QuillQuest
For Schools
QuillQuest is spelling and times-tables practice for children aged about 8 to 14 (US grades 3–8). It is free, has no advertising, and requires no account of any kind.
The short answer for IT
| District rubric question | QuillQuest |
|---|---|
| Student accounts required? | No. There is no sign-up, no login, no password, no email. |
| Personal information collected? | None. No name, age, email, phone or precise location leaves the device. As with any internet service, our servers see the requesting IP address, which we use only for rate-limiting and never store with a save. |
| Advertising or marketing? | None. No ad networks, no sponsored content, no upsells, no in-app purchases. |
| Analytics or tracking SDKs? | None. No cookies, no trackers, no behavioural analytics, no fingerprinting. |
| Data sold or shared? | Never. There is nothing to sell, and no third party receives student data. |
| Works offline? | Yes. The full game runs with no network. Extra voices and recorded example sentences download once from our content host and are then stored on the device. |
| Age range | Roughly 8–14 (grades 3–8); the app places each learner by level and adapts. |
| Cost | Free. No paid tier, no trial, nothing to procure. |
What is stored, and where
On the child's device only: their progress (levels, stars, XP, streaks, which words they practised), an optional first name and cartoon avatar they choose, a chosen age used solely to pick a starting level, and their settings. On an iPad, iPhone or Android tablet this is stored by the app and is removed when the app is deleted. In the browser version now in development it will live in the browser's own storage and be cleared whenever browser data is cleared.
On our server — only if a grown-up switches syncing on: that learner's game progress, stored under a short anonymous sync code (ten characters, shown grouped like K7M2-QX9F-4K). No name, no age, no email, no password, no location. There is no account and no user record; we cannot tell whose progress a save is, and we have no way to contact anyone. The code itself is stored only as a one-way hash, so even we cannot list codes or read a save without being given the code. Syncing is off by default and is never offered to the child.
Retention: device data stays until erased by the user. A synced save is deleted automatically after one year with no activity. Nothing else is retained, because nothing else is collected.
Compliance
- COPPA. QuillQuest collects no personal information from children, so no verifiable parental consent surface arises. Our privacy notice includes the data-retention policy required by the amended COPPA Rule in effect since 22 April 2026.
- SOPIPA and equivalent state laws. We do not use student data for targeted advertising, do not build student profiles for non-educational purposes, and do not sell student data. We hold no education records, so FERPA is not engaged.
- CIPA. QuillQuest contains no user-generated content, no chat, no messaging, no external links reachable by a child, and no imagery beyond its own cartoon characters. There is no channel through which a child can encounter another user or outside content.
- Data processing agreements. We will sign the SDPC National Data Privacy Agreement (NDPA) if your district requires one. Please get in touch.
Content and safeguarding
Every word, sentence and definition a child sees is reviewed for age-appropriateness before it ships. Two automated checks run over the whole catalogue as part of our release process — one proving no profanity or blocklisted term appears anywhere in the app, one auditing every entry against 22 content rules — and both must pass with zero blocking findings.
The words, definitions and practice sentences are written for this purpose rather than reused from a general corpus. We made that decision after finding that a general corpus, however well filtered, produced sentences no child should be asked to read.
There is no way for a child to enter free text that another person will see, because no such channel exists.
Using it in a classroom
Install the app from the App Store or Google Play. There is nothing to configure, no roster to build, no codes to distribute and no accounts to manage or later delete.
A browser version is in development. It is not open to the public yet, and this page will say so until it is. When it ships it will need no install at all.
Shared devices: on a shared tablet each learner can have their own player, switched from Settings. On a shared Chromebook the browser version will store progress in the browser, so it would return the next learner to the previous learner's progress unless browser data is cleared between users — an explicit "who's playing?" handoff is being built before that version opens.
Sound matters. Spelling practice requires hearing the word, so headphones are recommended. Times-tables works fine silently.
We do not offer Google, Clever or ClassLink sign-in, and that is deliberate: single sign-on would require us to hold student identities, which is precisely what this page says we do not do.
Contact
Questions from teachers, IT or district privacy officers: contact@malcom.io. Our privacy policy has the full detail.