SpeakClinic

Privacy Policy

Last updated: Oct 07, 2026 9:04 AM

We value your privacy very highly. Please read this Privacy Policy carefully before using the https://speakclinic.com/ website (the “Website”) operated by MYLO INC., a(n) Corporation formed in Finland (“us, we, our”) as this Privacy Policy contains important information regarding your privacy and how we may use the information we collect about you. Our company registration number is 2023070109297-16. Our VAT number is 635-371-595-00000. Our address is Unit 1206 Trade and Financial Tower, 7th Ave., cor. 32nd St.,, Bonifacio Global City Fort Bonifacio,, Taguig City 1635. Our phone number is 09457327732.

Your access to and use of the Website is conditional upon your acceptance of and compliance with this Privacy Policy. This Privacy Policy applies to everyone, including but not limited to visitors, users and others, who wish to access or use the Website.

By accessing or using the Website, you agree to be bound by this Privacy Policy. If you disagree with any part of this Privacy Policy, you do not have our permission to access or use the Website.

What information we collect and store

We collect and store any and all information that you enter on this Website. We collect and store the following information about you:

Specific piece of information

Name

Where we get this information

  • Information submitted by the consumer
  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information

How we use this information

  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Providing customer service
  • Resolving disputes
  • Responding to consumer messages

What happens if we don’t have the information

  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for marketing and advertising will not be possible;
  • Our use of your data for performing services will not be possible;
  • Our use of your data for providing customer service will not be possible;
  • Our use of your data for resolving disputes will not be possible;
  • Our use of your data for responding to consumer messages will not be possible.

Specific piece of information

Postal / Shipping address

Where we get this information

  • Information submitted by the consumer
  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information

How we use this information

  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Providing customer service
  • Resolving disputes
  • Responding to consumer messages

What happens if we don’t have the information

  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for marketing and advertising will not be possible;
  • Our use of your data for performing services will not be possible;
  • Our use of your data for providing customer service will not be possible;
  • Our use of your data for resolving disputes will not be possible;
  • Our use of your data for responding to consumer messages will not be possible.

Specific piece of information

Phone number

Where we get this information

  • Information submitted by the consumer
  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information

How we use this information

  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Providing customer service
  • Resolving disputes
  • Responding to consumer messages

What happens if we don’t have the information

  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for marketing and advertising will not be possible;
  • Our use of your data for performing services will not be possible;
  • Our use of your data for providing customer service will not be possible;
  • Our use of your data for resolving disputes will not be possible;
  • Our use of your data for responding to consumer messages will not be possible.

Specific piece of information

IP address

Where we get this information

  • Information submitted by the consumer
  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information
  • Processing is necessary for compliance with a legal obligation

How we use this information

  • Analytics
  • Detecting security incidents
  • Displaying fonts
  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities
  • Providing customer service
  • Resolving disputes
  • Responding to consumer messages

What happens if we don’t have the information

  • Our use of your data for analytics will not be possible;
  • Our use of your data for detecting security incidents will not be possible;
  • Our use of your data for displaying fonts will not be possible;
  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for marketing and advertising will not be possible;
  • Our use of your data for performing services will not be possible;
  • Our use of your data for protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities will not be possible;
  • Our use of your data for providing customer service will not be possible;
  • Our use of your data for resolving disputes will not be possible;
  • Our use of your data for responding to consumer messages will not be possible.

Specific piece of information

Email address

Where we get this information

  • Information submitted by the consumer
  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information

How we use this information

  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Providing customer service
  • Resolving disputes
  • Responding to consumer messages

What happens if we don’t have the information

  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for marketing and advertising will not be possible;
  • Our use of your data for performing services will not be possible;
  • Our use of your data for providing customer service will not be possible;
  • Our use of your data for resolving disputes will not be possible;
  • Our use of your data for responding to consumer messages will not be possible.

