Privacy
Last updated 5 September 2026
Sonnify AAC is a communication app. The things people say through it are personal by definition, so this page tells you exactly what stays on the device, what leaves it, who else is involved, and how long anything is kept. No defined terms, no schedules.
The short version
- This website collects a name, an email address and which phone you use. Nothing else.
- In the app, your phrases, your history, your photos, your settings and your typing stay on the device.
- Three things send text off the device because they cannot work otherwise: the expressive voices, the AI helper, and a feedback report if you choose to send one. Each is described below.
- An account is optional. If you make one, you can delete it from inside the app.
- We do not sell anything to anyone, we do not run advertising, and there is no tracking.
This website
The invite form asks for your name, your email address and whether you use Android, iOS or both. A bot check by Cloudflare runs on the form so it cannot be flooded. It is Cloudflare Turnstile, and Cloudflare's Turnstile privacy notice applies to it.
We use your details for one thing: sending you a beta invite and occasional notes about Sonnify AAC. The form goes to [email protected] by email through a service called Resend, which also keeps our contact list, and the site is hosted on Cloudflare. We can see how many people visit, which pages they read and where on the page people tap and scroll, through Cloudflare Web Analytics and through Umami, an analytics tool on a server we run. Neither uses cookies or fingerprints you. There is no advertising on this site. We do not pass your details to anyone else.
Reply to any email from us, or write to [email protected], and we will delete your details. No reason needed.
The app: what stays on the device, and what leaves it
| What | Where it lives |
|---|---|
| Your phrasebook, categories and symbols | On the device only |
| Photos you add to phrases, and your avatar | On the device only |
| Your message history | On the device only |
| Your settings, colours and voice choice | On the device only |
| Word prediction and what it learns | On the device only |
| Backups you make | Files you create and keep. They leave the device only if you move them. |
| Your device's built-in voices | On the device only |
| Expressive voices | The text you want spoken is sent to our server, then to ElevenLabs, which returns the audio. The audio is kept on the device, and a copy is kept in a shared cache on our side so the same phrase is never generated twice. The cache holds the audio clip only, nothing about who asked. |
| The AI helper | What you type into it is sent to our server, then to an AI model run on DigitalOcean, which answers. To keep the conversation coherent, the recent messages in that chat travel with each send. Our server does not keep the text. |
| Crash reports | Technical details of a crash (device model, system version, app version, what failed) go to Sentry, stored in the European Union. We do not attach your phrases to them. |
| Feedback you send | If you send a report from inside the app, it carries your message, the category you picked, the app version and device details, and your email address if you are signed in so we can reply. Recent warning and error lines from the app's own log are included only if you switch that on. The report reaches us by email through Resend. Error reports you send from inside the app also go to Sentry, with your email address if you are signed in, so the report can be matched to the fault. Feedback does not. |
| Signing in, if you choose to | Your email address, your name and a profile picture, when the sign-in method you pick provides them, go to Kinde, which handles accounts and plans. You can use Sonnify AAC without an account. |
Your account
You never need one. Everything in the table above works without signing in.
If you make one, Kinde holds your email address, your name, a profile picture if your sign-in method provides one, and which plan you are on. Premium billing runs through the same service. Nothing from your phrasebook, history or typing is stored with your account.
Deleting your account. In the app, open Settings, then Manage account, then Delete account. You will be asked to sign in again first. That removes your account and plan from Kinde, and any paid plan is cancelled at the same time. It also clears that account's phrasebooks, history and photos from the device, so back up first if you want to keep them. If you no longer have the app, use the request page at sonnifyaac.com/delete-account or write to [email protected].
Who else is involved
Building this alone means using other people's services. These are all of them:
- ElevenLabs, for the expressive voices. Receives the text you ask it to speak.
- DigitalOcean, which runs the AI helper. Receives what you type into it and the recent messages of that chat.
- Kinde, for accounts and plans, if you make an account. Receives your email address, name and profile picture.
- Sentry, for crash and error reports. Receives technical fault information, and the email address on an error report if you are signed in, stored in the European Union.
- Resend, for the beta emails and for feedback reports. Receives the details you enter.
- Cloudflare, which hosts this website, counts its visits, and holds the shared audio cache in its Australia and New Zealand region.
- Zuplo, the server that sits between the app and the services above, so the app never talks to them directly.
- Stripe, Kinde's payment processor. Receives your card details if you pay for Premium, through Kinde's billing page. They never pass through us.
Each of these publishes its own privacy terms, and some of them process data outside Australia: ElevenLabs, Resend and Stripe in the United States, Sentry in Germany, DigitalOcean in Canada. Kinde keeps account data in Australia.
How long we keep things
| What | How long |
|---|---|
| Your invite details from this website | Until you ask us to delete them. |
| Feedback reports | Kept. They are how the app gets better. Ask and yours is deleted. |
| Crash reports | 90 days, then Sentry deletes them. |
| The shared audio cache | Until we clear it. It contains no account information. |
| Your account | Until you delete it. |
| Everything on your device | Yours, for as long as you keep it. |
We do not remove inactive accounts: people come back to AAC after a hospital stay or a change of carer, and the plan and profile should be waiting for them. Nothing in that time is used for anything else.
Children and supported users
Many people who use AAC are children, or are supported by a parent, carer or clinician. If you are setting Sonnify AAC up for someone else, Setup Lock exists so you can decide what they can change. Speaking is never locked, only changing things. If you would like anything removed that relates to a person you support, write to us and we will do it.
Your rights, and the law this page answers to
We handle personal information under the Privacy Act 1988 and the Australian Privacy Principles. You can ask what we hold about you, ask us to correct it, or ask us to delete it, and we will answer within 30 days. If you think we have got something wrong, tell us first and we will fix it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
This is a beta
Sonnify AAC is in testing and it is being built by one person. If any of the above changes, this page changes with it and so does the date at the top. If a change matters to you, testers get an email about it rather than a quiet edit.
Getting in touch
Sonnify AAC is made by Synapse & Soul Pty Ltd in Perth, Western Australia. Questions, corrections or deletion requests all go to the same place: [email protected]. A real person reads it.