Privacy Policy
Last updated: 25 April 2026
This Privacy Policy explains how Spelling - SG (the "App") collects, uses, shares and protects information when parents and their children use our iOS app and website. We try to keep this short and plain so any parent can read it.
1. Who we are
Spelling - SG is an English spelling practice app for Singapore primary school students. We handle personal data in line with the Singapore Personal Data Protection Act 2012 (PDPA).
If you have any privacy questions or want to exercise your rights, you can reach us:
2. What we collect
Account information
- Username and email (used to sign in and to send account-related messages).
- A securely hashed password (we never store your password in plain text). If you sign in with Apple, we receive a stable user identifier from Apple instead — Apple's own privacy policy applies to that.
Profile information
- Your child's school and grade (so we can show the right spelling lists). You may also add a second school/grade.
- A display name if you choose to set one.
Spelling lists you upload
- Photos of spelling lists you upload from your phone or computer.
- The words extracted from those photos, plus the school, grade and (optional) test date you tag them with.
Practice data
- Which words your child has practised, their answers, scores, and the dates of practice sessions. We use this only to power the daily practice queue and the spaced-repetition reminders.
Subscription and payment information
- Your subscription status, renewal/expiry date, and an opaque transaction identifier from Apple (iOS) or Stripe (web).
- We do not store credit card numbers. Payment is handled entirely by Apple or Stripe.
Device and technical information
- Standard server logs (IP address, request time, basic device/browser info) used to keep the service running and to debug problems.
- We do not use third-party analytics or advertising trackers in the App.
3. How we use your information
- To create and run your account.
- To show the right spelling lists for your child's school and grade.
- To run the daily practice queue and remember your child's progress.
- To send local reminder notifications on the iOS app (you can turn these off in iOS Settings).
- To process subscriptions and confirm whether your account has access to paid features.
- To reply to support requests you send us.
- To keep the service secure (e.g. detect abuse, debug errors).
We do not sell, rent, or share your personal data with third parties for marketing.
4. Sharing of uploaded spelling lists
Please read this section carefully — it is the most important thing to understand about the App.
Sharing spelling lists between parents is a core feature of the App. When you upload a spelling list, you are asked to tick a box that says you agree to share it with other parents using the App for spelling practice. If you tick that box and upload, the list (the words, the school, the grade, and the test date you entered) becomes visible to other users — typically other parents whose child is at the same school and grade.
What is shared:
- The list of words.
- The school name, grade, and test date you tagged it with.
What is not shared:
- Your name, your child's name, your email, or your phone number.
- Your photo of the original spelling list (the photo is processed and then not shown to other users).
- Your child's practice records, scores, or progress.
If you do not want to share a list, do not tick the consent box and do not upload the list.
Removing a list you uploaded: open Settings → My uploaded lists and tap Delete next to the list. The list is then removed from the shared pool for everyone, including users who had added it. If you cannot find the list or need help, email us at admin@onechineseedu.com.
Reporting a list someone else uploaded: on any shared list you can tap the ⋯ menu and choose 🚩 Report this list if its content is inappropriate, or 🚫 Block this uploader to stop seeing any lists they share. Lists that receive 3 or more reports are automatically hidden from the shared pool while we review them; we aim to action reports within 24 hours.
5. Third-party processors we use
To run the App we share specific, limited information with the following service providers. They act as data processors on our behalf and are only allowed to use the data to provide their service to us:
- Anthropic (Claude API) — when you upload a photo of a spelling list, we send the image to Anthropic's Claude vision service so it can read the words on the page (OCR). The image is sent for processing and is not used by us for any other purpose. See anthropic.com/legal/privacy.
- Apple (App Store / In-App Purchase / Sign in with Apple) — handles iOS subscription payments and, if you choose it, sign-in. See apple.com/legal/privacy.
- RevenueCat — receives your subscription receipt from Apple to confirm your subscription status on iOS. See revenuecat.com/privacy.
- Stripe — processes web subscription payments. See stripe.com/privacy.
- Railway — hosts our servers and database (Singapore region). See railway.com/legal/privacy.
6. Where your data is stored
Your account data, profile, uploaded lists and practice records are stored on servers operated by Railway in Singapore. Some of the third-party processors listed above (such as Anthropic, Apple, RevenueCat and Stripe) may process limited data outside Singapore as part of running their global services. Where that happens, we rely on the contracts and protections those providers offer to keep your data safe.
7. Your rights under PDPA
You have the following rights over your personal data:
- Access: ask us for a copy of the personal data we hold about you.
- Correction: ask us to fix anything that is wrong. You can update your school and grade yourself in Settings.
- Withdraw consent: you can stop using the App at any time and ask us to delete your account.
- Delete: from Settings → Delete My Account you can permanently delete your account and all your practice records. You can also email us to request deletion.
- Remove a shared list: see Section 4.
To exercise any of these rights, email admin@onechineseedu.com. We will respond within a reasonable time as required by PDPA.
8. Children's data
The App is designed for primary school students (typically ages 7–12) who use it together with their parent or guardian. The account holder must be a parent or legal guardian. The parent decides what to upload, picks the child's school and grade, and controls the account.
We do not knowingly collect more personal information about a child than what is described in this policy. We do not show advertising to children, do not use the App to build advertising profiles, and do not share children's practice data with anyone outside the App. If you believe a child has given us information you did not intend to share, please contact us and we will delete it.
9. How long we keep your data
- Account, profile and practice data: kept as long as your account is active. When you delete your account, this data is removed.
- Uploaded shared lists: may continue to be available to other parents for spelling practice after you delete your account, because the list itself does not contain personal information about you or your child. If you want a specific list removed, see Section 4.
- Subscription records: we may keep basic transaction records for as long as we are required to under tax and accounting rules.
- Server logs: kept for a short period (typically a few weeks) for debugging and security, then automatically discarded.
10. Security
We take reasonable steps to protect your information:
- All traffic between your device and our servers is encrypted in transit using HTTPS/TLS.
- Passwords are stored as bcrypt hashes — we never store the actual password.
- Sign-in uses short-lived bearer tokens (JWT).
- Access to our production servers and database is limited to authorised people.
No system can be guaranteed 100% secure. If we ever become aware of a breach that affects your personal data, we will notify you and the relevant authorities as required by PDPA.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version. If we make a significant change, we will let you know inside the App or by email. Continuing to use the App after a change means you accept the updated policy.
12. Contact us
For any privacy question, request, or complaint, please contact us:
If you are not satisfied with our response, you may also contact Singapore's Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.