1. Introduction

Lyko AI LLC, doing business as LexiMap ("we," "us," or "our"), operates the LexiMap vocabulary training application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service. Because our Service is designed for children in grades 4–12, we comply with the Children's Online Privacy Protection Act (COPPA) and take additional steps to protect children's privacy.

2. Information We Collect

Parent Account Information

Email address (used for authentication via magic link)
Billing information (processed by Stripe; we do not store credit card numbers)
Account preferences (digest settings, session configuration)

Child Profile Information

Nickname (chosen by parent; no real names required)
Grade level (used to calibrate content difficulty)
Avatar selection

Learning & Usage Data

Session activity (items answered, accuracy, response times)
Mastery progress and spaced repetition state
Device information (for offline sync and session continuity)
Application events (for improving the learning experience)

3. How We Use Information

We use the information we collect to:

Provide and personalize the vocabulary learning experience
Track learning progress and adapt content using spaced repetition
Send parent digest emails about their child's progress (when opted in)
Process payments and manage subscriptions
Diagnose technical issues and improve application performance
Analyze anonymized and aggregated usage patterns to improve our educational algorithms, content effectiveness, and overall service quality

We do not use children's personal information for advertising, profiling, or selling to third parties.

4. Third-Party Services

We use third-party service providers based in the United States for authentication, email delivery, hosting, and operations. These providers receive only the data necessary to perform their function (e.g., email address for authentication). We may use additional service providers for monitoring and infrastructure, which process data only as needed to provide their services to us.

Payment processing is handled by Stripe. Stripe processes billing information directly; we do not store credit card numbers and receive only a customer ID and subscription status. You can review Stripe's Privacy Policy for details on how they handle payment data.

5. Local Storage & Cookies

The Service uses browser storage (localStorage, IndexedDB) to support offline functionality, save your session, and improve load times. Locally stored data syncs to our servers when connectivity is restored.

Analytics Cookies

We use the following third-party analytics services on our marketing and account pages to understand how visitors find and use our site:

Google Analytics (GA4) — sets _ga and _gid cookies to distinguish unique visitors
Meta Pixel — sets _fbp and _fbc cookies to measure ad effectiveness

These cookies load by default for analytics purposes. You can opt out at any time using the panel or the "Cookie Settings" link in the footer. Opting out clears existing analytics cookies and prevents further tracking.

No tracking cookies are used within child-facing learning content. Analytics tracking applies only to marketing pages and the parent account experience.

6. COPPA Compliance

We recognize that our Service is used by children under 13. In compliance with COPPA:

Child accounts can only be created by an authenticated parent or guardian.
Parents must provide verifiable consent before a child profile is created.
We collect only the minimum information necessary for the Service to function.
Child profiles use nicknames rather than real names, and we do not collect contact information from children.
Parents can review, modify, or delete their child's information at any time through the Parent Dashboard.
Parents can request complete deletion of all their child's data by using the data deletion feature in their account settings.

7. Data Retention & Deletion

We retain learning data for as long as the child's account is active to provide continuity in the learning experience. Parents may request deletion of all data associated with a child profile at any time. Upon deletion, the following data is permanently removed:

All learning session records and item responses
Mastery progress and spaced repetition state
Event and analytics data
Hint usage history
The child profile itself

Deletion is irreversible. Aggregated, anonymized statistics may be retained for service improvement purposes.

Upon cancellation of a paid subscription, we may retain learning data for a reasonable period to allow for resubscription without loss of progress. We reserve the right to delete inactive account data at our discretion.

8. Data Security

We use industry-standard technical and organizational measures to protect your personal information, including encrypted data transmission and secure authentication. While no method of transmission or storage is 100% secure, we are committed to protecting the data entrusted to us.

9. Parental Rights

Parents and guardians have the right to:

Review the personal information collected about their child
Request correction of inaccurate information
Request deletion of their child's personal information
Refuse further collection or use of their child's information

To exercise these rights, visit the Parent Dashboard.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version number and date are displayed at the top of this page. We will notify you of material changes by posting the updated policy on this page and, where practicable, by email. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your parental rights under COPPA, please contact us at:

Lyko AI LLC d/b/a LexiMap
Email: [email protected]