Privacy Policy

PhonicSky (“we”, “us”, “our”), operated by Airocia Tech Pvt. Ltd., helps parents, tutors, and schools teach children phonics. This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices and rights you have. We take the privacy of children especially seriously.

By creating an account or using PhonicSky, you agree to this Policy. If you do not agree, please do not use the service.

1. Children’s data & parental consent

PhonicSky is intended to be used by children under the supervision of a parent or legal guardian. A child (“learner”) is not an account holder — only an adult creates an account and adds learner profiles for their child.

We knowingly collect a child’s personal data only after obtaining verifiable consent from the child’s parent or legal guardian, in line with India’s Digital Personal Data Protection Act, 2023, and, where applicable, the U.S. Children’s Online Privacy Protection Act (COPPA) and the EU/UK GDPR provisions for children. You provide this consent when you create an account and confirm you are the parent/guardian, and again each time you add a learner profile.

We collect the minimum data needed to deliver lessons to a learner: first name (last name optional), date of birth (for age-appropriate content), a parent-set PIN (stored only as a secure hash), and learning progress. A parent may also choose to add optional details (such as an avatar, grade, interests, preferred language, or school) — see §2. We do not serve behavioural advertising to children, and we donot sell children’s data. A parent can review, export, or delete a learner’s data at any time (see §8).

2. Data we collect

• Account (parent/tutor): name, email, mobile number, and account settings.
• Learner (child) — required: first name, optional last name, display name, date of birth (for age-appropriate content), a parent-set PIN (stored only as a secure hash), and learning progress/activity.
• Learner (child) — optional, parent-provided: gender, avatar, grade/standard and division, interests (used to personalise lesson themes), preferred language, and school name and address. These fields are entirely optional, may be left blank, and can be edited or removed at any time.
• Billing: subscription and payment status. Card/UPI details are processed by our payment provider (Razorpay) — we do not store your card details.
• Technical: log data, device/browser information, and cookies needed to run the service (see our Cookie Policy).

We ask only for what a feature needs. A child’s school name and address are kept private to your account and are never shared with tutors, who receive only a learner’s name, age, and learning progress. We do not use any learner data for behavioural profiling or targeted advertising.

3. How we use data

• To provide and personalise lessons and track learning progress.
• To create and secure accounts and the kid-mode experience.
• To process subscriptions and payments.
• To provide support and send essential service communications.
• To keep the service safe, debug issues, and comply with law.

4. Legal bases

We process personal data on the basis of your consent (including parental consent for children’s data), to perform our contract with you, to comply with legal obligations, and for our legitimate interests in operating and securing the service.

5. Sharing & processors

We do not sell your or your child’s personal data. We share data only with service providers that help us run PhonicSky, under appropriate safeguards:

• Supabase — authentication, database, and storage.
• Razorpay — payment processing.
• Vercel and Railway — application hosting.
• PostHog — privacy-first, aggregate product analytics. We do not send it your child’s name, PIN, or other personal identifiers (see our Cookie Policy).

We may also disclose data where required by law or to protect rights and safety.

6. Cookies

We use only the cookies needed to operate the service (e.g. your sign-in session and the kid-mode session). See our Cookie Policy for details.

7. Data retention

We keep personal data for as long as your account is active or as needed to provide the service. We retain certain billing records as required by tax and accounting law even after account closure. When data is no longer needed, we delete or anonymise it.

8. Your rights & choices

You can, subject to applicable law:

• Access & export your data — download a copy from Settings → Privacy & data.
• Correct inaccurate data — edit your profile and learner profiles in-app.
• Delete your account and associated data — request this from Settings or by emailing us (see §11). We will action verified deletion requests within 30 days, except records we must retain by law.
• Withdraw consent for processing your child’s data at any time.

9. Security

We protect data with encryption in transit, hashed PINs and passwords, row-level access controls, and least-privilege access. No system is perfectly secure, but we work to protect your information and to notify you of incidents as required by law.

10. International transfers & changes

Your data may be processed in countries other than your own under appropriate safeguards. We may update this Policy; we will post the new “Last updated” date and, for material changes, notify you.

11. Contact

For privacy questions or to exercise your rights, contact our privacy/grievance officer at privacy@phonicsky.com. Postal address: [Airocia Tech Pvt. Ltd., Address].