Privacy Policy

This Privacy Policy explains how Spelloom (“Spelloom”, “we”, or “us”) collects, uses, shares, stores, and protects information when you use the Spelloom mobile application, website, and related services.

Information we collect

• Account and identity data: email address, profile name, internal user ID, and identifiers provided by Apple or another sign-in provider.
• Learning data: selected languages and courses, words, answers, study history, progress, streaks, statistics, room participation, leaderboard results, and settings.
• Content you provide: custom words, examples, images, audio recordings or files, profile information, room content, and messages or attachments sent to support.
• Voice data: microphone audio used for pronunciation exercises. Speech recognition may be processed by Apple. Recordings attached to custom words are uploaded only when you choose to record or add them.
• Purchase data: subscription product, entitlement, transaction status, renewal, and restore information. Payments are processed by Apple; Spelloom does not receive your complete payment-card details.
• Device and usage data: device or push-notification token, app and operating-system information, internal identifiers, screens viewed, feature interactions, and diagnostic or security events needed to run and improve the service.
• Website and launch-notification data: email address, page language, form source, consent date and time, and, only with your consent, website analytics such as page views and button interactions.

How we use information

We use information to create and secure your account, provide and synchronize learning features, personalize exercises and review timing, operate rooms and leaderboards, deliver notifications you request, manage subscriptions, provide support, prevent abuse, troubleshoot problems, and understand and improve Spelloom.

Service providers and sharing

We share only the information needed for a provider to perform a service for Spelloom:

• Apple: Sign in with Apple, in-app purchases, push notifications, and speech-recognition services.
• Google Firebase: app analytics, app integrity checks, and push-notification delivery.
• RevenueCat: subscription entitlement, purchase, renewal, and restore management.
• YouTube/Google: playback of learning videos. YouTube may process device and viewing information under its own privacy terms.
• OpenAI and Google Cloud AI: when a custom word is enriched or generated audio is requested, the word, language, and limited context needed to create a transcription, example, level, part of speech, or audio may be processed by the configured provider. We do not send your account email for this purpose.
• Hosting, storage, email, and security providers: infrastructure required to deliver and protect the service.

We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards. We do not sell personal information, use it for third-party advertising, or track you across other companies’ apps and websites.

Analytics, consent, and your choices

App analytics may include an internal user ID and product interactions so we can understand reliability and feature use. Website analytics through Google Analytics 4 runs only after you consent. We do not send your email address or form-field values to Google Analytics. You can allow, decline, or change website analytics through “Cookie settings” in the footer.

You control microphone, speech-recognition, and notification permissions in iOS Settings. You may withdraw consent previously given for launch emails or other optional processing by contacting us. Withdrawal does not affect processing that already occurred.

Retention

Account, learning, and user-provided content is retained while your account is active. Push tokens are retained while needed to deliver enabled notifications. Launch-notification data is retained until the launch message is sent or you withdraw consent. Analytics, security logs, support communications, and subscription records are retained only for the period reasonably necessary for the purposes above, dispute resolution, security, accounting, or legal obligations. Deleted data may remain temporarily in restricted backups until the backup rotation completes.

Account deletion

You can delete your account directly in the app (Profile → Settings → Delete account) or request deletion by contacting us. Account data is removed from active systems, except information we must retain for legal, fraud-prevention, security, accounting, or dispute-resolution purposes. Deletion is permanent. Deleting your Spelloom account does not automatically cancel an Apple subscription; subscriptions must be managed separately in your Apple Account settings.

Security and international processing

We use technical and organizational safeguards, including encrypted HTTPS connections and access controls. No system is completely secure. Service providers may process information in countries other than yours, subject to their contractual and legal safeguards.

Children

Spelloom is not directed to children under 13 or the minimum digital-consent age in their country. If you believe a child provided personal information without appropriate permission, contact us so we can investigate and delete it.

Your privacy rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also withdraw consent where processing relies on consent. Contact us to make a request; we may need to verify your identity.

Changes to this policy

We may update this policy when our services or legal obligations change. We will publish the updated version here and change the date above. We will provide additional notice when a material change requires it.

Contact

For privacy questions, email [email protected].