Privacy Policy

Last updated: 12 March 2026

SpellBee is a product of FacilForge. SpellBee ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

1. Information We Collect

1.1 Personal Information

We collect information that you provide directly to us, including:

• Email address (for account creation)
• Child profiles (nickname, birth month and year, avatar and a 4-digit PIN)
• Word lists and practice data
• Progress and performance statistics

1.2 Usage Information

We automatically collect certain information about your device and how you interact with our app:

• Device information (model, operating system)
• App usage statistics
• Error logs and crash reports

2. Payment Processing

We use RevenueCat and Apple/Google payment systems to process subscription payments. When you make a purchase:

• Payment information is processed by Apple App Store or Google Play Store
• We do not store your payment card details
• RevenueCat receives transaction data to manage your subscription
• We receive subscription status information (active, expired, trial)

RevenueCat's privacy policy is available at revenuecat.com/privacy.

3. How We Use Your Information

• Provide and maintain our services
• Process your subscription and manage your account
• Track learning progress and provide personalised practice
• Send important updates about your subscription
• Improve our app and develop new features
• Respond to your support requests

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• RevenueCat (for subscription management)
• Apple/Google (for payment processing)
• AWS (for secure data storage)
• Service providers who assist in app operations

We may also disclose information if required by law or to protect our rights.

5. Children's Privacy

SpellBee is designed for children to use under parental supervision. Children never create accounts, and never provide an email address or password. A parent or teacher creates each child profile and controls all of its data. We do not knowingly collect personal information directly from a child without verifiable parental consent, given by the adult who creates the profile.

A child profile contains only:

• A nickname chosen by the parent (we ask parents not to use a child's real name)
• Birth month and year (used only to choose age-appropriate spelling words)
• An avatar emoji
• A 4-digit PIN, stored in a hashed form, so the child can unlock their own profile
• Spelling practice and progress data

We do not show advertising to children, do not use any third-party advertising or behavioural-tracking SDKs, and never build advertising or marketing profiles of children. A parent can review, edit or permanently delete a child's profile and data at any time from the parent dashboard. We handle children's data in line with the UK Age Appropriate Design Code (the "Children's Code"), UK GDPR, and, where applicable, the US Children's Online Privacy Protection Act (COPPA).

6. Data Security

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security assessments
• Limited access to personal data

7. Your Rights (UK GDPR)

If you are in the United Kingdom or the European Economic Area, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at contact@facilforge.com.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your account and data at any time.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy in the app and updating the "Last Updated" date.

11. Data Controller and Contact

SpellBee is a product operated by David Nunes Cuba, trading as FacilForge, who acts as the data controller for your information. The data controller is:

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at contact@facilforge.com. If you are in the UK and are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.