Specific piece of information

Device identifier

Where we get this information

  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information
  • Processing is necessary for compliance with a legal obligation

How we use this information

  • Analytics
  • Detecting security incidents
  • Enforcing our Terms of Service
  • Protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities
  • Resolving disputes

What happens if we don’t have the information

  • Our use of your data for analytics will not be possible;
  • Our use of your data for detecting security incidents will not be possible;
  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities will not be possible;
  • Our use of your data for resolving disputes will not be possible.

Specific piece of information

Online identifier

Where we get this information

  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information
  • Processing is necessary for compliance with a legal obligation

How we use this information

  • Analytics
  • Detecting security incidents
  • Enforcing our Terms of Service
  • Protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities
  • Resolving disputes

What happens if we don’t have the information

  • Our use of your data for analytics will not be possible;
  • Our use of your data for detecting security incidents will not be possible;
  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities will not be possible;
  • Our use of your data for resolving disputes will not be possible.

Specific piece of information

Browsing history

Where we get this information

  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information
  • Processing is necessary for compliance with a legal obligation

How we use this information

  • Detecting security incidents
  • Enforcing our Terms of Service
  • Protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities
  • Resolving disputes

What happens if we don’t have the information

  • Our use of your data for detecting security incidents will not be possible;
  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities will not be possible;
  • Our use of your data for resolving disputes will not be possible.

Specific piece of information

Search history

Where we get this information

  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information
  • Processing is necessary for compliance with a legal obligation

How we use this information

  • Detecting security incidents
  • Enforcing our Terms of Service
  • Protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities
  • Resolving disputes

What happens if we don’t have the information

  • Our use of your data for detecting security incidents will not be possible;
  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities will not be possible;
  • Our use of your data for resolving disputes will not be possible.

Specific piece of information

Information regarding your interaction with our website or application

Where we get this information

  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information
  • Processing is necessary for compliance with a legal obligation

How we use this information

  • Analytics
  • Detecting security incidents
  • Enforcing our Terms of Service
  • Protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities
  • Resolving disputes

What happens if we don’t have the information

  • Our use of your data for analytics will not be possible;
  • Our use of your data for detecting security incidents will not be possible;
  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for such activities will not be possible;
  • Our use of your data for resolving disputes will not be possible.

Specific piece of information

Audio, electronic, thermal, olfactory or other similar information

Where we get this information

  • Information submitted by the consumer
  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information

How we use this information

  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Providing customer service
  • Resolving disputes
  • Responding to consumer messages

What happens if we don’t have the information

  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for marketing and advertising will not be possible;
  • Our use of your data for performing services will not be possible;
  • Our use of your data for providing customer service will not be possible;
  • Our use of your data for resolving disputes will not be possible;
  • Our use of your data for responding to consumer messages will not be possible.

Specific piece of information

Sleep, health or exercise data

Where we get this information

  • Information submitted by the consumer
  • The observation and recording of activities by the business, such as through the use of cookies

Legal basis for processing this information

  • The user has provided consent to the processing of their information

How we use this information

  • Enforcing our Terms of Service
  • Marketing and advertising
  • Performing services
  • Providing customer service
  • Resolving disputes
  • Responding to consumer messages

What happens if we don’t have the information

  • Our use of your data for enforcing our Terms of Service will not be possible;
  • Our use of your data for marketing and advertising will not be possible;
  • Our use of your data for performing services will not be possible;
  • Our use of your data for providing customer service will not be possible;
  • Our use of your data for resolving disputes will not be possible;
  • Our use of your data for responding to consumer messages will not be possible.

We are not required to collect this information by a law, court order, nor by a tribunal order. We do not combine nor link the personal information that we hold about you.

