Privacy, Legal & Compliance

Who we are

Spelling Mastery is an online spelling practice and assessment tool for primary-school pupils. We act as a data processor on behalf of schools (the data controllers).

What data we collect

• Pupils: first name, username, year group, class, spelling scores and word history. No email address, date of birth, or photo is collected from pupils.
• Teachers / admins: name, school email address and school name.

Why we collect it

• To provide the spelling practice and test service
• To allow teachers to monitor pupil progress
• To generate audio for spelling words (via OpenAI TTS, cached in Google Cloud Storage)

Who we share data with

• Google Firebase / Firestore — authentication and database (EU region)
• Google Cloud Storage — audio file cache (EU region)
• Netlify — web hosting and serverless functions (global CDN)
• OpenAI — text-to-speech audio generation (data not used for training)

We do not sell data, use it for advertising, or share it with any other third party.

Data retention

Pupil data is retained for the duration of the school subscription plus 90 days, then permanently deleted. Schools may request deletion at any time.

Your rights (UK GDPR)

Pupils and parents may exercise rights of access, correction, erasure and portability. Requests should be made via the school's Data Protection Officer and forwarded to us at privacy@spellingmastery.com.

Cookies

We use only strictly necessary session cookies to keep users logged in. No analytics cookies or marketing trackers are used.

Contact

For privacy enquiries: privacy@spellingmastery.com

Spelling Mastery uses a single session cookie to maintain your login. This cookie is deleted when you close your browser. No advertising or analytics cookies are set. No consent is required under UK PECR for strictly necessary cookies.