Privacy Policy

Effective: October 14, 2026

Logu (“we”, “our”, “the service”) is a web application for speech-language pathologists (SLPs) to create therapy materials and run sessions with students. This policy explains what information we collect, how we use it, and the choices you have.

1. Who uses Logu

Logu is used by licensed speech-language pathologists and other therapy professionals (“therapists”). Therapists create accounts and use the service to prepare and run therapy activities. Students do not create accounts and do not enter any personal information into Logu.

2. Information we collect

Therapist account information

Name and email address — provided when you create an account, used to identify you and send transactional emails (password reset, email confirmation).
Password — stored as a one-way hash (bcrypt). We cannot read your password.
Two-step login secret — if you enable authenticator-app login, the TOTP secret is stored encrypted.

Content you create

Therapy materials: card decks, lessons, games, and pictures you upload.
Session settings (e.g. prompt level, deck selection) saved so they persist between sessions.

What we do NOT collect

No student names, dates of birth, diagnoses, progress notes, or any other student records.
No audio or video recordings of any kind.
No advertising identifiers, cross-site tracking cookies, or analytics beyond server logs.

3. FERPA

The Family Educational Rights and Privacy Act (FERPA) protects student education records. Logu is designed so that no student education records are ever entered into or stored by the service. Therapists conduct sessions using pre-made materials; no student-identifying information is required or collected. Logu does not function as a “school official” or “education records” system under FERPA.

4. COPPA

The Children's Online Privacy Protection Act (COPPA) applies to the online collection of personal information from children under 13. Logu does not knowingly collect any personal information from children. Only licensed therapist professionals create accounts. If you believe a child has provided us personal information, contact us at info@loguapp.com and we will delete it promptly.

5. How we use your information

To operate and maintain your account.
To send transactional emails you request (password reset, email confirmation).
To keep server logs for security and debugging (IP addresses, request paths, timestamps). Logs are retained for 30 days.

We do not sell, rent, or share your information with third parties for marketing purposes.

6. Third-party services

Resend (resend.com) — transactional email delivery. Only your email address and the email body are sent. Resend Privacy Policy.
YouTube (youtube-nocookie.com) — some therapy materials may embed YouTube videos using YouTube's privacy-enhanced mode, which does not set cookies unless you play the video.

No other third-party analytics, advertising, or tracking services are used.

7. Data storage and security

Your data is stored on a private server in the United States. We use HTTPS for all connections. Passwords are hashed and TOTP secrets are encrypted at rest. We do not store payment card numbers (billing, if enabled, is handled by Stripe).

8. Your rights and choices

Access and correction — you can update your name and email in Account settings.
Delete your account — email us at info@loguapp.com and we will delete your account and all associated content within 30 days.
Export — contact us to request a copy of your data.

9. Changes to this policy

We may update this policy. If we make material changes we will update the effective date above and, if you have an account, send you an email. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions about this policy? Email us at info@loguapp.com.