Privacy Policy
How Stepping collects, handles and processes the data of visitors, donors and the families who use Speech AI — and what we will never do with it.
Last updated 24 August 2026
The short version
We collect the minimum needed to run this website, to process a payment, and to screen your child and build their therapy plan. We do not sell it. We do not share it outside your care team and our payment processor without your consent. You can ask us to delete it, and we will.
Visitors to this website
- Server logs. Our hosting provider records the IP address, browser type and pages requested, as every web server does, to keep the site running and secure. Logs are kept for a short period and are not linked to you as a person.
- Cookies. The site sets no advertising or tracking cookies. If we add analytics, it will be a privacy-preserving service that does not identify individuals, and this page will say so.
- The contact form. It opens your own email app; nothing you type is sent to us, or to anyone, until you press send in your own mail client.
Donors and customers
- What we collect. Your name, email address, phone number, the amount and the transaction reference — enough to send a receipt and to trace a payment if something goes wrong.
- Payment details. Your card number, PIN, OTP or wallet password go directly to our payment gateway, shurjoPay, over an encrypted connection. Stepping never sees or stores them. shurjoPay processes them under its own privacy policy and Bangladesh Bank regulation.
- How long we keep it. Payment records are kept for as long as tax and accounting law in Bangladesh requires, then deleted.
Families using Speech AI
- Screening data — recordings of the activities you complete, and the scores derived from them.
- Your child's profile — age, developmental stage and the goals set by a clinician.
- Progress records — what was practised, when, and how it went.
- Contact details — so we can reach you about your child's care.
We collect it to produce a screening result, to let a clinician review it, to build and adapt a therapy plan, and to show you and your therapy centre whether it is working. Nothing else.
Children's data
Everything in Speech AI concerns a child, and a parent or guardian consents on their behalf. We treat it as special-category health data: access is limited to your care team, it is stored encrypted, it is not used for advertising, and it is never sold. Where we use anonymised data to improve the platform, it cannot be traced back to a child.
Who we share data with
- The clinicians and therapy centre in your child's care team.
- Our payment gateway, for the payment data described above.
- Our hosting and email providers, who process data on our instructions only.
- Authorities, where the law of Bangladesh requires it.
Your rights
You can ask us what we hold about you or your child, correct it, or have it deleted. Write to steppingbd@gmail.com and we will respond within 7 working days.
Changes
If this policy changes, the date at the top changes with it, and anything that affects how a child's data is handled will be told to you directly, not just posted here.
Contact
Plot-67, BNS Center, 7–9 Sector-07, Uttara, Dhaka-1230, Bangladesh.
+880 1711-727096 ·steppingbd@gmail.com