Privacy Policy

Last updated: 1 August 2026

This Privacy Policy explains what data Spell-IT collects, how it is used, and your rights as a user. Please read it carefully before using the app.

1. Who We Are

Spell-IT is a macOS spelling assistant developed by Toby Pernot. If you have any questions about this policy, contact us at: [email protected]

2. What Data We Collect

Data you provide directly

• Email address — collected at sign-up to identify your account.
• Name — optional, collected at sign-up.

Data collected automatically while you use the app

• Misspelled words and their corrections — when you accept a correction, the incorrect word, the correct word, and the name of the app you were typing in (e.g. "Pages", "Mail") are recorded.
• Practice session data — scores, difficulty level, and practice mode.
• App usage events — events such as app launch, practice started, and correction accepted. No content beyond spelling words is included.

What we do NOT collect

• Passwords — Spell-IT detects secure/password text fields and never monitors or records text typed into them.
• General keystrokes or personal content — the app reads text only to detect misspellings. Raw keystrokes are processed locally on your device and are never transmitted.
• Browsing history, files, photos, contacts, or any other personal data outside of spelling corrections.

3. How We Use Your Data

We use your data solely to:

• Provide and improve the Spell-IT service.
• Show you your personal spelling history and practice progress within the app.
• Understand how users interact with the app (usage analytics) to improve the product.
• Contact you about significant updates to the service (infrequently, and only using the email you provided).

4. We Will Never Sell Your Data

We do not sell, rent, trade, or otherwise transfer your personal data to any third party for commercial purposes. Ever.

5. Data Storage and Security

Your data is stored securely using Supabase (supabase.com), a trusted cloud infrastructure provider. Data is encrypted in transit (HTTPS/TLS) and at rest.

A local copy of your spelling history and practice progress is also stored on your device. This local data never leaves your device except as described in Section 2.

6. Data Retention

• Account data (email, name): retained for as long as your account is active. Deleted within 30 days of a deletion request.
• Spelling and practice data: retained to provide you with your history. You may request deletion at any time.
• Usage events: retained for up to 24 months for product analytics, then deleted.

7. Your Rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — ask us to delete your data ("right to be forgotten").
• Portability — request your data in a machine-readable format.
• Objection — object to processing of your data.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

If you are based in the UK or EU, you also have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK at ico.org.uk).

8. Children's Privacy

Spell-IT is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this document and, where appropriate, by notifying you via email.

10. Contact

For any questions, requests, or concerns about this privacy policy or your data:

Email: [email protected]

This policy is written in plain English intentionally. If you have questions about anything in it, just ask.