With whom we share your personal information

We share the personal information below with the following categories of third parties for the following reasons:

Specific piece of personal information shared

Name

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Customer management systems
  • Data linking platforms
  • Email marketing vendors
  • Email service providers
  • Hosting providers
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To market to you via email
  • To provide you with our website
  • To send you emails
  • To transfer your information onto different platforms that we use to manage our interactions with you

Specific piece of personal information shared

Postal / Shipping address

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Customer management systems
  • Data linking platforms
  • Email marketing vendors
  • Email service providers
  • Hosting providers
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To market to you via email
  • To provide you with our website
  • To send you emails
  • To transfer your information onto different platforms that we use to manage our interactions with you

Specific piece of personal information shared

Phone number

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Customer management systems
  • Data linking platforms
  • Email marketing vendors
  • Email service providers
  • Hosting providers
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To market to you via email
  • To provide you with our website
  • To send you emails
  • To transfer your information onto different platforms that we use to manage our interactions with you

Specific piece of personal information shared

IP address

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Customer management systems
  • Data analytics providers
  • Data linking platforms
  • Email marketing vendors
  • Email service providers
  • Font vendors
  • Hosting providers
  • Security services vendors
  • Spam prevention vendors
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To display fonts on our website
  • To fix bugs or identify and repair errors
  • To host our website
  • To market to you via email
  • To prevent, detect, and remove spam
  • To prevent, detect, and resolve security issues
  • To provide you with our website
  • To send you emails
  • To transfer your information onto different platforms that we use to manage our interactions with you

Specific piece of personal information shared

Email address

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Customer management systems
  • Data linking platforms
  • Email marketing vendors
  • Email service providers
  • Hosting providers
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To market to you via email
  • To provide you with our website
  • To send you emails
  • To transfer your information onto different platforms that we use to manage our interactions with you

Specific piece of personal information shared

Device identifier

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Data analytics providers
  • Hosting providers
  • Security services vendors
  • Spam prevention vendors
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To prevent, detect, and remove spam
  • To prevent, detect, and resolve security issues
  • To provide you with our website

Specific piece of personal information shared

Online identifier

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Data analytics providers
  • Hosting providers
  • Security services vendors
  • Spam prevention vendors
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To prevent, detect, and remove spam
  • To prevent, detect, and resolve security issues
  • To provide you with our website

Specific piece of personal information shared

Browsing history

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Hosting providers
  • Security services vendors
  • Spam prevention vendors
  • Website or application development and design vendors

Reason(s) for sharing

  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To prevent, detect, and remove spam
  • To prevent, detect, and resolve security issues
  • To provide you with our website

Specific piece of personal information shared

Search history

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Hosting providers
  • Security services vendors
  • Spam prevention vendors
  • Website or application development and design vendors

Reason(s) for sharing

  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To prevent, detect, and remove spam
  • To prevent, detect, and resolve security issues
  • To provide you with our website

Specific piece of personal information shared

Information regarding your interaction with our website or application

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Data analytics providers
  • Hosting providers
  • Security services vendors
  • Spam prevention vendors
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To prevent, detect, and remove spam
  • To prevent, detect, and resolve security issues
  • To provide you with our website

Specific piece of personal information shared

Audio, electronic, thermal, olfactory or other similar information

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Customer management systems
  • Data linking platforms
  • Email marketing vendors
  • Email service providers
  • Hosting providers
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To market to you via email
  • To provide you with our website
  • To send you emails
  • To transfer your information onto different platforms that we use to manage our interactions with you

Specific piece of personal information shared

Sleep, health or exercise data

Categories of third parties with whom personal information is/was shared

  • Content management systems
  • Customer management systems
  • Data linking platforms
  • Email marketing vendors
  • Email service providers
  • Hosting providers
  • Website or application development and design vendors

Reason(s) for sharing

  • To analyze your interactions with us or our website
  • To build new website features
  • To detect and resolve security incidents
  • To fix bugs or identify and repair errors
  • To host our website
  • To market to you via email
  • To provide you with our website
  • To send you emails
  • To transfer your information onto different platforms that we use to manage our interactions with you

Please note that these third parties will store your personal information that has been provided to them.

How we protect your personal information

We have implemented the following measures to protect and safeguard your personal information:

  • Limiting the amount of personal information that we collect to strictly necessary only
  • Using SSL encryption or other secure technologies when receiving or sending personal information beyond internal networks
  • Destroying and/or deleting personal information once we no longer need it

Sale of your information

We do not sell your personal information.

Please see the “Your Rights” section below for more information about exercising your privacy rights regarding sales of your personal information.

