PRIVACY POLICY

Lexwell (readlexwell.com) is a reading tutor for children, designed for children with dyslexia. A parent or legal guardian sets up the account, pays for it, and controls it; the child uses Kid Mode to read with Max the Monkey. Because our readers are children, we treat their data as the most sensitive thing we hold, and this policy describes exactly what we collect and why — no more, no less.

Questions, requests, or concerns: email us at support@readlexwell.com.

• Parents create accounts and give consent. Children never have logins.
• We do not record or keep audio of your child. Their voice is converted to text in real time so Max can follow along.
• No advertising, no ad trackers, no analytics scripts, and we never sell data.
• Stories, illustrations, and Max's voice are AI-generated, with safety checks.
• You can see your child's data on your dashboard and delete it at any time.

Account. Your email address and a password, handled by our authentication provider (Supabase); the password is stored only in hashed form and we never see it in plain text. We collect your first and last name. You also choose a four-digit grown-up passcode that keeps your child out of the dashboard and billing pages — we store only a salted hash of it, never the digits.

Date of birth — checked, not kept. At registration we ask for your date of birth for one purpose only: to confirm that the person creating the account is an adult. The date is checked and immediately discarded. It is never stored, logged, or sent to any service provider.

Billing. Payments are processed by Stripe. Your card details go directly to Stripe; we never see or store full card numbers. We keep your Stripe customer and subscription identifiers, which plan you are on, and usage counts (how many books have been generated) so we can enforce your plan's limits.

Email. We send transactional email — account confirmation, sign-in links, and topic-approval requests — through Resend, from an address at readlexwell.com. We do not send marketing email lists to anyone.

All of this is entered by you or generated by your child's reading practice:

• Profile: first name (or a nickname you choose), age band, optional grade, interests you enter, an optional comfort-object name (a favourite stuffed animal Max can mention), and reading preferences such as font, text size, and line spacing.
• Setup answers: the reading-skills checklist you fill in at onboarding, and whether you told us your child has a dyslexia diagnosis or is receiving tutoring. We use these only to place your child at the right reading stage; we never use them for anything else.
• Reading progress: sessions (when they read, words read, accuracy, pace), the specific words that were hard and what kind of mix-up happened (for example a letter reversal), and mastery records for each phonics skill. This is what makes the tutoring adaptive, and it is shown to you — never as scores to your child.
• Books: the topics your child chooses, and the generated books themselves (text and illustrations).
• Diagnostics: technical events from the reading session (microphone, speech recognition, and audio playback status) so we can fix problems. See the next section for how speech is handled there.

When your child taps Max to start reading, the microphone turns on and their speech is streamed in real time to ElevenLabs, our speech-recognition provider, which converts it to text so Max can follow the reading. Lexwell does not record the audio and does not keep audio files. The browser is given a short-lived, single-use token for this connection; our vendor credentials never reach your child's device.

Short text fragments of what was heard (for example, a word that did not match the page) may be stored in our diagnostics log so we can fix recognition problems. Each fragment is hard-capped at 60 characters, and before storage it is checked against a blocklist of terms we never want written down — anything that matches is replaced with "[redacted]" rather than stored.

Max's spoken lines and letter sounds are synthetic speech, generated by ElevenLabs from fixed text and cached so the same line is never generated twice. No model is ever trained on your child's voice by Lexwell.

Lexwell's books are written and illustrated by artificial intelligence: the story text is written by Anthropic's Claude models, the pictures are painted by Google's Gemini image model from the finished story text and reviewed by Claude before your child sees them, and Max's voice is synthesized by ElevenLabs. Every book passes through layered automated checks before your child sees it — decodability (only taught sounds appear), content safety, and tone — and content in the app is AI-generated and presented as such. When your child suggests a topic by voice, it is filtered and classified, and by default it waits for your approval before a book is written (you can grant standing approval in the dashboard).

AI-generated content can contain mistakes. Parental review tools exist precisely so you stay in charge of what your child reads.

Lexwell is made for children, so we follow the U.S. Children's Online Privacy Protection Act (COPPA) approach of putting parents in control:

• Only a parent or legal guardian may create an account, and creating the account — including agreeing to these policies and, for paid plans, completing payment — is how we obtain parental consent for the collection described on this page.
• Children have no logins, no email, no messaging, and nothing they do is ever public.
• We collect no more from a child than the reading practice needs, and we never use a child's information for behavioural advertising or marketing.
• We never sell personal information — a child's or anyone's.
• You can review your child's information on your dashboard at any time, and you can have it deleted by deleting the reader profile or your account, or by emailing support@readlexwell.com. You may refuse further collection at any time by stopping use of the service and requesting deletion.

We keep your family's data while your account is active, because the tutoring adapts based on reading history. When your account or a reader profile is deleted, the child's records — profile, sessions, reading errors, mastery, books, and diagnostics — are deleted with it. Backup copies held by our database provider expire on its normal rotation schedule. To request deletion, use the dashboard or email us; we will confirm when it is done.

We use a small number of providers to run Lexwell. Each receives only what its job requires, and none may use the data for its own purposes beyond providing the service to us:

• Supabase — database, authentication, and file storage. Holds the data described on this page.
• Vercel — hosting. Serves the website and processes requests.
• Anthropic — writes the story text from the topic, reading stage, and interests we send it, judges whether a requested topic suits your child's age, and reviews every picture before it is shown.
• Google (Gemini) — paints the illustrations. It receives only the finished, checked story text and a description of the story's characters — never your child's name, voice, or the words they said.
• ElevenLabs — converts your child's speech to text during reading, and generates Max's synthetic voice from fixed text.
• Stripe — payment processing. Handles the parent's card details; we never see them.
• Resend — sends our transactional email to the parent.

We use no advertising networks, no third-party ad trackers, and no analytics scripts.

We aim to be honest here rather than impressive. Data is encrypted in transit (HTTPS everywhere). The database enforces row-level security, meaning each family's records can only be read by that parent's signed-in account. Sensitive values like the grown-up passcode are stored as salted hashes, vendor API keys never reach the browser, and billing fields can only be changed by our servers. No online service can promise perfect security; if we ever learn of a breach affecting your data, we will tell you.

Wherever you live, you can ask us what we hold about your family, ask for a copy, ask us to correct it, or ask us to delete it — email support@readlexwell.com. If you are a resident of California or another U.S. state with a consumer privacy law, these are the access, correction, and deletion rights those laws describe; we do not sell or share personal information for advertising, so there is nothing to opt out of, and we will never treat you differently for exercising your rights. If you are visiting from the EU or UK, the same contact handles requests under the GDPR / UK GDPR; the lawful bases we rely on are performance of our contract with you and your consent as the child's parent.

If we change what we collect or how we use it, we will update this page, change the effective date at the top, and — for material changes involving children's data — email the parent on the account before the change takes effect.

Lexwell — readlexwell.com — support@readlexwell.com. See also our Terms of Use.