Privacy Policy

Last updated: May 2026

Who we are

Wordforge is a UK-based vocabulary app that helps children aged 9–11 prepare for 11+ selective school entrance exams. It is operated by David Anderson (d.a.m.anderson@gmail.com).

We take your privacy seriously — especially because Wordforge is used by children. This policy explains what data we collect, why, and how we protect it.

What data we collect

Waitlist signups

  • Your email address
  • An optional note about your child's 11+ journey (if you choose to share one)

Parent accounts

  • Your email address and password (passwords are hashed — we never see them in plain text)
  • The date you gave consent to our terms and privacy policy

Child profiles

  • A display name (chosen by the parent — we recommend a first name only)
  • A PIN used to switch between profiles within the parent's account
  • Vocabulary progress: which words have been seen, answered correctly or incorrectly, and when
  • Session history: daily goals met, XP earned, streaks

Usage data

  • Basic analytics events (e.g. session started, word answered) to help us improve the app
  • We do not use any third-party advertising or analytics SDKs

Why we collect it

  • To provide the service — your account and your child's progress data are needed to make the app work.
  • To manage the waitlist — so we can contact you when a place opens up.
  • To improve Wordforge — aggregated usage data helps us understand what's working and fix what isn't.

Our legal basis for processing is performance of a contract (providing the service you signed up for) and legitimate interests (improving the product). We do not sell your data or use it for advertising.

Who we share data with

We use a small number of trusted third-party services to run Wordforge:

  • Supabase — our database and authentication provider. Data is stored on servers in the EU.
  • Vercel — our hosting provider. Servers are in the EU/UK region.

We do not share your data with any other third parties, advertisers, or data brokers.

Children's privacy

Wordforge is designed for use by children aged 9–11, but children do not create their own accounts. A parent or guardian creates the account and adds child profiles. By creating an account, the parent consents to the collection and use of their child's progress data as described in this policy.

We collect only the minimum data needed to deliver the educational service. We do not collect children's email addresses, and child profiles are not accessible without the parent account.

How long we keep your data

  • Waitlist data is held until the pilot ends or until you ask us to remove it.
  • Account and progress data is held until you delete your account.
  • Anonymised, aggregated usage data may be retained indefinitely for product improvement.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain uses of your data
  • Receive a copy of your data in a portable format

To exercise any of these rights, email d.a.m.anderson@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Changes to this policy

We may update this policy as Wordforge grows. If we make material changes, we will notify you by email. The date at the top of this page shows when it was last updated.