Draft for review. This policy has not yet been reviewed by a lawyer. Items in [brackets] are still to be filled in.
Privacy Policy
Last updated: October 7, 2026
Orthoglot is a spelling practice app for children, run by a parent, guardian or teacher. This policy explains what information we collect, why, who we share it with, and the choices you have. Orthoglot is offered in the United States. It is operated by [legal name of the owner or business] ("we", "us").
Who uses Orthoglot
Only adults aged 18 or older can create an account. Children use Orthoglot under that adult's account, on a device the adult has signed in to. Children do not create accounts, and we never ask a child for an email address, phone number, address or any other contact information.
What we collect
About the adult account holder:
- Email address, used to sign in and to send account emails (confirming the account, resetting a password).
- Password. It is stored by our sign-in provider in scrambled (hashed) form; we cannot see it.
- If you sign in with Google, Apple or Microsoft: that company tells us your email address and confirms it is yours, and may also share the name and profile picture on that account. We use only the email address. We never see your Google, Apple or Microsoft password, and Orthoglot never posts or reads anything else in that account.
- Your plan (free or paid), and the date you agreed to these terms and gave consent for your learners.
About learners (entered by the adult, or by the learner while using the app):
- A name for each learner. Please use a first name or nickname only.
- Age (optional), used to pitch word details and the Word of the Day at the right level.
- Word lists, test results, progress on each word, starred words, and the voice chosen for reading words aloud.
- Sentences and notes a learner writes for their words.
- If you turn on Classrooms and Groups: the names you give your classrooms or groups, and which learners and lists are in each.
- If you give a learner a sign-in for their own device: the username you choose and their PIN, which is stored scrambled so nobody (including us) can read it, plus a record of the devices they're signed in on. Learners never give an email address.
On your device: the app saves a copy of your lists and progress in your browser's storage so it keeps working offline. We do not use advertising cookies, tracking pixels or third-party analytics.
How we use it
Only to run Orthoglot: to save and show your lists and progress, to run tests, to write word details when you ask for them, and to send account emails. We do not show ads, sell personal information, share it for advertising, or build marketing profiles of children or adults.
AI word details
On the paid plan, AI can write a word's sentence, definition, spelling tips and origin, and pick a Word of the Day. To do this we send the word (or recent words to avoid) and the learner's age to Anthropic, the company that makes the Claude AI. We never send a learner's name. Under Anthropic's commercial terms, information sent through its service is not used to train its AI models.
If you scan a word list, the photo or PDF you choose is sent to Anthropic so its AI can read the words. Only the words come back; Orthoglot does not keep the file. A photo or PDF can show other things, such as a name on the page, so please crop or cover anything you don't want to send.
Who we share it with
We use these service providers to run Orthoglot. Each handles information only to provide its service to us:
- Supabase: sign-in and the database that stores accounts, lists and progress. This database and its backups are kept on servers in Canada.
- Netlify: hosts the website and runs the small server functions behind AI word details.
- Resend: sends account emails.
- Google Cloud Text-to-Speech (paid plan): records the words and sample sentences on your lists in a studio voice. Only those words and sentences are sent, never names, learners' own sentences or other information. The recordings are kept by Netlify so they can be played again.
- Anthropic: writes AI word details (words and ages only) and reads word-list photos and PDFs you scan, as above.
- jsDelivr: delivers a code library the app uses; like any website, it sees your device's internet address.
We may also share information if the law requires it, or to protect the safety of a child.
Children's privacy
We follow the Children's Online Privacy Protection Act (COPPA). The adult who creates the account gives consent for the learner information described above when signing up. As the parent or guardian you can, at any time:
- See and change your learners' information in Orthoglot Coach.
- Remove a learner, which deletes that learner's information from our database.
- Download a copy of everything in your account: Orthoglot Coach → Your Account → Download my data.
- Delete your whole account and everything in it, straight away: Orthoglot Coach → Your Account → Delete my account. You can also ask us to do this, or to stop collecting information about your child, by emailing [contact email]. We will do so within 30 days.
We collect only what the app needs to work, and no feature requires a child to give more.
Teachers and schools
A teacher who uses Orthoglot with students must have their school's permission. Under COPPA, a school can give consent on parents' behalf when the app is used only for the school's educational purposes. We use students' information only to provide Orthoglot to that teacher and school, never for advertising or any other commercial purpose. A parent can ask the teacher, or us at [contact email], to see or delete their child's information.
How long we keep it
We keep your information while your account is open. When you remove a learner or we delete your account, the information is deleted from our database; copies in our database backups are removed as those backups expire, within 7 days.
Security
Information travels over encrypted connections (HTTPS). Database rules let each account read and change only its own lists and learners. Orthoglot Coach asks for the account password before showing settings. No system is perfectly secure, and we will tell you promptly if a breach affects your information.
Your rights under state law
Depending on your state (for example California), you may have the right to know what personal information we hold, to get a copy, to correct it, and to have it deleted. We do not sell or share personal information as those laws define it. To use any of these rights, email [contact email]. We will not treat you differently for doing so.
Changes to this policy
If we change this policy we will update the date above. If a change affects how we use children's information, we will tell account holders by email and ask for consent again where the law requires it.
Contact
[legal name of the owner or business], [mailing address], [contact email].