Privacy Policy

Only a parent (or legal guardian) can create a SpellOwl account. For that account we collect your name, your email address and, if you sign in with Google or Apple, the identifier those services share with us. Payment is handled by Apple (App Store), Google (Google Play) or Stripe; we never see your card number. RevenueCat keeps track of App Store and Google Play subscriptions for us: it receives your account identifier and your purchase records, never your name or anything about your child.

A child profile consists of a nickname you choose and a school level (for example "3rd grade"). We never ask for and never store a child's real name, birthdate, or exact age. This is deliberate: the practice engine only needs a level, so we simply do not collect anything else about your child.

When you photograph a spelling list, the photo is processed to extract the words, and short context sentences are generated for practice. You review both the words and every sentence before your child sees them. Two AI providers act as our processors for this:

• OpenAI reads the photographed list (text extraction) and generates the context sentences used in practice.
• ElevenLabs turns the words and sentences into the audio your child hears.

We ask for your explicit consent in the app before your first scan. We never send your child's nickname, age, or your account details. Only the school level of the list is used, to size the sentences. OpenAI receives the photo as you framed it: if the page shows a name or a school, crop it out or cover it before you take the photo. ElevenLabs receives only the words and sentences it has to read aloud.

OpenAI may keep what it receives for up to 30 days to detect abuse, then deletes it; it does not use it to train its models. When ElevenLabs is unavailable, OpenAI reads the word or sentence aloud instead.

We measure how the product is doing with PostHog. Business events (signups, subscriptions, scans) are recorded on our servers only, tied to the parent account. Analytics never contains child data: no nicknames, no practice content, and no events from the screens your child uses. On the website, analytics cookies are off until you accept them. The app also records a few usage events, which you can turn off in your parent settings. Server-side events are recorded under our legitimate interest; to object to those, write to contact@spellowl.com.

When the app crashes, it sends a technical report to Sentry, our crash-reporting provider, hosted in the European Union: the error, the device model and the system version. The report is not linked to your account and does not contain your name, your email address or your child's nickname.

For security, each sign-in session records the IP address and the device or browser it came from, and our servers keep short-lived request counts per IP address to limit abuse. These records are deleted with the session or within a day.

The app also creates random installation identifiers, which are not your device's hardware identifiers and are never used for advertising: they let our subscription provider link a purchase to your account and let us deliver app updates. SpellOwl never uses the advertising identifier.

To run SpellOwl we rely on a few service providers, who process data only on our instructions: Vercel (hosting), Neon (database), GitHub (encrypted database backups), Resend (the emails we send you, such as address verification and password reset), PostHog (analytics, hosted in the European Union), RevenueCat (subscriptions), Sentry (crash reports), OpenAI and ElevenLabs (see above).

Your data is kept while your account exists. Deleting your account, which you can do at any time from your parent settings, permanently deletes your profile, all child profiles, all word lists and all practice history, and we also delete the person record held in our analytics tool (PostHog). Deletion is a purge, not a deactivation.

You can also ask for deletion without the app: see https://www.spellowl.com/delete-account. We complete every deletion within 30 days. Deleting your account does not cancel a subscription bought through the App Store or Google Play: cancel it in your store account.

• Sell or rent your data, or your child's, to anyone.
• Collect a child's birthdate or exact age.
• Put your child's nickname in AI prompts, or any child data in analytics events.
• Show ads, or let third parties track your child.

Privacy questions and requests (access, correction, deletion): write to Thomas Fontaine, publisher of SpellOwl, at contact@spellowl.com. We answer every message.