SpellSprout Privacy Policy
Last Updated: February 16, 2026
SpellSprout ("we," "our," or "us") is committed to protecting the privacy of children who use our educational spelling practice application. This Privacy Policy explains how we collect, use, and protect information in compliance with the Children's Online Privacy Protection Act (COPPA).
1. Information We Collect
Information We DO NOT Collect
- We do not collect personal information from children under 13
- We do not require account creation for children to use the app
- We do not display advertisements to children
- We do not share any data with third parties for marketing purposes
Information Stored Locally on Device
The following data is stored only on your device and is never transmitted to our servers:
- Practice progress (spelling words attempted, accuracy, streaks)
- Spelling lists created by a parent
- App settings and preferences
- Players are identified only as "Player A" and "Player B" — no names are stored
Optional Anonymous Analytics (Off by Default)
When a parent explicitly enables analytics in Settings > Privacy:
- Sentry receives anonymous crash reports (error type, stack trace, app version — no personal data)
- PostHog receives anonymous usage events (session duration, words attempted, feature usage — no personal data)
Analytics are disabled by default and can only be enabled by a parent from the parent dashboard. When disabled, no data of any kind is transmitted to Sentry or PostHog.
Third-Party Services Used
| Service | Purpose | Data Shared | When Active |
|---|---|---|---|
| Sentry | Crash reporting | Anonymous error data | Only when parent enables analytics |
| PostHog | Usage analytics | Anonymous usage events | Only when parent enables analytics |
Note: Photo-based spelling list import is processed entirely on your device using Apple's built-in text recognition — photos are never uploaded anywhere. Word pronunciation uses your device's built-in text-to-speech. When analytics are disabled (the default), no data of any kind leaves your device.
2. How We Use Information
Local device data is used solely to:
- Track learning progress within the app
- Remember app settings between sessions
- Provide practice statistics to parents
We do not use any data for:
- Advertising or marketing
- Profiling or behavioral analysis
- Sale to third parties
3. Parental Controls
Parents have complete control over their child's experience:
- PIN Protection: Parent dashboard is protected by a PIN or biometric lock
- Analytics Toggle: Anonymous analytics are off by default; parents can opt in or out at any time from Settings > Privacy
- Data Export: Parents can export all data in JSON or CSV format
- Data Deletion: Parents can delete all app data at any time from Settings
- No External Communication: Children cannot contact anyone through the app
4. Data Security
- All data is stored locally on your device using encrypted storage (AsyncStorage with Expo SecureStore for sensitive data)
- No cloud servers store children's data
- Parent PIN is stored securely using platform-provided encrypted storage
5. Data Retention and Deletion
- Local Data: Remains on device until parent deletes it or uninstalls the app
- No Server Storage: We do not retain any user data on servers
- Analytics Data: If analytics were enabled, Sentry and PostHog retain anonymous, non-identifiable data per their own retention policies
How to Delete Data
- Open SpellSprout
- Enter parent PIN
- Go to Settings > Data > Reset All Data
- Confirm deletion
6. Children's Privacy Rights (COPPA Compliance)
In compliance with COPPA:
- We do not collect personal information from children under 13
- We do not require children to provide information to use the app
- Anonymous analytics are disabled by default and require explicit parental opt-in
- Parents can review, delete, or refuse further collection of their child's information
- We do not condition a child's participation on disclosure of more information than necessary
7. California Privacy Rights (CCPA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell data)
- Right to non-discrimination for exercising privacy rights
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the app
- Updating the "Last Updated" date
9. Contact Us
If you have questions about this Privacy Policy or our privacy practices:
Email: support@spellsprout.app
For COPPA-related inquiries:
Email: privacy@spellsprout.app
10. Consent
By using SpellSprout, you (the parent or guardian) consent to this Privacy Policy. If you do not agree with this policy, please do not use the app.
This Privacy Policy is designed to comply with the Children's Online Privacy Protection Act (COPPA), the California Consumer Privacy Act (CCPA), and Apple App Store / Google Play Store requirements for children's apps.