Spelling Adventure is provided by GambIT Consulting Ltd, a company registered in England and Wales (company number 08880532), with a registered office at 4th Floor, Radius House, 51 Clarendon Road, Watford, Hertfordshire, WD17 1HP. We are registered with the UK Information Commissioner's Office (ICO) as a data controller, registration number ZC161957.
For any questions about this notice or your data, contact: privacy@gambit-c.co.uk
This notice is written for the parent or legal guardian of a child using Spelling Adventure. Your child does not need to read this notice — we have a separate, simpler version for them inside the app.
We collect only what we need to run the app and improve it. We do not sell your data. We do not show advertising to your child.
| Data | Why we need it | How long we keep it |
|---|---|---|
| Email address | To create the account, send sign-in links, respond to support requests, send important service messages | Until you delete your account |
| Marketing preference | To respect your choice about beta updates and product emails | Until you change it or delete your account |
| Registration date | To know when your account was created (for support, billing later, and audit) | Until you delete your account |
| Terms version accepted at signup | To record which version of this privacy notice you agreed to, in line with GDPR consent requirements | Until you delete your account (anonymised stub retained for 7 years for audit; no personal data — see "Account deletion" below) |
We capture what your child does in the app so we can adjust difficulty, find what works for them, and improve the app for everyone. This includes:
| Category | What that means in practice | How long we keep it |
|---|---|---|
| Profile | Chosen avatar name, year group, avatar changes | Until you delete the account |
| Answers | The words shown, what your child typed or selected, whether the answer was correct, how quickly they answered, options shown for multiple-choice questions | Until you delete the account |
| Help and hints | When the "I need help" button is used, on which words, in which part of the app | Until you delete the account |
| Engagement | Which games are started and finished, which videos are watched or skipped (intro, welcome, reward animations, story videos), audio buttons tapped, achievements page opened | Until you delete the account |
| Progress | Levels completed, mystery images revealed, rewards earned, cycles completed, retention re-tests | Until you delete the account |
| Navigation | Which screens are visited, where children get stuck or leave | Until you delete the account |
| Mode | Whether the child mode or adult mode is active | Until you delete the account |
| Settings and lists (adult area) | Settings you change, lists you create or load, time spent in adult vs child mode | Until you delete the account |
| Behaviour patterns | We analyse the above to identify common mistake types (such as letter swaps), when a child may be rushing or losing interest, and which features children avoid. We use this to improve the app. | Until you delete the account |
| Technical context | Device type and app version (no IP address kept long-term) | 90 days |
We do not collect your child's full name, date of birth, photograph, school class, postal address, location, contacts, or any health information.
| Data | Why we need it | How long we keep it |
|---|---|---|
| School identifier | To load the correct word lists for that school's curriculum | Linked to the subscription, not to your child personally |
| Year-group context implied by the code | Same as above | Same as above |
We want to be transparent about this because it's the area most likely to feel intrusive if not explained.
The app analyses your child's answers and behaviour to:
We do not use this analysis to:
You can see what we have on your child at any time through your Account page, and you can ask us to delete it.
We rely on parental consent because Spelling Adventure is designed for children aged 5–11, and UK GDPR requires parental consent for users under 13.
All personal data is stored in the United Kingdom in Microsoft Azure data centres (UK South region, with backup to UK West). We do not transfer your child's personal data outside the UK or European Economic Area.
Spelling Adventure is currently in beta. We're actively improving it, so:
We do not share your child's personal data with anyone, with these limited exceptions:
We do not share data with advertisers, data brokers, or social media platforms.
Under UK GDPR you have the right to:
The easiest way to exercise these rights is through your Account Management page in the app, or by emailing privacy@gambit-c.co.uk. We respond within 30 days.
When you delete your account through the app or by email:
The app uses only the cookies and local storage strictly necessary to keep your child signed in and remember settings. We do not use advertising cookies, tracking pixels, or third-party analytics that share data with other companies.
We protect your data with:
If a data breach affects your data and is likely to result in a risk to you or your child, we will tell you within 72 hours and notify the ICO as required by law.
Spelling Adventure is built to comply with the UK Children's Code. This means:
When we change this notice, we will:
Email: privacy@gambit-c.co.uk
Post: GambIT Consulting Ltd, 4th Floor, Radius House, 51 Clarendon Road, Watford, Hertfordshire, WD17 1HP
ICO complaints: ico.org.uk | 0303 123 1113