Privacy Policy

1. Introduction

EZSpell (“we,” “our,” or “us”) is committed to protecting the privacy of our users, especially children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the “Service”). Please read this policy carefully. By using the Service, you consent to the practices described herein.

2. Information We Collect

We collect the following types of information:

2.1 Account Information

When you create an account, we collect your name, email address, password (encrypted), and account type (student, parent, teacher, or administrator). For student accounts created by a parent or teacher, we collect a display name and grade level.

2.2 Usage Data

We collect information about how you interact with the Service, including words practiced, game scores, session duration, features used, and learning progress. This data is used solely to personalize the learning experience and provide progress reports.

2.3 Device and Technical Information

We automatically collect certain technical information, including browser type, operating system, device type, IP address, and general location (city/region level only). This information helps us ensure the Service works properly across devices.

2.4 Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers on our servers. Stripe's privacy policy governs the collection and use of payment information.

3. How We Use Information

We use collected information to:

• Provide, maintain, and improve the Service
• Personalize the learning experience using our adaptive AI engine
• Generate progress reports for students, parents, and teachers
• Process transactions and send related information
• Send administrative notifications (e.g., security alerts, account updates)
• Respond to customer support requests
• Analyze usage trends to improve our educational content and features
• Ensure compliance with legal obligations

4. Children's Privacy (COPPA Compliance)

EZSpell complies with the Children's Online Privacy Protection Act (COPPA). We take special precautions to protect the privacy of children under 13:

• Children under 13 cannot create accounts independently. A parent, guardian, or teacher must create and manage the account.
• We collect only the minimum information necessary to provide the Service to child users.
• We do not display advertising to child users.
• We do not sell, trade, or share children's personal information with third parties for marketing purposes.
• Parents and guardians can review, modify, or delete their child's information at any time through the parent dashboard or by contacting us.
• We obtain verifiable parental consent before collecting personal information from children under 13.

5. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, access controls with role-based permissions, and automated threat monitoring. While we strive to use commercially acceptable means to protect your data, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes. Anonymized, aggregated data (which cannot identify any individual) may be retained indefinitely for research and product improvement.

7. Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Vercel: Application hosting
• OpenAI / Anthropic: AI features (no personal student data is sent to AI providers; only anonymized learning content)
• ElevenLabs / Deepgram: Voice features (audio is processed in real-time and not stored)

Each third-party provider is bound by their own privacy policies and data processing agreements.

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use advertising or tracking cookies. Essential cookies cannot be disabled as they are necessary for the Service to function. We may use anonymous analytics cookies to understand general usage patterns; these do not identify individual users.

9. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data
• Rectify or update inaccurate personal data
• Request deletion of your personal data
• Object to or restrict the processing of your data
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@ezspell.com. We will respond to your request within 30 days.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

We reserve the right to update this Privacy Policy at any time. We will notify you of material changes by posting the updated policy on our website and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.