Privacy Notice · version privacy-2026-10
Privacy Notice
The INHSA Spelling Trainer is a members-only practice app run by the Inland Northwest Homeschool Spelling Association. We collect as little as we can, never sell or share it for advertising, and let parents see and delete their family's information.
1. Who we are
Inland Northwest Homeschool Spelling Association (INHSA), Coeur d'Alene, Idaho. Contact: spellwell@inhsa.org.
2. What we collect from parents
Your name, email address, phone number, homeschool name, mailing address and (if you give it) county. We need these for INHSA membership and to reach you about the bee.
When you register a speller for the bee, we also record the county where your speller lives and their grade (the bee is for grades 4–8 in 10 counties of Idaho and Washington), and your affirmation that your speller qualifies under the bee's rules: when you checked the box, which version of the rules document you read, a scrambled (one-way coded) form of your network address and your browser's name (for example “Chrome · ChromeOS”). The coordinator uses this for the bee-day roster.
3. What we collect about children
A parent provides each speller's first name, grade, a username and a password. If a speller is registered for the bee, the parent may add a last name for the bee-day roster (only the coordinator sees it). While a child practices, we store their practice results (which words, the answers typed, and which helps were used) and their settings (for example, the voice they like).
We never collect a child's email address, birthdate, photo, address or location. Children can't use the trainer until a parent has created the family account, agreed to this notice, and the INHSA coordinator has confirmed the family.
4. How we use it
- To run INHSA membership and bee registration.
- To run the practice app and remember each speller's progress and review words.
- To show parents their own children's progress.
5. What we never do
- Sell information, show ads, or track anyone across other websites.
- Let children contact anyone, or show one family's information to another family.
- Use analytics, advertising or third-party tracking tools.
6. Who processes it for us
Cloudflare hosts the trainer and its database. Some browsers' built-in voices are processed by the browser maker (Google, Microsoft or Apple): only the practice word is sent, never your child's information. If you send a message through the contact form on inhsa.org, your name, email and message are stored in the trainer's database so the coordinator can answer you.
7. How long we keep it
- Family accounts: until a parent or the coordinator deletes them. Families who haven't logged in for 18 months are deleted after notice.
- Detailed practice events: about 18 months. Practice rounds: about 3 seasons.
- Login records and security counters: removed within days after they expire. We store keyed fingerprints for security throttling, never your IP address.
- Deleted information leaves our backups within 100 days.
8. Parents' rights
You can review your family's information, correct it, download it, delete a speller or the whole account, and withdraw consent at any time. Some of these are in your family dashboard; for the rest, or while the pilot is being finished, email spellwell@inhsa.org and the coordinator will do it for you.
9. Security
Passwords are stored only as salted, peppered hashes. Logins are protected against guessing, sessions expire, and the coordinator's account uses two-step login. Kids' screens never receive your address, phone or email.
10. Changes to this notice
If we change this notice, we'll update the version above and ask parents to accept the new version.
11. Contact
Questions about privacy: spellwell@inhsa.org.