Cookies

A cookie is a small piece of data sent from a website and stored on your device by your browser. This Website sets cookies and may use cookies for reasons including, but not limited to:

  • Analyzing our Website traffic;
  • Analyzing your interactions with advertisements;
  • Identifying whether you are signed in to the Website;
  • Testing content on the Website;
  • Storing information about your preferences;
  • Recognizing when you return to the Website.

Most web browsers automatically accept cookies. However, you can modify your browser settings to decline cookies, if you prefer. This setting may prevent you from taking full advantage of the Website.

Children’s privacy

This Website is intended for use by a general audience and does not offer services to children. Should a child whom we know to be under 18 send personal information to us, we will use that information only to respond to that child to inform them that they cannot use this Website.

Analytics programs

This Website uses Google Analytics to collect information about you and your behaviors. If you would like to opt-out of Google Analytics, please visit https://tools.google.com/dlpage/gaoptout/.

Security and spam prevention

This Website uses reCAPTCHA. ReCAPTCHA is a service from Google that helps distinguish between humans and bots, thereby helping prevent spam. reCAPTCHA works by collecting hardware and software information, such as device and application data and the results of integrity checks, sending that data to Google.

Information retention

We retain all of the information that we collect 1.

Your rights

All visitors or users of this Website have the following rights with regard to their personal information:

  1. The right to access the personal information that we hold about you.
  2. The right to receive the personal information that we hold about you in a portable and, to the extent feasible, a readily usable format that allows you to transmit this information to another entity.
  3. The right to ask us to transmit your personal information that we have collected on you to another provider, where technically feasible.
  4. The right to request that we amend any of the information that we have collected about you.
  5. The right to withdraw your consent to the processing of your personal information.
  6. The right to request that we restrict the processing of your personal information.
  7. The right to request that we delete some or all of the personal information that we have collected about you.
  8. The right to lodge a complaint regarding our collection, sharing, and processing of your personal information with competent authorities in the proper jurisdiction.
  9. The right to lodge a complaint regarding our collection, sharing, and processing of your personal information with us.
  10. The right to opt out of the use of your personal information for purposes of direct marketing.
  11. The right to opt out of sales of your personal information.
  12. The right to not have to identify yourself, or of using a pseudonym in certain circumstances.
  13. The right to opt out of tracking of your location.
  14. The right to opt out of the use of your personal information for the purposes of profiling in furtherance of decisions that could produce legal or similarly significant effects concerning you.
  15. The right to opt out of the use of your personal information for automated decision making purposes.

Exercising your rights

You may exercise the rights specified above by submitting a consumer request to:

customerservice@speakclinic.com
09457327732
Unit 1206 Trade and Financial Tower 7th Ave., cor. 32nd St., Bonifacio Global City Fort Bonifacio, Taguig City 1635
Finland

We may need to verify your identity prior to effectuating your request. To verify your identity, you will need to provide us with the following information with your request:

  • Name
  • Email address

Please note that we may be unable to process your request if you do not provide us with the above information.

We will respond to most consumer requests within 30 days of receipt. However, some requests may take longer. We will notify you in writing if we need more time to respond. We have the ability to deny your request(s) if certain exceptions in the law apply. If we do deny your request, we will provide you with the reasons for such denial.

Complaints

You have the right to lodge a complaint regarding our collection, use and sharing of your personal information by contacting us at the following contact information:

09457327732
customerservice@speakclinic.com

Any such complaints must first be addressed to us in writing as required by Australia Privacy Act 1988 S 40(1A). We will respond to all complaints within a reasonable time (usually 30 days). If you are not satisfied with our response to your complaint, you may then lodge a complaint with the Office of the Australian Information Commissioner by following the steps on this Lodge a Privacy Complaint (Australia) page.

Residents of the United Kingdom may lodge a complaint with the United Kingdom Information Commissioner’s Office by following the steps on this Lodge a Privacy Complaint (United Kingdom) page.

