Privacy notice
Spelling Nest · last updated 19 September 2026
For children
Spelling Nest remembers your first name or nickname, your school year, your spelling words and how well you are doing, so Kit the owl can help you practise. We do not show adverts and we do not share it with anyone else.
Your grown up can see your practice. When they type the grown up PIN they can look at your word lists, your badges, your streak and how you did in each lesson. That is so they can help you, and it is the only person who can see it. If you want us to forget everything about you, ask your grown up. There is a button in the grown up part of the app that deletes all of it straight away, and they can also email us if they would rather.
Who we are
Spelling Nest is a spelling practice app for primary school children, run by Stuart Coussins, a sole trader trading as K&S Designs of 15 Alice Gardens, Rochford, Essex SS4 1YD. Stuart Coussins is the data controller. You can contact us at info@spellingnest.co.uk about anything in this notice.
What we collect and why
| Information | Why we need it |
|---|---|
| Parent or carer email address | To send your sign in code, to tell you before a payment is due, and to keep your family's data in one account |
| Date and time you agreed to this notice | To record your consent |
| A 4 digit grown up PIN, stored only in scrambled (hashed) form | To stop children changing word lists and settings |
| Each child's first name or nickname and, if given, school year | To greet each child and keep their progress separate |
| Word lists you add | To build spelling lessons |
| Lesson answers summarised as XP, streaks, badges, mastered words and lesson scores | To show progress and choose which words to practise |
| A random identifier stored in your browser | To understand how the app is used, without identifying anyone |
| Usage events: which parts of the app are used and how long lessons take | To see what is working and fix what is not. These never include spelling words, children's names or the content of messages you send us |
| Your subscription status, and the dates your free trial and your paid period run to | To know whether your family can start new lessons |
| A customer reference given to us by Stripe, our payment provider | To connect your subscription to your family account. It is a reference number, not your card details |
We do not collect children's full names, dates of birth, photos, location or contact details. The app has no adverts, and nothing is ever sold to your child inside a lesson. Usage events are stored in our own database and reported only as totals and averages. Words are read aloud by your own device's built in voice, so they are not sent to us.
We do use one outside service, HeyCatch, to understand how the app is used. It records which parts of the app are opened and how long lessons take. It never receives a spelling word, a child's name, an email address or anything you have typed, because we send it only a fixed list of actions and timings that we choose in advance. Clicks and the contents of boxes on the screen are switched off, so it cannot read what your child or you have put in one. It does record which pages are opened.
Nothing is sent to HeyCatch, and nothing is stored on your device for it, until you agree. You are asked once. If you say no, or if your browser sends a Do Not Track signal, it stays off and the app works in exactly the same way.
Our lawful basis
We rely on your consent as the parent or carer, given when you first sign in. You can withdraw it at any time by deleting your family's data in Grown ups.
Paying for Spelling Nest
Payments are handled by Stripe. When you subscribe you are taken to a payment page run by Stripe, you enter your card details there, and they go to Stripe. Your card number never reaches Spelling Nest and we never see it or store it.
Stripe tells us three things: a customer reference, whether your subscription is active, and the dates it runs to. Stripe sends your receipt, reminds you before your free trial ends, and tells you about renewals and failed payments. If you want to change or cancel your subscription you do it through Stripe's own management page, reached from Grown ups, and you can cancel in no more steps than it took to subscribe.
Stripe holds payment data outside the United Kingdom, including in the United States and India, under the standard contract terms described below. Stripe's own privacy notice covers what they do with it, at stripe.com/privacy.
Our lawful basis for this part is different from the rest. Handling your payment and keeping your subscription running is necessary to perform our contract with you, rather than something you consent to. We also keep a record of the sale for as long as tax law requires, which is our legal obligation.
Where your data is kept
Data is stored with our database provider, Supabase, in its London (United Kingdom) data centre region. Access to your family's data is restricted so that only your signed in account can read or change it.
These other services are involved:
- GitHub Pages hosts the website at spellingnest.co.uk. GitHub records the internet address (IP address) of every visit to the site, including your child's, and keeps it for security purposes. GitHub stores data in several countries, including the United States.
- Resend sends your sign in links. The email is sent from their Ireland region, but Resend stores your email address and the record of the email on their systems in the United States. We checked this with Resend's own published information on 18 September 2026.
- Stripe takes payments and holds your card details. Stripe stores data in several countries, including the United States and India.
- Zoho Mail holds our info@spellingnest.co.uk mailbox on its European Union servers, in Amsterdam with a backup in Dublin, so anything you email us is stored there.
- Google Fonts supplies the lettering and jsDelivr supplies the app's sign in code. Loading them means your browser contacts those services.
- HeyCatch receives the usage events described above, and only if you have agreed to them. It is given no spelling words, no names and no email addresses. We are confirming which countries it stores data in and will say so here; in the meantime you can ask us and we will tell you what we know.
Some of these providers hold data outside the United Kingdom. Where that happens they are bound by standard contract terms approved for international transfers, including the United Kingdom addendum issued by the Information Commissioner, and in some cases the United Kingdom extension to the European Union to United States Data Privacy Framework. These are intended to keep your data protected to United Kingdom standards. You can ask us at info@spellingnest.co.uk which terms apply to which provider.
How long we keep it
We keep your data while you use Spelling Nest. If your account is not used for 12 months, we will delete it. You can delete everything yourself at any time, in Grown ups, including your sign in account.
One exception. If you have ever paid us, the record of that sale, which is the amount, the date and who it was from, has to be kept for as long as tax law requires. That record survives a request to delete everything else, because we are required to keep it. It does not include your card number, which we never hold, and it contains nothing about your children.
Your rights
- See, correct or delete your family's information. You can do this yourself in Grown ups, with "Delete all our family's data". That removes everything: your children's profiles, word lists, progress and lesson history, the usage information described above, and your sign in account and email address. If you have a subscription it is stopped at the same time, so nothing further is charged. It cannot be undone, and the one exception is the record of any payment, explained above.
- If anything goes wrong with that, or you would rather we did it for you, email info@spellingnest.co.uk and we will do it by hand.
- Withdraw consent at any time.
- Complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.