Privacy Policy

PhonicSky (“we”, “us”, “our”), operated by [Company Legal Name], helps parents, tutors, and schools teach children phonics. This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices and rights you have. We take the privacy of children especially seriously.

By creating an account or using PhonicSky, you agree to this Policy. If you do not agree, please do not use the service.

1. Children’s data & parental consent

PhonicSky is intended to be used by children under the supervision of a parent or legal guardian. A child (“learner”) is not an account holder — only an adult creates an account and adds learner profiles for their child.

We knowingly collect a child’s personal data only after obtaining verifiable consent from the child’s parent or legal guardian, in line with India’s Digital Personal Data Protection Act, 2023, and, where applicable, the U.S. Children’s Online Privacy Protection Act (COPPA) and the EU/UK GDPR provisions for children. You provide this consent when you create an account and confirm you are the parent/guardian, and again each time you add a learner profile.

We collect the minimum data needed to deliver lessons to a learner: first name (last name optional), date of birth (for age-appropriate content), an optional avatar, a parent-set PIN (stored only as a secure hash), and learning progress. We do notserve behavioural advertising to children, and we do not sell children’s data. A parent can review, export, or delete a learner’s data at any time (see §8).

2. Data we collect

• Account (parent/tutor): name, email, mobile number, and account settings.
• Learner (child): first name, optional last name, date of birth, avatar, PIN hash, and learning progress/activity.
• Billing: subscription and payment status. Card/UPI details are processed by our payment provider (Razorpay) — we do not store your card details.
• Technical: log data, device/browser information, and cookies needed to run the service (see our Cookie Policy).

3. How we use data

• To provide and personalise lessons and track learning progress.
• To create and secure accounts and the kid-mode experience.
• To process subscriptions and payments.
• To provide support and send essential service communications.
• To keep the service safe, debug issues, and comply with law.

4. Legal bases

We process personal data on the basis of your consent (including parental consent for children’s data), to perform our contract with you, to comply with legal obligations, and for our legitimate interests in operating and securing the service.

5. Sharing & processors

We do not sell your or your child’s personal data. We share data only with service providers that help us run PhonicSky, under appropriate safeguards:

• Supabase — authentication, database, and storage.
• Razorpay — payment processing.
• Vercel and Railway — application hosting.

We may also disclose data where required by law or to protect rights and safety.

6. Cookies

We use only the cookies needed to operate the service (e.g. your sign-in session and the kid-mode session). See our Cookie Policy for details.

7. Data retention

We keep personal data for as long as your account is active or as needed to provide the service. We retain certain billing records as required by tax and accounting law even after account closure. When data is no longer needed, we delete or anonymise it.

8. Your rights & choices

You can, subject to applicable law:

• Access & export your data — download a copy from Settings → Privacy & data.
• Correct inaccurate data — edit your profile and learner profiles in-app.
• Delete your account and associated data — request this from Settings or by emailing us (see §11). We will action verified deletion requests within 30 days, except records we must retain by law.
• Withdraw consent for processing your child’s data at any time.

9. Security

We protect data with encryption in transit, hashed PINs and passwords, row-level access controls, and least-privilege access. No system is perfectly secure, but we work to protect your information and to notify you of incidents as required by law.

10. International transfers & changes

Your data may be processed in countries other than your own under appropriate safeguards. We may update this Policy; we will post the new “Last updated” date and, for material changes, notify you.

11. Contact

For privacy questions or to exercise your rights, contact our privacy/grievance officer at privacy@phonicsky.com. Postal address: [Company Legal Name, Address].