Trust Center

How we protect teachers, students and your work.

Plain answers for teachers, families and district reviewers. Where something is a target or still in preparation, we say so.

The binding details are in our privacy policy and terms of service.

Last updated October 22, 2026

Overview

Adults only

Teacher accounts only. No student accounts, names or voice recordings.

Private by default

Nothing is shared until you choose, and every share can be revoked.

Not for ads or training

Your materials are not used for advertising or to train AI models.

Accessible by design

We design and test toward WCAG 2.2 AA.

Data we collect

WhatWhyNotes
Email addressYour account and sign-inRequired
School nameSchool teams and quotesOptional
Lessons you createDrafting, checking and printing your packsPrivate to you by default
Group skill profilesMatching text to taught soundsGroup name, sounds, heart words and topic words; never student identities
Billing detailsPaymentsHandled by our payment processor; we don't store card numbers
Usage recordsPlan allowances and AI costsCounts and AI usage only, no lesson text

We don't collect

  • Student accounts
  • Student names, photos or voice recordings
  • Student assessment or reading data
Please keep student names out of stories and notes. Phonumi never needs them, and groups work as skill profiles.

Sharing

Everything starts private. To share, you pick one group's lesson, and you can turn its link off at any time. Links and QR codes open only the shared lesson, never student records, and they expire after 120 days.

AI and your content

AI drafts. A separate, versioned rule engine checks every word. You approve.

  • We only use AI providers we have approved, with settings chosen so they don't train on your content.
  • A second AI model is never used as the checker.
  • Your materials aren't used for advertising or model training.
  • Lesson text stays out of error logs, and there are no analytics or advertising tools.

Security practices

  • Read-aloud audio is kept in private storage and served only to your workspace or through an active family link.
  • Each organization's data is separated in the database, not just in the interface.
  • Roles come from your organization. Nobody can grant themselves a role, and a school email address alone grants no access.
  • Admin access is limited to named staff, and admin sign-ins and changes are logged.
  • Test and live payments are kept apart, and production refuses test keys.
  • Daily database backups, kept for seven days.

Accessibility

We design and test toward WCAG 2.2 AA: keyboard use, visible focus, contrast, zoom, text alternatives and accessible sign-in. Every PDF comes with an accessible HTML version. This is our target, not a certification. If you hit a barrier, tell us and we'll prioritize it.

Subprocessors

ProviderPurposeData involved
VercelWebsite and application hostingAccount and lesson data in transit
SupabaseDatabase, sign-in and private file storageAccount, lesson and file data
StripePayments and billingBilling details
ResendSign-in emailsEmail address
AnthropicDrafting lesson text and suggesting replacement words, through Vercel's AI GatewayTopic, objective, the group's sounds and word lists, drafts
Microsoft (Azure)Read-aloud voices, through Vercel's AI GatewayApproved lesson text

If Anthropic is unavailable, the AI Gateway can run the same model on Google Cloud (Vertex AI) or Amazon Web Services. Data is stored and processed in the United States. The privacy policy explains how transfers abroad are protected.

Requests

Each button opens an email to bilgi@acadezone.com. We reply within 30 days.