Privacy Policy

PhonicSky (“we”, “us”, “our”), operated by [Company Legal Name], helps parents, tutors, and schools teach children phonics. This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices and rights you have. We take the privacy of children especially seriously.

By creating an account or using PhonicSky, you agree to this Policy. If you do not agree, please do not use the service.

1. Children’s data & parental consent

PhonicSky is intended to be used by children under the supervision of a parent or legal guardian. A child (“learner”) is not an account holder - only an adult creates an account and adds learner profiles for their child.

We knowingly collect a child’s personal data only after obtaining verifiable consent from the child’s parent or legal guardian, in line with India’s Digital Personal Data Protection Act, 2023, and, where applicable, the U.S. Children’s Online Privacy Protection Act (COPPA) and the EU/UK GDPR provisions for children. You provide this consent when you create an account and confirm you are the parent/guardian, and again each time you add a learner profile.

We collect the minimum data needed to deliver lessons to a learner: first name (last name optional), date of birth (for age-appropriate content), a parent-set PIN (stored only as a secure hash), and learning progress. A parent may also choose to add optional details (such as an avatar, grade, interests, preferred language, or school) - see §2. We do not serve behavioural advertising to children, and we donot sell children’s data. A parent can review, export, or delete a learner’s data at any time (see §8).

2. Data we collect

• Account (parent/tutor): name, email, mobile number, and account settings.
• Parent - optional location & contact: country, state/region, city, and (if you choose to add it) a postal address and postcode. We use this only to apply the right prices, currency and taxes (for example GST or VAT), to send reminders at sensible local times, to issue invoices, and to contact you about your account. It is entirely optional, can be edited or removed at any time from your Profile, and is deleted or anonymised when you delete your account.
• Parent - optional personal details: date of birth and gender. These are entirely optional, are never required to use PhonicSky, and can be edited or removed at any time from your Profile. We do not ask parents for social-media profiles.
• Learner (child) - required: first name, optional last name, display name, date of birth (for age-appropriate content), a parent-set PIN (stored only as a secure hash), and learning progress/activity.
• Learner (child) - optional, parent-provided: gender, avatar, grade/standard and division, interests (used to personalise lesson themes), preferred language, and school name and address. These fields are entirely optional, may be left blank, and can be edited or removed at any time.
• Billing: subscription and payment status. Card/UPI details are processed by our payment provider (Razorpay) - we do not store your card details.
• Technical: log data, device/browser information, and cookies needed to run the service (see our Cookie Policy).
• Analytics: cookieless, aggregate page-view and page-speed statistics via Cloudflare Web Analytics and Vercel Web Analytics & Speed Insights, which do not identify individual visitors; and, only if you accept analytics cookies, Google Analytics on parent pages (never in Kids Mode).
• Usage activity: the days on which your account is used, and when each of your child’s Kids Mode sessions starts and ends - its length and how many activities and lessons were completed. This is recorded on our own servers only; it is never sent to analytics or advertising providers, and it contains nothing your child types, says, or creates.

We ask only for what a feature needs. A child’s school name and address are kept private to your account and are never shared with tutors, who receive only a learner’s name, age, and learning progress. We do not use any learner data for behavioural profiling or targeted advertising.

3. How we use data

• To provide and personalise lessons and track learning progress.
• To create and secure accounts and the kid-mode experience.
• To process subscriptions and payments.
• To provide support and send essential service communications.
• To understand how often families use PhonicSky so we can improve it, and to send you progress updates and occasional reminders when your child hasn’t practised for a while (you can turn these emails off at any time).
• To keep the service safe, debug issues, and comply with law.

4. Legal bases

We process personal data on the basis of your consent (including parental consent for children’s data), to perform our contract with you, to comply with legal obligations, and for our legitimate interests in operating and securing the service.

5. Sharing & processors

We do not sell your or your child’s personal data. We share data only with service providers that help us run PhonicSky, under appropriate safeguards:

• Supabase - authentication, database, and storage.
• Razorpay - payment processing.
• Vercel and Railway - application hosting.
• Zoho - customer support and customer-relationship management. It receives your account details and subscription status; for each child only their first name, birth year (never the full date of birth), plan status, a broad skill level, the number of lessons completed in the last 30 days, and the date of their last activity; and account-level usage summaries (such as the last day your account was used and the number of Kids Mode sessions in the past week). It never receives the detail of your child’s individual sessions or activities.
• PostHog - privacy-first, aggregate product analytics. We do not send it your child’s name, PIN, or other personal identifiers (see our Cookie Policy).

We may also disclose data where required by law or to protect rights and safety.

6. Cookies

We use only the cookies needed to operate the service (e.g. your sign-in session and the kid-mode session). See our Cookie Policy for details.

7. Data retention

We keep personal data for as long as your account is active or as needed to provide the service. We retain certain billing records as required by tax and accounting law even after account closure. Records of individual Kids Mode sessions (see §2, usage activity) are kept for 13 months and then deleted automatically. When data is no longer needed, we delete or anonymise it.

8. Your rights & choices

You can, subject to applicable law:

• Access & export your data - download a copy from Settings → Privacy & data.
• Correct inaccurate data - edit your profile and learner profiles in-app.
• Delete your account and associated data - request this from Settings or by emailing us (see §11). We will action verified deletion requests within 30 days, except records we must retain by law.
• Withdraw consent for processing your child’s data at any time.

9. Security

We protect data with encryption in transit, hashed PINs and passwords, row-level access controls, and least-privilege access. No system is perfectly secure, but we work to protect your information and to notify you of incidents as required by law.

10. International transfers & changes

Your data may be processed in countries other than your own under appropriate safeguards. We may update this Policy; we will post the new “Last updated” date and, for material changes, notify you.

11. Contact

For privacy questions or to exercise your rights, contact our privacy/grievance officer at privacy@phonicsky.tech. Postal address: [Company Legal Name, Address].