Privacy Policy

Wordrealm is a vocabulary-learning app for children aged 9–11, including those preparing for the 11+ exam. This policy explains what personal information Wordrealm Limited ("we") collects when you and your child use the app, why we collect it, and the choices you have. Wordrealm Limited (company number 17356720, registered in England & Wales) is the data controller responsible for your information. We are registered with the UK Information Commissioner's Office as a data controller under reference ZC223802, which you can look up on the public register at ico.org.uk/register.

Wordrealm is designed to be used by children with a parent or guardian's permission. We rely on your consent, given when you create your account, to store and process your child's learning data.

We keep this deliberately small:

• Your parent account: your email address, an optional display name, and the record and date of your consent. You can sign in either with a password or with a one-tap link we email you. If you set a password, we store only a securely scrambled (hashed) version — never the password itself; if you only ever use the sign-in link, we store no password at all.
• Each child's profile: the first name or nickname you give them, their age, which exam board they're preparing for, any interests you add (e.g. "space" or "football") to make stories more fun, an optional sidekick name, and their chosen character, look and theme.
• Learning activity: which words they've met and mastered, quiz, test and mock-exam results, streaks, in-app coins (a game reward, not real money), and the stories they generate. This is what powers their practice and your progress reports.
• A little technical information: a single sign-in cookie to keep you logged in, and basic security records (for example, to slow down repeated failed log-in attempts). We do not use advertising or third-party tracking cookies.
• Feedback: if your child taps a reaction face after a story (for example "loved it"), we record that tap and which story world it was about — never any typed words from your child. If you send us feedback from your dashboard, we keep your message, your optional star rating and your email, so we can read it and reply.
• Payment details (only if you subscribe): handled by our payment provider. We never see or store your full card number.

• To run the app: sign you in, save progress and personalise each child's practice to the right level.
• To create personalised stories and keep content safe (see the AI section below).
• To read stories and words aloud in a British voice, for children who learn better by listening.
• To show you honest progress reports and a readiness picture for each child.
• To manage your subscription and send you service messages — for example confirming your email address, emailing you a one-tap sign-in link when you ask for one, a weekly progress email, and the occasional gentle reminder if your child goes quiet for a few days or a streak is about to break. You can switch the weekly email and the reminders off separately, whenever you like.
• To keep the app secure and working properly.
• To read and act on feedback — fixing problems and deciding what to improve next.

Our lawful bases under UK GDPR are your consent (for storing and personalising your child's learning data) and performance of our contract with you (to provide the app and any subscription you buy).

Wordrealm's stories are generated by an artificial-intelligence service (OpenAI). To create a story and to check that anything your child types is safe, we send a limited amount of information to OpenAI's API — for example the child's first name, their age, their interests and their story choices. We send only what's needed for that story.

OpenAI acts as our processor. According to OpenAI's terms, information sent through their API is not used to train their models. Free text a child enters is also checked automatically for unsafe content before it's saved.

So that children who prefer to listen can follow along, Wordrealm can read words and stories aloud in a British voice using Microsoft Azure's text-to-speech service. Reading a whole story aloud means the story text — which includes your child's first name as the hero — is sent to Azure to be turned into audio. Azure acts as our processor for this and does not use the text to train its services.

Wordrealm adapts to each child. We use their learning activity — the words they've met, their scores and how well they remember words over time — to choose which words to practise next and to estimate a "readiness" picture for you, their parent. This personalisation helps them learn; it is not an automated decision that has a legal or similarly significant effect on your child, and it is never used to advertise to them.

We do not sell your or your child's data, and we never share it for advertising. We share it only with the trusted service providers we need to run Wordrealm, each under a data-processing agreement:

• Our AI provider (OpenAI) — to generate stories and check content safety, as described above.
• Our text-to-speech provider (Microsoft Azure) — to read words and stories aloud in a British voice.
• Our hosting and database providers — to store your data securely and run the app.
• Our payment provider — to process subscriptions, if you choose to buy one.
• Our email provider — to send account, progress and reminder emails.
• Our error-monitoring provider — to alert us when something breaks. We strip out all personal information before any error report is sent, so it records what went wrong, never who it happened to.

We may also share information if the law requires it, or to protect the safety and rights of children using the app.

We may show you how your child is doing compared with other children of the same age preparing for the same exam — for example, "ahead of 60% of children preparing for the same exam". This is designed to protect every child's privacy:

• It is always anonymous and aggregated. We show a single percentage and a group average — never another child's name, profile or individual score.
• It only appears once a group is large enough (at least 20 other children) that no individual could be identified from it. Below that, nothing is shown.
• It is never a leaderboard.

If you would prefer your child not to be included in this anonymous benchmarking, contact us at privacy@wordrealm.co.uk.

Most of your family's data never leaves the UK or the EU:

• The database holding your account and your child's learning progress is hosted in London, United Kingdom.
• Reading stories aloud is done by a text-to-speech service running in the UK — so the story text, which includes your child's first name, is not sent overseas to be turned into audio.
• Error monitoring is hosted in Germany, and personal information is stripped out before any error report is sent.

Some of our other providers are based in the United States — our AI provider (OpenAI), our email provider and our payment provider — so some information is transferred there. Our app hosting provider also runs a global network, so a request may be handled outside the UK.

Where data does go to the United States, we rely on safeguards recognised under UK data protection law. For OpenAI, that safeguard is the International Data Transfer Addendum to the EU Standard Contractual Clauses, which forms part of the data-processing agreement we have entered into with them. OpenAI is not certified under the UK–US Data Bridge, so those Clauses are the safeguard we rely on, not a fallback. Some of our other US providers are separately certified under the UK–US Data Bridge (the UK Extension to the EU–US Data Privacy Framework); where a provider is not certified, the same Clauses apply.

We keep your account and your child's learning data for as long as your account is active. When you delete a child's profile, that child's learning data is removed. When you delete your account, we remove your family's data, except for a small amount we may be legally required to keep (for example, billing records).

You can, at any time:

• Delete a child's profile yourself from the parent dashboard — this removes their data.
• Ask for a copy of the personal data we hold about you and your child.
• Ask us to correct anything that's wrong.
• Ask us to delete your account and data.
• Withdraw your consent, which will stop us storing your child's learning data going forward.

To make any of these requests, email us at privacy@wordrealm.co.uk. If you're unhappy with how we've handled your data, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

We protect your information with encrypted connections, any password you set stored only in a scrambled (hashed) form, a secure database, and access limited to what's needed to run the service.

Wordrealm is intended for children aged around 9–11, used with a parent or guardian's permission. Children do not need to provide any information beyond what you set up for them, and they cannot make payments in the app. We rely on you, as the parent or guardian, to give consent on your child's behalf.

If we make important changes to this policy, we'll update the date at the top and, where appropriate, let you know in the app or by email.

Questions about your privacy, or any of the requests above? Email us at privacy@wordrealm.co.uk and we'll help.

You can also write to us at: Wordrealm Limited, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.