Privacy Policy

Service: Spelly (the “Service”), available at https://spelly.net

Operated by: Importify Limited (“we”, “us”, “our”)

Registered address: Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong

Privacy contact: support@importify.com

1. Overview

This Privacy Policy explains what information Spelly collects, how we use it, who we share it with, and the choices and rights you have. It applies to the Spelly website and web application. By using Spelly, you agree to this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

a) Information from Google Sign-In

Spelly uses Google Sign-In (Google OAuth) for account creation and login. When you choose to sign in with Google, we receive from your Google account:

• Your name
• Your email address
• Your Google profile picture (if available)
• A unique Google account identifier

We do not receive or store your Google password.

b) Profile and learning information you provide

• Display name and age you enter in your profile
• Practice language, definition language, and difficulty level
• Word lists you create, scan, or generate, and lists you save
• Words you add to your filter list and your app settings

c) Usage and progress data

• Learning progress such as XP, levels, coins, streaks, achievements, and quest progress
• Practice results (e.g., number of words attempted and answered correctly)

d) Content you submit for AI features

• Topics or words you type to generate or define words
• Images you upload (e.g., a photo of a spelling worksheet) so we can extract the words from them

e) Technical data

• Authentication/session cookies needed to keep you signed in
• Limited technical and log information (such as request metadata) used for security and reliability
• Locally stored data in your browser (e.g., cached voice audio, theme preference)

3. How We Use Your Information

• To create, secure, and manage your account and keep you signed in
• To provide the Service and personalize your learning experience
• To power AI features (word generation, definitions, text-to-speech, and image/worksheet scanning)
• To save your word lists, settings, and track your progress across devices
• To process purchases and manage premium access
• To maintain security, prevent abuse, and comply with legal obligations
• To respond to your support requests

We do not use your information for third-party advertising, and we do not sell your personal information.

4. Google User Data & Limited Use

Spelly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

• We only request the basic profile and email information needed to sign you in and create your account.
• We use Google user data solely to provide and improve the Spelly features described in this Policy.
• We do not sell Google user data, and we do not use it for advertising.
• We do not transfer Google user data to others except as needed to provide the Service (see “Service Providers” below), for security or legal reasons, or in connection with a merger or acquisition with appropriate notice.
• We do not use Google user data to develop, improve, or train generalized AI/ML models.

5. AI Processing

To deliver AI features, we send the relevant content you provide — for example a topic, a word, or an uploaded image of a word list — to our AI provider (OpenAI) for processing, and we return the result to you. We do not send your Google sign-in credentials to the AI provider.

To improve performance, some generated results (such as definitions and pronunciation audio) may be cached in our systems or in your browser.

If you choose to supply your own OpenAI API key, requests made with that key are sent directly to OpenAI under your own OpenAI account and terms; we do not store or monitor that usage.

6. How We Store and Protect Information

• Account, profile, progress, and word-list data are stored in our cloud database and authentication provider (Supabase).
• The application is hosted on Railway.
• Data is transmitted over encrypted connections (HTTPS/TLS).
• Access to personal data is restricted to what is needed to operate the Service.

No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

7. Service Providers We Share Data With

We share data only with providers that help us operate the Service, and only as needed:

• Google — sign-in / authentication
• Supabase — authentication and database hosting
• OpenAI — AI text generation, text-to-speech, and image/word extraction
• Railway — application hosting and infrastructure
• PayPro Global — our authorized reseller and payment processor (Merchant of Record) for purchases; it handles your payment and billing details. We do not store full payment card numbers.

These providers process data on our behalf under their own terms and security commitments. We do not sell your personal information to anyone.

8. Cookies and Local Storage

We use cookies and similar technologies that are necessary to sign you in and keep your session active. We also store some preferences and cached content (such as voice audio and theme) locally in your browser to improve performance. We do not use advertising cookies.

9. Children's Privacy

Spelly is a general-audience service intended for users of all ages. It is not directed to children under 13, and we do not design the Service to target, or to knowingly collect personal information from, children under 13.

Where younger children use Spelly, they should do so under the supervision of a parent, guardian, or teacher. Accounts are created using Google Sign-In, which requires the account holder to meet Google's minimum age requirements; the account holder is responsible for anyone they allow to use the Service.

We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your country) without verifiable parental consent. If you believe a child has provided us such information, contact us at support@importify.com and we will delete it.

10. Your Rights and Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

• You can view and edit much of your profile information inside the app.
• You can revoke Spelly's access to your Google account at any time from your Google Account settings.
• To request access to, or deletion of, your account and associated data, email support@importify.com. We will respond within a reasonable timeframe.

11. Data Retention

We keep your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or anonymize your personal data, except where we must retain it to meet legal, accounting, or security obligations.

12. International Transfers

We are based in Hong Kong and use service providers that may process data in other countries. Where required, we take steps to ensure your data receives an appropriate level of protection when transferred internationally.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Material changes will be communicated where appropriate. Continued use of the Service after changes take effect means you accept the updated Policy.

14. Contact Us

Questions about this Policy or your data? Contact us at support@importify.com.