors within the current session | Showing exercise results and adapting the ongoing session. |
| Professional PIN (stored as a cryptographic digest, never in clear text) | Preventing the child from reaching the administration panel unaided. |
| Augmented Reality exercise measurements: gesture duration in milliseconds, degrees of head turn, dimensionless facial ratios and which picture was looked at, together with the thresholds set by the adult and a technical profile of the phone (make, model, Android version, frames per second and screen millimetres) | Showing the adult what happened in the session and allowing progress to be followed. These are numbers, not images: no video frame is ever stored. The phone's technical profile is recorded because results depend on the device and would not be interpretable without it. Stored encrypted on the device; it leaves the device only if the adult taps “Export” and shares it. |
| Sensory-integration session log: which stimulus was chosen, the relative intensity level and duration set by the adult, whether the session was paused or stopped, and the adult's closing assessment (how the child responded, whether the calming strategy was used, and their free-text notes) | Letting the adult follow the child's auditory tolerance across sessions. It is stored encrypted in the App's private storage and is never sent to any server. The App keeps the 50 most recent sessions. |
| Clinical-pilot usability telemetry: active time per screen, dead taps, drop-outs from an exercise capsule, manually chosen noise level, use of the on-screen aids —for example, how many words of a sentence the microphone picks up in the tally shown during the exercise, which is an aid and not a clinical measure— and SUS usability questionnaire answers | Evaluating the App's usability within the project's clinical pilot. It is stored encrypted in the App's private storage and is never sent to any server: it leaves the device only if the adult explicitly taps “Export” and shares it themselves. After a successful export the log is deleted from the device. |
This data lives in the App's private storage area and is erased when the App is uninstalled or its data is cleared from Android settings.
| Permission | Why it is requested | If you deny it |
|---|---|---|
MicrophoneRECORD_AUDIO |
Voice games (minimal pairs, semantic expansion, Ling test) need to hear the word the child says in order to assess whether it was produced correctly. The microphone is active only during an exercise's speaking turn, with a visible on-screen indicator, and by default does not open automatically: a deliberate action by the adult or child starts listening. | Voice exercises are disabled. The rest of the App keeps working. |
CameraCAMERA |
The Augmented Reality exercises use the front camera as a motion sensor: they measure whether the child rounds their lips, turns their head towards a sound or holds their gaze on a picture, and those gestures are what make the 3D figures react. The camera is active only inside one of those exercises, with the image visible on screen and the system indicator showing, and it switches off on exit. The App does not record, store or upload any image or video: each frame is analysed on the device itself and discarded immediately; only numeric measurements are kept (degrees of turn, milliseconds, ratios). No biometric identification takes place: facial points are used to measure motor behaviour, never to recognise or identify a person. | The Augmented Reality block does not appear. The other six therapy blocks work exactly the same. |
| Speech recognition (system service) |
The App hands the speaking-turn audio to a speech recognition service installed on the device and receives the recognised text back, which it compares against the expected word. The App asks for that recognition to run on the device itself, offline, whenever the phone and the speech variety in use allow it; where that is not possible, the usual recognition service is used and it may process the audio on its servers. The “Voz de la app” card shows which of the two modes is active. See the box on voice recordings below. | Spoken production cannot be scored automatically; the adult can still score manually. |
NotificationsPOST_NOTIFICATIONS |
Sending local practice reminders at the time the adult configures. They are generated on the device itself; there are no push notifications from project servers. | No reminders are received. Nothing else is affected. |
InternetINTERNET |
The App does not use it for anything of its own. There is no server to call: exercises, pictograms and voices are bundled and work offline. It only comes into play if the system speech-recognition service decides to process the audio over the network (row above). | — |
About the camera in the Augmented Reality exercises. These three statements are not declarations of intent: they are design constraints of the code, verifiable in the project's public repository.
Were a video-recording feature ever added, this statement would cease to be true and the policy would be updated before that version was published.
