Privacy Notice
Last updated: 2026-11-01
PhonicsManila helps schools share information about their students with the students' parents and teachers, and run their classes, payments and teachers' pay. This notice explains what personal information we collect through PhonicsManila (the school platform, its app and this website), why, who can see it, how long we keep it, and what you can do about it. It follows the Data Privacy Act of 2012 (Republic Act No. 10173).
Who we are
PhonicsManila is operated by Elizabeth Andrade, Phase 4 Block 46 Lot 38, Sabella Village, Barangay Panungyanan, General Trias, Cavite, Philippines, at phonicsmanila.com.
Each school decides what information it keeps about its people and students, and that information is the school's; PhonicsManila keeps and processes it on the school's behalf. Inquiries sent through this website's contact form come to PhonicsManila itself.
You can reach our Data Protection Officer at phonicsmanila@gmail.com.
What we collect
If you have an account (school owners, teachers, parents and guardians, and PhonicsManila staff):
- your e-mail address, first and last name, and, if you add it, your phone number;
- your password, which we store only in a scrambled form that nobody can read;
- your roles in each school (owner, teacher or parent) and whether your invitation is pending or accepted;
- when you sign in, the IP address and browser of each session, so we can keep you signed in and let you sign out of every device.
About students: their first and last name, their birth date if the school adds it (some schools use it to set a custom price), which school they attend, who their parents or guardians are and their relationship, and who their teachers are. Students do not use PhonicsManila themselves.
About classes: each student's weekly class times and teachers' availability; and, for each class, its date and time, whether it happened or the student was absent (and how they gave notice), the lesson covered, the teacher's remarks, and the session it used from the student's package.
About payments (parents and others who pay): each payment the school records, with its amount, date and method (for example GCash or a bank transfer), the receipt reference, the name of whoever paid (their real name), and the sessions it bought. PhonicsManila does not take payments and never receives card details.
About teachers' pay (teachers): the school's rates and any rate set for you; your payslips, with the classes paid, incentives and any deductions with their reasons; the payouts made to you; and the payout accounts you or the school add (the provider, the name on the account and its number).
To keep accounts safe: each attempt to sign in or reset a password (the e-mail address used, the IP address, the time and whether it worked); a record of changes made in the platform (who changed what and when); and, on forms that ask for a password, a security check run by Cloudflare that looks at your IP address and browser to tell people from bots.
When we e-mail you: your address and the content of the e-mail (for example your invitation, a password reset link, a payment receipt, or a notice that your payslip is ready).
In the PhonicsManila app: the app shows parents and teachers the same information as the platform, under the same rules, and collects nothing more about students. It keeps your sign-in in your phone's secure storage so you stay signed in, and records each sign-in from the app (when, and whether from an iPhone or an Android phone).
If you contact us through this website: your name, your child's age, your e-mail address, your phone number if you give it, the package you ask about, and your message.
On this website: we use Google Analytics to count visits and see which pages people use, so we can improve the site. We see these only as totals, and we don't use them to advertise to you.
The platform and the app use no advertising or analytics trackers, and we do not sell personal information.
How we use it
- to let you sign in and to show you only what your role allows;
- to show parents their own children, and teachers the students assigned to them;
- to let the school manage its teachers, parents and students;
- to keep the school's schedule, record its classes and count each student's sessions;
- to record the payments the school receives, and to pay teachers;
- to send you invitations, password resets and notices about your account, and (depending on your role) payment receipts, notices that a child's sessions are running low, and notices about your payslips, payouts and payout accounts;
- to protect accounts and students' information from misuse, and to investigate problems;
- to answer inquiries sent through this website's contact form;
- to see, as totals, how visitors use this website, so we can improve it.
Who can see what
- A parent sees their own children, their relationship to them, and the names of their children's teachers; their children's weekly classes, sessions left, payments (amount, date, method and sessions, but not who paid) and recent classes (date, teacher, whether it happened, and the lesson). A parent never sees other parents, a teacher's remarks, or what teachers are paid.
