Phonimo privacy notice

Effective date: 9 September 2026

Guilherme Passero operates Phonimo. This notice covers the Phonimo app and its website. Contact [email protected] for privacy requests. Do not email recordings, passwords, or sensitive information. This notice is also at phonimo.app/privacy.

Your account and recordings

Firebase uses your email and account identifier for sign-in. Phonimo keeps a protected version of that identifier and an internal account ID, never your password or raw sign-in token.

Recording is optional. For requested feedback, your recording and exercise go to Phonimo, and your recording goes to Microsoft Azure Speech in West Europe. Up to five seconds of audio may stay in memory while connecting, then are sent or cleared when the attempt ends. Phonimo never saves recordings. Server sessions and results are cleared from memory within five minutes.

Your learning preferences and progress stay on your device until you uninstall the app. Crash reports and limited app, device, installation, completion, timing, and error data help keep Phonimo secure and reliable. They exclude recordings, transcripts, sign-in tokens, and detailed individual feedback.

Recording time and subscriptions

We keep account records of allowance rules, reset times, and used or reserved seconds to manage recording time and Azure costs. Free normally gives 5 minutes, resetting Monday at 00:00 UTC. Phonimo 10× Recording normally gives 50 minutes per Google Play billing period. We reserve the maximum recording time before Azure starts, then count audio sent, rounding each recording up to a whole second even if feedback fails. If processing is unresolved after two minutes, the full reservation counts. These records contain no audio, exercise text, transcripts, results, or scores.

We also keep shared recording-cost totals and protected reservation receipts, without account identifiers, to limit service costs. Free recording depends on shared weekly and monthly capacity. An emergency service limit may temporarily stop recording for every plan, including paid plans; the app shows when capacity resets. Deleting an account does not erase these shared cost records or replenish capacity. They contain no recordings, exercise text, transcripts, scores, or purchase tokens. Completed records are removed after their windows leave the current week and the 12 prior weeks.

Google Play handles purchases and billing. To verify purchases, manage renewals and cancellations, and prevent sharing one purchase across accounts, we keep subscription status, billing dates, a coded Play account link, protected token and order fingerprints, and your 18+ and Terms confirmations with their versions and time. Raw purchase tokens and order IDs are used only during verification. We do not keep birth dates, raw Play responses, prices, or card details. Play notifications let us check subscription changes.

Subscription notification delivery

Google Cloud Pub/Sub may temporarily hold unacknowledged subscription notifications, including a purchase token, in europe-west4 for up to 24 hours while retrying delivery to our authenticated billing service. Messages are discarded after acknowledgement. We do not retain topic history, export these messages, archive failed payloads, or log their contents. This transport buffer is separate from the limited subscription records stored by the application.

Optional feedback and website language

You may send a usefulness rating and a note of up to 500 characters to help improve Phonimo. We link these to your account with limited session context for export or deletion. Notes are encrypted, never stored on your device or in logs or crash reports, and visible only to the verified operator on a protected page. Email alerts contain no feedback content.

The website starts in your browser language. A language you choose stays in this browser until changed or site data is cleared. It is not sent to our backend or used for tracking.

We do not sell personal information or use it for ads or profiling.

Providers

We use Firebase for sign-in and crash reports; Google Play for subscriptions; Google Cloud for hosting; Azure Speech for assessments; Resend for deletion confirmations and feedback alerts; and Cloudflare Email Routing to forward support emails to the operator. They process data to provide these services. Processing may occur outside your country under their data-processing commitments.

How long we keep data

Account records stay until account deletion. Quota receipts cover the current week and the 12 prior weeks. Completed verification commands stay up to seven days; Play notification and duplicate-check records, 30 days; inactive purchase records, 90 days after the subscription ends. Optional feedback stays up to 90 days. Account deletion immediately removes these linked records from the active database and deletes your Firebase account.

Your export includes retained feedback, current quota, subscription status, renewal and validity details, policy versions, and adult confirmation. It excludes billing and quota history, raw tokens, order IDs, and reservation IDs.

Google Cloud keeps eight encrypted daily backups and seven days of recovery logs. Deleted data may remain isolated for eight successful daily backup cycles. We restore a copy only if request logs prove no later deletion could affect it; otherwise we discard it. Crashlytics starts removing crash reports after 90 days. Technical service logs stay 30 days. Support emails stay until resolved or deletion is requested. We protect data with encrypted connections, access controls, and retention limits.

Your choices

Delete your account in the app or at phonimo.app/delete-data. Web deletion uses your account email and a one-time confirmation; request data stays up to one hour. Opening the link does not delete anything: you must select Delete anyway. A recent Firebase sign-in may be needed.

Warning: deleting Phonimo does not cancel Google Play billing. Manage or cancel an active subscription in Google Play.

For access, correction, deletion, or other privacy rights, email [email protected]. You may complain to the Dutch Autoriteit Persoonsgegevens. We will update this notice and Google Play Data Safety before releasing material changes to these practices.