Accountability

The following person is accountable and responsible for our privacy practices and procedures:

09457327732
customerservice@speakclinic.com

You may lodge a complaint with us by contacting the person accountable and responsible for our privacy practices and procedures at the contact information above. Residents of Canada may also lodge a complaint with the Office of the Privacy Commissioner of Canada by visiting this File a Privacy Complaint (Canada) page or calling 1-800-282-1376. Residents of Quebec may also lodge a complaint with the Office of the Privacy Commissioner of Quebec by filling out this Quebec Privacy Commission page or calling 1-888-528-7741.

Location of data processing

All data processing activities undertaken by us take place in Philippines.

Third-party websites

This Website may contain hyperlinks to websites operated by parties other than us. We provide such hyperlinks for your reference only. We do not control such websites and are not responsible for their contents or the privacy or other practices of such websites. It is up to you to read and fully understand their Privacy Policies. Our inclusion of hyperlinks to such websites does not imply any endorsement of the material on such websites or any association with their operators.

Do Not Track

Do Not Track (“DNT”) is a preference you can set on your browser to inform websites that you do not want to be tracked. We do not support DNT. You can either enable or disable Do Not Track by visiting the Preferences or Settings page of your browser.

Questions

If you have any questions about this Privacy Policy, please contact us at customerservice@speakclinic.com.

Changes to Privacy Policy

We reserve the right to amend this Privacy Policy at any time. We will notify you of any changes to this Privacy Policy via the following:

  • By posting the updated Privacy Policy to this website
  • Via an email campaign

Last updated: October 13, 2026

1. Who we are

SpeakClinic (the website speakclinic.com and the SpeakClinic mobile app, together the “Platform”) is operated by Mylo Inc., a corporation registered in the Philippines (SEC Registration No. 2023070109297-16; TIN 635-371-595-00000), with its office at Unit 1206 Trade and Financial Tower, 7th Ave. cor. 32nd St., Bonifacio Global City, Taguig City 1635, Philippines (“Mylo”, “we”, “us”). This policy explains how we handle personal information under the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and the issuances of the National Privacy Commission (NPC). Where the EU General Data Protection Regulation (GDPR) applies to you, Section 13 sets out your additional rights.

2. Our role

SpeakClinic connects parents, guardians and patients with independent therapists and doctors (“Clinicians”) for online, in-clinic and home-service appointments.

  • For accounts, bookings, payments and the Platform itself, Mylo is the personal information controller.
  • For clinical records a Clinician creates (assessments, session notes, treatment plans), the Clinician is the controller and Mylo processes that information on the Clinician’s behalf, under a data processing agreement.

3. Data Protection Officer

Our Data Protection Officer is Enrico Aquino, reachable at dpo@mylo.ph or at the address above. Contact the DPO for any privacy question, request or complaint.

4. What we collect

CategoryExamplesSource
Account informationName, email, phone, password, role (parent, patient, Clinician)You
Child or patient informationChild’s name, date of birth, guardian relationshipParent or guardian
Health information (sensitive personal information)Reason for consult, intake forms, session notes, assessments, uploaded files, audio/video during teleconsults where recorded with consentYou and your Clinician
Booking and payment informationAppointments, fees, transaction references. Card numbers are handled by our payment processor; we do not store themYou, our payment processor
Clinician informationLicence number, specialty, clinic details, payout detailsClinicians
Technical informationIP address, device identifiers, app version, log data, cookiesYour device

5. Why we use it and our legal basis

PurposeData usedLegal basis
Creating and running your accountAccount informationContract (DPA s.12(b); GDPR Art. 6(1)(b))
Booking appointments and connecting you with a ClinicianAccount, child/patient and health informationYour express consent to processing of sensitive personal information (DPA s.13(a); GDPR Art. 9(2)(a)), and for Clinicians, provision of health care (DPA s.13(d); GDPR Art. 9(2)(h))
Processing payments and issuing receiptsBooking and payment informationContract and legal obligation, including tax rules (DPA s.12(c))
Keeping the Platform secure, preventing fraud and spamTechnical informationLegitimate interest (DPA s.12(f); GDPR Art. 6(1)(f))
Service messages (booking confirmations, reminders)Account informationContract
Improving the Platform with aggregated statisticsTechnical information, de-identified usageLegitimate interest, or consent for analytics cookies
Marketing emails about Mylo productsName and email onlySeparate opt-in consent, which you can withdraw at any time

We never use health information, or information about a child, for marketing or advertising, and we never share it with marketing vendors. We do not sell personal information.

