Spelling Stream Privacy Policy

Effective Date: April 1, 2026  |  Last Updated: April 1, 2026

The short version: Spelling Stream is designed for children. We collect as little data as possible. All spelling data, voice recordings, and progress stay on your device unless you explicitly enable Cloud Sync. We do not serve ads and we do not sell data.

1. Who We Are

Spelling Stream is published by Monthly Balance Capital LLC, an Arizona limited liability company. This Privacy Policy applies to both the Spelling Stream mobile application and the spellingstream.com website (collectively, the "Service").

Email: support@monthlybalance.com
Phone: (602) 456-7189
Mailing Address: 4539 N 22nd St, Ste N, Phoenix, AZ 85016, USA

2. Children's Privacy (COPPA Compliance)

Spelling Stream is designed for use by children under the supervision of a parent or guardian. We comply with the Children's Online Privacy Protection Act (COPPA), including the amended rules effective April 22, 2026.

2a. What We Do Not Collect From Children

2b. Parental Consent

All optional data features require verifiable parental consent before activation. During the app's initial setup wizard, a parent or guardian must:

All parent-only settings are further protected by a PIN or math-based parental gate that children cannot bypass.

2c. Parental Rights

As a parent or guardian, you have the right to:

3. Data That Stays on Your Device

The following data is stored only on your device and is never transmitted to us or any third party:

4. Cloud Sync (Pro Feature, Optional)

If a parent explicitly enables Cloud Sync, the following data is synced via Google Firebase/Firestore (operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043):

Not synced: Voice recordings, photos, PIN settings, and biometric preferences are never synced and always remain on-device only.

Cloud Sync requires:

Synced data is stored in Google Cloud (United States) and is encrypted in transit (TLS) and at rest. Parents can delete all cloud data at any time from Settings > Delete All Data.

5. Analytics

5.0 Website Analytics

The spellingstream.com website uses Google Analytics (GA4) (operated by Google LLC) to understand visitor traffic and behavior on the marketing site. Google Analytics is used on the website only — it is not present in the mobile app. The website is directed at parents, not children. Standard Google Analytics cookies and identifiers may be set when you visit the site. This data is used solely for understanding how visitors find and use our website.

5.1 App Analytics

Within the mobile app, we use Google Firebase Analytics (operated by Google LLC) solely to understand aggregate app usage (e.g., which features are popular, crash-free session rates).

5a. Consent Required

Analytics is disabled by default and only enabled after a parent provides consent during the initial setup wizard. If consent is not given, no analytics data is collected.

5b. What Analytics Collects

When enabled, Firebase Analytics may collect:

Firebase Analytics does not collect:

5c. Persistent Identifiers

The Firebase instance ID is a persistent identifier used solely for internal operations: aggregating anonymous usage statistics and measuring app stability. It is not used for advertising, user profiling, or any purpose beyond internal analytics. This use is covered by the parental consent obtained during setup, in accordance with the COPPA rule's internal operations exception.

We have configured Firebase Analytics with the following restrictions:

6. Crash Reporting

We use Google Firebase Crashlytics (operated by Google LLC) to detect and fix app crashes. Crash reports contain only technical information (device model, OS version, stack trace) and do not contain any personal information, user content, or spelling data.

7. Subscriptions & Payments

Subscriptions are processed entirely by Apple Inc. through the App Store. We do not collect or have access to payment information, credit card numbers, or billing addresses. Subscription management (cancellation, plan changes) is handled through your Apple ID account settings.

8. Microphone & Camera

All of these features require explicit parental consent and iOS system permission prompts.

9. Third-Party Services

We use the following specifically named third-party services:

ServiceOperatorPurposeData Received
Apple Sign-InApple Inc.Parent authentication for Cloud SyncApple ID email (parent only)
Firebase AnalyticsGoogle LLCAnonymous aggregate usage statisticsAnonymous events, device type, Firebase instance ID
Firebase CrashlyticsGoogle LLCCrash detection and stability monitoringDevice model, OS version, crash stack traces
Firebase AuthGoogle LLCAuthentication for Cloud SyncApple ID token (parent only)
Cloud FirestoreGoogle LLCCloud Sync data storageSee Section 4 (synced data)
RevenueCatRevenueCat Inc.Subscription entitlement managementAnonymous app user ID, subscription status
Apple App StoreApple Inc.Subscription billing and paymentsManaged entirely by Apple

No third-party service receives children's personal information, spelling data, voice recordings, or photos.

10. Data Retention & Deletion

10a. On-Device Data

All on-device data (spelling lists, recordings, scores, profiles) persists until:

On-device data (spelling lists, scores, profiles, and recordings) persists indefinitely. There is no automatic time-based expiration or deletion. Parents or guardians have complete control and may delete all data at any time using the in-app "Delete All Data" feature, or by uninstalling the app from the device.

10b. Cloud Sync Data

For users who enable Cloud Sync, synced data is retained on Google Cloud servers for as long as the user's account exists. Data is deleted:

After deletion, data is purged from Google Cloud Firestore and cannot be recovered.

10c. Analytics & Crash Data

Firebase Analytics data is retained for 14 months from the date of collection, after which it is automatically deleted by Google. Crashlytics data is retained for 90 days.

10d. Requesting Deletion

Parents may delete all data at any time using the in-app "Delete All Data" feature, or by contacting us at support@monthlybalance.com. We will process deletion requests within 7 business days.

11. Data Security

We take reasonable measures to protect user data:

12. Changes to This Policy

We may update this policy from time to time. Material changes will be noted with an updated "Last Updated" date at the top. If we make material changes to how we collect or use children's data, we will obtain new parental consent before implementing those changes. Continued use of the app after non-material changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this privacy policy, your data, or your parental rights under COPPA, contact us at:

Monthly Balance Capital LLC
Monthly Balance Capital LLC
Email: support@monthlybalance.com
Phone: (602) 456-7189
Mailing Address: 4539 N 22nd St, Ste N, Phoenix, AZ 85016, USA