AbilityMosaic — last updated 22 August 2026
AbilityMosaic uses a parent email account for sign-in and can synchronize an encrypted event history between approved household members. Child records are encrypted on the device before upload. Recordings remain on the phone in this release. There is no advertising or behavioural analytics.
The account service stores the parent's normalized email address, household membership and role, session metadata, encrypted key envelopes, encrypted event batches, byte counts and synchronization times. It does not receive plaintext child names, dates of birth, diagnoses, goals, words or logs. There is no advertising identifier, crash-reporting SDK or usage analytics.
Notes, words, activity history, sleep logs and settings remain in your browser's database. When encrypted sync is enabled, append-only events are encrypted with a household key on the device and ciphertext is stored in Cloudflare D1. Video and audio recordings remain only on each device.
The household decryption key is not held by Cloudflare, Resend or the app operator. Save the recovery key. Email can restore account access, but it cannot decrypt records without that recovery key or another approved device.
The app can write everything to a single file that you keep. You choose where it goes. If you set a passphrase, the file is encrypted on your device before it is written; the passphrase is never stored and cannot be recovered. A backup made without a passphrase can be read by anyone who opens the file, so keep it somewhere private.
Nothing is shared automatically. If you choose to send a clip or a summary to a therapist, that happens through whatever app you pick — a messaging app, email, or by showing them your screen — and that app's own privacy terms then apply to what you sent. The choice, and the moment, are yours.
Search in this deployment uses the activity library stored with the app. It does not send search text to a server. Some development builds have an optional on-device search helper; the public Cloudflare deployment does not offer or download it.
Cloudflare hosts the app, account API, sessions and encrypted event ciphertext. Resend sends one-time codes and invitation emails. Cloudflare Turnstile checks requests for automated abuse. These services process ordinary request metadata such as IP address and browser headers. Local use works offline; sign-in and synchronization require a connection.
This app is used by a parent or carer and holds information about a child. Synchronized child events leave the device only as AES-GCM ciphertext. Account providers process parent account metadata, not readable child records. There is no profiling or behavioural advertising.
There is no advertising, analytics SDK, social login or payment processor. Cloudflare provides hosting, encrypted storage and Turnstile; Resend provides transactional email.
Settings has a Delete everything button for local data.
Household owners will also receive an account deletion control for D1
ciphertext and account metadata before migration mode becomes mandatory.
Removing local data does not by itself delete synchronized ciphertext.
If this policy changes, the date at the top changes with it. Material changes to account data, encryption or service providers will be announced before they take effect.
AbilityMosaic is not a medical device, not a diagnosis, and not medical advice. It has not been tested in a clinical trial and makes no claim to improve speech, language or any autism characteristic. It is a notebook.