- Phonumi
- Trust Center
Trust Center
How we protect teachers, students and your work.
Plain answers for teachers, families and district reviewers. Where something is a target or still in preparation, we say so.
The binding details are in our privacy policy and terms of service.
Last updated October 22, 2026
Overview
Adults only
Teacher accounts only. No student accounts, names or voice recordings.
Private by default
Nothing is shared until you choose, and every share can be revoked.
Not for ads or training
Your materials are not used for advertising or to train AI models.
Accessible by design
We design and test toward WCAG 2.2 AA.
Data we collect
| What | Why | Notes |
|---|---|---|
| Email address | Your account and sign-in | Required |
| School name | School teams and quotes | Optional |
| Lessons you create | Drafting, checking and printing your packs | Private to you by default |
| Group skill profiles | Matching text to taught sounds | Group name, sounds, heart words and topic words; never student identities |
| Billing details | Payments | Handled by our payment processor; we don't store card numbers |
| Usage records | Plan allowances and AI costs | Counts and AI usage only, no lesson text |
We don't collect
- Student accounts
- Student names, photos or voice recordings
- Student assessment or reading data
AI and your content
AI drafts. A separate, versioned rule engine checks every word. You approve.
- We only use AI providers we have approved, with settings chosen so they don't train on your content.
- A second AI model is never used as the checker.
- Your materials aren't used for advertising or model training.
- Lesson text stays out of error logs, and there are no analytics or advertising tools.
Security practices
- Read-aloud audio is kept in private storage and served only to your workspace or through an active family link.
- Each organization's data is separated in the database, not just in the interface.
- Roles come from your organization. Nobody can grant themselves a role, and a school email address alone grants no access.
- Admin access is limited to named staff, and admin sign-ins and changes are logged.
- Test and live payments are kept apart, and production refuses test keys.
- Daily database backups, kept for seven days.
Accessibility
We design and test toward WCAG 2.2 AA: keyboard use, visible focus, contrast, zoom, text alternatives and accessible sign-in. Every PDF comes with an accessible HTML version. This is our target, not a certification. If you hit a barrier, tell us and we'll prioritize it.
Subprocessors
| Provider | Purpose | Data involved |
|---|---|---|
| Vercel | Website and application hosting | Account and lesson data in transit |
| Supabase | Database, sign-in and private file storage | Account, lesson and file data |
| Stripe | Payments and billing | Billing details |
| Resend | Sign-in emails | Email address |
| Anthropic | Drafting lesson text and suggesting replacement words, through Vercel's AI Gateway | Topic, objective, the group's sounds and word lists, drafts |
| Microsoft (Azure) | Read-aloud voices, through Vercel's AI Gateway | Approved lesson text |
If Anthropic is unavailable, the AI Gateway can run the same model on Google Cloud (Vertex AI) or Amazon Web Services. Data is stored and processed in the United States. The privacy policy explains how transfers abroad are protected.
Requests
Each button opens an email to bilgi@acadezone.com. We reply within 30 days.