Privacy Policy for SpellPal

Effective Date: September 17, 2026 | Last Updated: September 27, 2026

This Privacy Policy describes how DTA2 Tech ("we," "our," or "us") handles information within the SpellPal mobile and desktop application. SpellPal is an interactive spelling educational tool designed for children, parents, and educators.

    Key Principle: SpellPal operates on an offline-first architecture. We do not operate backend servers that collect, store, or profile your personal data. All data is stored locally on your device or synchronized directly to your own Google Drive storage.
  

1. Developer Identity and Contact

The SpellPal application is developed and published by Daniel Thomas Algarin II operating under DTA2 Tech.

Developer/Publisher: DTA2 Tech
Website: https://dta2tech.com/
Support & Data Requests: [email protected]

2. Information We Process

SpellPal collects and processes information strictly necessary to deliver spelling practice, quizzes, and educational progress tracking:

Category	Specific Items Processed	Primary Purpose
Account Credentials	Google Account display name, email address, OAuth tokens.	Google Sign-In, multi-device backup, and file-level sharing authorization.
Learner Profiles	Learner name (or pseudonym/nickname), student ID (UUID), selected avatar asset key, assigned test IDs, and preferred voice settings. In Classroom mode: optional student email for Drive file sharing.	Differentiating learner profiles, applying voice configurations, and tracking assigned tests within the app.
Educational Content	Custom word lists, test names, and example prompt sentences.	Conducting spelling reviews and practice quizzes.
Performance Records	Word attempt outcomes (correct/incorrect, typed word attempts).	Displaying immediate scorecards and enabling targeted retries of missed words.
Audio & Voice Synthesis	System voice engine metadata (voice name, locale, quality tier). No microphone or user voice audio is ever recorded or transmitted.	Synthesizing audible pronunciations of words and prompts entirely on-device using local text-to-speech engines.

3. Data Storage & Google Drive Integration

SpellPal operates using two data tiers:

Local Device Storage (Hive): All configurations, lists, and learner sessions are saved locally within sandboxed databases (Hive) partitioned by library identifier. This data remains strictly on your device unless you enable cloud backup.
Google Drive Synchronization (drive.file Scope): When cloud backup or sharing is enabled, the app communicates directly with the Google Drive REST API using the restricted https://www.googleapis.com/auth/drive.file OAuth scope.

Scoped Storage & Single-File Architecture

Under the drive.file scope, SpellPal cannot read, modify, or list unrelated files or photos in your Google Drive. The app only accesses:

Single-file library documents created by the app (named spellpal_data_<libraryId>.json).
Specific library files explicitly selected by the user via the Google Picker dialog.

In Classroom Mode and Family Sharing, access control is handled directly via Google Drive file permissions. Collaborating supervisors receive writer access, while students receive reader access. Automated Google Drive sharing notification emails are suppressed by default to protect user inbox privacy. Invitations can be shared via the native system share sheet using secure application links (e.g., spellpal.dta2tech://join-shared-library/open?fileid=...).

4. Artificial Intelligence (AI) Prompt Generation

SpellPal offers automated example sentence generation to help learners understand words in context. AI generation operates in one of three selectable modes:

Gemini Nano (On-Device Local AI): On supported Android hardware, sentences are generated locally using the device's system AI engine. No word data leaves your device.
Bring Your Own Key (BYOK Cloud): If configured by a parent or educator, the app uses your personal Google AI Studio API key to call the Google Generative Language API (Gemini models). Only the word tokens provided are transmitted over TLS for prompt synthesis. DTA2 Tech does not retain, inspect, or log these API requests.
None / Disabled: AI features can be disabled entirely. When disabled, the app uses a standard fallback sentence template (e.g., "Please spell the word {word}.").

5. Children’s Privacy (COPPA and FERPA Compliance)

SpellPal is designed for educational use by families and educational institutions. Protecting the privacy of young learners is our highest priority:

No Commercial Tracking: We do not track users across other apps or websites, and we do not use third-party analytics or behavioral tracking SDKs.
No Advertisements: SpellPal contains zero advertisements.
No Audio Recording: SpellPal does not record or process student voice audio. Spoken prompts are played using the device's Text-to-Speech engine.
No Direct Collection from Children: In Family Mode, children do not need email addresses or Google accounts; parent accounts govern the device profile. In Classroom Mode, student participation is managed by the school or instructor.
Non-Identifiable Pseudonyms: Parents and teachers may enter arbitrary first names, initials, or pseudonyms for student profiles. Avatars are selected from static vector art libraries and do not require camera or photo permissions.

6. Third-Party Services

SpellPal interacts directly with the following third-party infrastructure:

Google Identity Services & Google Drive: Used for account sign-in and cloud synchronization. Governed by the Google Privacy Policy.
Google AI Studio (Optional BYOK): Used only when the supervisor configures a custom Gemini API key. Governed by Google's API Terms of Service.

7. Data Retention, Control, and Deletion

Because your educational data is stored locally and in your private Google Drive account, you retain complete ownership and control over your records:

Local Device Deletion: Uninstalling the application or clearing application data in Android settings completely deletes all locally cached Hive databases and configuration files.
In-App Deletion: Supervisors can delete individual test lists, assignments, or learner profiles at any time from the Dashboard. Deletions are immediately reflected locally and synced to the cloud payload during the next sync pass.
Cloud Deletion: You may permanently delete the spellpal_data_<libraryId>.json file directly from your Google Drive at any time to remove all synchronized cloud data.
Account Disconnection: Using the Sign Out feature in the app terminates the local session and clears cached credentials. You can revoke SpellPal's OAuth access entirely at any time via your Google Account Permissions.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications in application functionality, legal obligations, or Google Play Families Policy guidelines. The updated version will always be posted at this URL with an updated revision date.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or SpellPal's data handling practices, please contact:

DTA2 Tech
Attention: Daniel Thomas Algarin II
Email: [email protected]
Website: https://dta2tech.com/