6. Children

SpeakClinic is used to arrange therapy for children. Accounts must be created by a parent or legal guardian aged 18 or over, who gives consent on the child’s behalf and controls the child’s information. Children may not create their own accounts. If we learn that a child’s information was provided without a guardian’s consent, we will delete it.

7. Who we share it with

  • Your chosen Clinician, to deliver the service you booked.
  • Service providers (processors) bound by data processing agreements, confidentiality and security obligations: Google Cloud and Firebase (hosting and database), Supabase and Vercel (database and app hosting), Zoom (teleconsult video, through the Zoom Video SDK), Xendit (payments), Google Workspace (email), Google Analytics and reCAPTCHA (website analytics and spam prevention, used on the public website only and never on screens showing health information), our transactional email provider.
  • Authorities, when required by law, court order or to protect someone’s life or health.
  • A successor company, if Mylo is merged or acquired, with notice to you.

8. Where your data is stored and international transfers

Our team operates in the Philippines. Some processors store data outside the Philippines (for example in Singapore, the EU or the United States). When we transfer data abroad we remain accountable for it (DPA s.21) and use contractual safeguards; for data from the EU we use the European Commission’s Standard Contractual Clauses.

9. How long we keep it

DataRetention
Account informationWhile your account is active, then 2 years
Clinical recordsFor the period the Clinician is legally required to keep them
Payment and tax records10 years, as required by Philippine tax law
Analytics data26 months
Marketing consentUntil you withdraw it

After these periods we delete or anonymise the data.

10. How we protect it

We use encryption in transit (TLS) and at rest, role-based access so staff see only what their job needs, multi-factor authentication for admin access, audit logs, staff confidentiality agreements and privacy training, and regular security reviews.

11. Data breaches

If a breach is likely to put you at real risk of harm, we will notify the NPC and affected users within 72 hours of becoming aware of it, as required by NPC Circular 16-03, and the competent EU authority where GDPR applies.

12. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to object, to erasure or blocking, to rectification, to data portability, to file a complaint, and to damages. You can also withdraw consent at any time; this will not affect processing already done. To exercise a right, email the DPO at dpo@mylo.ph or customerservice@speakclinic.com. We may ask you to verify your identity. We reply within 15 working days, or within one month where GDPR applies, and tell you if we need more time. If you are not satisfied with our reply, you may complain to the National Privacy Commission (privacy.gov.ph).

13. Additional rights for users in the EU/EEA

If GDPR applies, you also have the right to restrict processing and to object to processing based on legitimate interest. You may complain to the Office of the Data Protection Ombudsman of Finland (tietosuoja.fi) or the authority in your country. EU users can reach our DPO at dpo@mylo.ph.

14. Health information and HIPAA

SpeakClinic serves users in the Philippines and the EU and is preparing to serve the United States. For US Clinicians who are covered entities under the Health Insurance Portability and Accountability Act (HIPAA), Mylo acts as their business associate: we process protected health information (PHI) only under a signed Business Associate Agreement (BAA), and only through vendors that have signed BAAs with us. US patients exercise their HIPAA rights over health records through their Clinician, and we help the Clinician respond. Mylo does not accept US patients’ PHI until the relevant BAAs are in place.

15. Cookies

We use essential cookies to run the Platform and, with your consent, analytics cookies (Google Analytics). You can change your choice at any time through the cookie banner or your browser settings.

16. Changes

We will post any change here and update the date above. For material changes we will email you or notify you in the app at least 30 days before they take effect.

17. Contact

Mylo Inc., Unit 1206 Trade and Financial Tower, 7th Ave. cor. 32nd St., BGC, Taguig City 1635, Philippines · customerservice@speakclinic.com · 0945 732 7732