Privacy Policy

Last updated: May 26, 2026 · Effective immediately upon account creation

Plain-language summary:We collect only what we need to run Summit Spelling. We never sell your data or your child's data. Student data is used only to deliver the program. You can request deletion of all your data at any time. This full policy has the legal details.

1. Who We Are

Summit Spelling is operated by EduVenturing (“we,” “us,” or “our”), a sole proprietorship. Our primary contact for privacy matters is eduventuring@gmail.com.

Summit Spelling is a web-based speech-to-print spelling program used by parents and teachers with children ages approximately 7–14. Our service is located at summitspelling.com and any successor domains.

2. Children's Privacy — COPPA Compliance

Summit Spelling is not directed to children under 13and does not knowingly allow children under 13 to create accounts directly. All accounts are created by parents, guardians, or teachers (adults 18+) on behalf of children. We comply with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506.

What we collect about students (child profiles):

  • A display name chosen by the adult account holder (not the child's real name)
  • A login code (not linked to real identity)
  • Module progress, daily activity results, and spelling scores
  • Session timestamps

What we do NOT collect about students:

  • Real full name, date of birth, or age
  • Location data or IP address tied to the student
  • Photos, voice recordings, or video
  • Any contact information from the child
  • Behavioral data for advertising purposes

Parental consent: By creating a student profile, the adult account holder provides verifiable parental consent under COPPA for the collection of educational data described above. Student data is used solely to deliver the Summit Spelling educational program — never for advertising, profiling, or sale.

Parental rights:Parents and guardians may at any time: (a) review the personal information collected about their child; (b) request corrections; (c) request deletion of their child's data. Contact us at eduventuring@gmail.com to exercise these rights. We will respond within 10 business days.

If we learn that we have collected personal information from a child under 13 without proper parental consent, we will delete that information promptly.

3. Information We Collect from Adults

Account information: When you create an account, we collect your name, email address, and a hashed password. We use this to authenticate you and communicate service-related updates.

Billing information: Payments are processed entirely by Stripe, Inc. We receive and store only a Stripe customer ID and your subscription status. We never see, store, or have access to your full payment card number, bank account information, or billing address.

Usage data: We log which features are used, pages visited, and session timestamps for the purpose of diagnosing technical issues and improving the service. This data is not linked to advertising profiles.

Cookies and local storage: We use a single authentication cookie to keep you logged in between sessions. We do not use advertising cookies, third-party tracking pixels, or fingerprinting technologies.

4. How We Use Your Information

  • To create and manage your account and student profiles
  • To deliver the Summit Spelling program and track educational progress
  • To process subscription payments and manage billing
  • To send transactional emails (receipts, account notices, service updates)
  • To respond to support requests
  • To diagnose technical problems and improve the service
  • To comply with legal obligations

We will not send you marketing emails unless you explicitly opt in. We will neversell, rent, or trade your personal information or your child's information to any third party for commercial purposes.

5. Third-Party Service Providers

We share data only with service providers necessary to operate Summit Spelling, under contractual obligations to protect your data:

Supabase, Inc.Database and authentication

Hosts user accounts, student profiles, and progress data. Servers located in the United States (AWS us-east-1). Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).

Stripe, Inc.Payment processing

Handles all subscription billing. PCI-DSS Level 1 certified. We pass only your email at checkout — Stripe stores all payment data.

Vercel, Inc.Application hosting

Serves the Summit Spelling web application. Edge functions may process requests from servers in the United States and abroad.

We do not share your data with analytics platforms, advertising networks, data brokers, or any other third parties not listed above except as required by law.

6. Data Retention and Deletion

We retain your account data for as long as your account is active or as needed to provide the service. If you cancel your subscription, your data remains accessible until you request deletion.

To delete your account and all associated data (including all student profiles and progress data), email eduventuring@gmail.com with subject line “Delete My Account.” We will confirm and complete deletion within 30 calendar days. Note that deletion is permanent and cannot be undone.

We may retain de-identified, aggregated data (e.g., “Module 1 average completion rate”) that cannot be linked back to any individual after account deletion.

7. Security

We implement industry-standard security measures including encrypted data storage, encrypted data transit (HTTPS/TLS), hashed passwords (never stored in plaintext), and access controls limiting who can view production data. However, no system is perfectly secure. In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of discovery as required by applicable law.

8. Your Privacy Rights

All users have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your account and data
  • Withdraw consent (by closing your account)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what categories of data we collect and share, the right to opt out of sale (we do not sell data), and the right to non-discrimination for exercising privacy rights.

To exercise any of these rights, contact eduventuring@gmail.com. We will respond within 30 calendar days.

9. International Users

Summit Spelling is operated from the United States. If you are accessing the service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. By using Summit Spelling, you consent to this transfer.

10. Disclosure Required by Law

We may disclose your information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Summit Spelling, our users, or the public.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify account holders by email at least 14 days before the changes take effect and update the “Last updated” date above. Your continued use of Summit Spelling after the effective date constitutes acceptance of the revised policy.

12. Contact Us

For privacy questions, data requests, or concerns:

EduVenturing / Summit Spelling

Privacy inquiries: eduventuring@gmail.com

General contact: eduventuring@gmail.com

Response time: within 10 business days