About voice recordings. Valeria+ does not store, replay or upload any audio file of the child to its servers. Audio is processed ephemerally during the speaking turn and discarded; the App keeps only the outcome of the assessment (hit or miss).
Where that audio is recognised. The App asks the system to perform speech recognition on the device itself, so that the child's audio does not leave the phone. This is not stated as a universal guarantee, because it is not one: it depends on two conditions the App does not control — that the device is capable of offline recognition, and that the relevant language pack has been downloaded. The decision is made separately for each speech variety: the pack is commonly available for Castilian Spanish, and considerably less likely for Galician and Basque.
Where on-device recognition is unavailable, the App continues to work using the operating system's speech recognition service — typically Google's — and that service may process the audio on its own servers under its own privacy policy, which is outside Valeria+'s control. This is a deliberate choice: interrupting a rehabilitation exercise on these grounds would harm the child more than the problem it seeks to avoid.
The App always shows which of the two modes is in use for the active variety, in the “Voz de la app” card, and offers to download the offline language pack where the device supports it.
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the App's therapeutic and language-practice features | Performance of the relationship with the user (Art. 6(1)(b)) and legitimate interest in operating the service (Art. 6(1)(f)). |
| Processing patients' health data in the context of speech therapy | Explicit consent of the data subject or their legal representative (Art. 9(2)(a)) or, where applicable, healthcare provided by a professional bound by professional secrecy (Art. 9(2)(h)). Obtained by the responsible professional. |
| Measuring facial gestures with the front camera in the Augmented Reality exercises (lip posture, head turn, gaze fixation) | Explicit consent of the child's legal representative, obtained in the App before the camera is enabled for the first time (Art. 6(1)(a)). Processing is limited to motor-behaviour measurements and does not aim to uniquely identify a natural person, so it does not constitute processing of biometric data under Art. 9(1) GDPR; where the measurements form part of a speech-therapy intervention, Art. 9(2)(h) also applies. |
| Collecting usability telemetry within the clinical pilot | Consent (Art. 6(1)(a)) and legitimate interest in usability research and improvement (Art. 6(1)(f)). The data concerns interface use, not clinical content, and never leaves the device unless manually exported. |
| Sending local practice reminders | Consent, expressed by granting the notification permission and setting a schedule (Art. 6(1)(a)). |
Valeria+ shares data with nobody. It does not sell or transfer personal data, it sends none to any server — there is none — and it embeds no third-party component that transmits anything of its own accord. So that the boundary is clear, these are the only three situations in which a piece of data can end up off the phone, and in none of them is it the App that sends it:
The project makes no international data transfer at all, because it sends data to no server, its own or a third party’s. The only possible egress is the speech-turn audio when the operating system’s recognition service processes it; that processing is carried out by its provider — usually Google — under its own privacy policy and its own transfer safeguards, external to Valeria+.
No system is infallible: if you find a vulnerability, please report it following the procedure in SECURITY.md.
Since the project holds no data of yours — there is no server — the fastest route for access, rectification, erasure and portability is the App itself: the data is on your device, where you can view and edit it, export it, and erase it completely by uninstalling the App or clearing its data from Android settings. For anything else, and for the rights of restriction and objection or to withdraw consent, write to frank.alberto.betances.reinoso@gmail.com. We respond within one month at the latest.
If the data concerns a patient record created by a speech therapist or a clinic, please contact that professional or entity first, as they decide over that data.
You have the right to lodge a complaint with the Spanish Data Protection Agency or your country's supervisory authority.
Instructions to delete your account and data are on the data deletion page.
Valeria+ processes children's data only when a responsible adult — a parent, legal guardian or authorised health professional — enters it into the App. The App does not request data directly from the child and does not let them register, publish content or communicate with third parties. There is no advertising directed at children and no profiling with legal or similarly significant effects.
If this policy changes materially, this page will be updated with a new “last updated” date and, where the change warrants it, a notice will be shown inside the App. The full change history is available in the project's public repository.
For any question about this policy or data processing in Valeria+:
frank.alberto.betances.reinoso@gmail.com