- A teacher sees the students assigned to them and the names of those students' parents and their relationship; their students' weekly classes and sessions left (as a count, never what was paid); their own classes, payslips and payouts; and their own payout accounts, masked. Teachers don't see parents' e-mail addresses or phone numbers, or another teacher's pay.
- The school's owners see their own school's people and students, its classes, payments and teachers' pay. They see a teacher's payout account masked, and its whole number only when they choose to reveal it, which is recorded each time.
- PhonicsManila staff (Super Admins) can see every school's people, students, schedules, class reports (including the teacher's remarks and what each class pays the teacher), rates (including a rate set for one teacher) and session packages (including the price, the payer's name and notes), to set up schools and help them. They can't see the payments themselves, payslips, payouts or payout accounts. Their access is limited to a few people and every change is recorded.
- No one in one school can see another school's information.
Children's information
Students are minors. Their information is entered by their school, and only the school's owners, the student's linked parents and assigned teachers, and PhonicsManila staff can see it. The school asks for the parent's or guardian's consent when it enrols the child.
Service providers and where your information is stored
We use these providers to run PhonicsManila. They process information only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | The platform's database and sign-in | Singapore |
| Vercel | Hosting the platform and this website | Singapore, the United States and worldwide |
| Neon | This website's database, which holds contact-form inquiries | United States |
| Resend | Sending e-mails | Japan |
| Our e-mail inbox, where inquiries arrive (Gmail); website visit counts (Google Analytics) | Worldwide | |
| Cloudflare | Security check on password forms | Worldwide |
This means your information is stored and processed outside the Philippines. We remain responsible for it, and we have agreements with these providers to protect it.
How long we keep it
- Your account: until you ask us to delete it. We delete it within 30 days of your request and e-mail you when it's done.
- Sign-in attempts: 2 days.
- Students' information: as long as the student is enrolled, and for 90 days after.
- Records of classes, payments and pay: for 90 days after the student leaves or the teacher stops teaching at the school, or longer where the law requires the school to keep them. They keep the name they were recorded with, even after an account is deleted, and a payout keeps the masked account it was paid into (for example "GCash ····4567"), because the school needs them for its accounts.
- Payout accounts: while you teach at the school, and up to 90 days after you leave so your last pay can be paid; deleted with your account.
- Records of changes: 5 years. After your account is deleted, these records no longer show your name or e-mail address.
- Website inquiries: 1 year after your last message.
- Backups: deleted information can remain in backups for up to 30 days.
Your rights
Under the Data Privacy Act you have the right to be informed, to access your information, to have it corrected, to object, to have it deleted or blocked, to data portability, and to claim damages.
- Correct your details: change your name and phone number in My Profile. To change your e-mail address, or a student's details, contact your school or our Data Protection Officer.
- Delete your account: sign in, open My Profile and choose Request account deletion, or ask your school to contact us. Deleting removes your account, your sign-in, your place in every school, your payout accounts, and our copies of the e-mails we sent you (we keep only a record of the last one, which tells you it's done). Records the school keeps about its students stay with the school, and so do its records of classes, payments and pay, which keep your name.
- Anything else: e-mail our Data Protection Officer at phonicsmanila@gmail.com. We will answer within 30 days, or within 60 days if your request needs more time, in which case we'll tell you.
If you are not satisfied with our answer, you can complain to the National Privacy Commission (privacy.gov.ph).
How we protect it
All connections are encrypted. Each school's information is kept separate, and the database itself checks every request against the person's role. Payout account numbers are kept apart from everything else and shown masked; revealing one is limited to the school's owners and recorded. Passwords are stored scrambled; sign-in pauses after repeated wrong passwords; a security check stops bots; and every change is recorded. If a breach affects your information, we will tell you and the National Privacy Commission as the law requires.
Cookies
On the platform we use only the cookies needed to keep you signed in. They can't be read by scripts on the page and work only on your school's address. On this website, Google Analytics sets cookies to count visits. We use no advertising cookies.
Changes to this notice
If we change this notice, we will post the new version here with its date, and tell account holders by e-mail when the change is significant.