Privacy Policy

LexiByte is a multilingual reading assistant designed for children and their families, available in 15 languages. We are committed to protecting your personal data and to collecting as little of it as possible. This policy explains what information we collect, how we use it, where it is stored, and how you can delete it.

We collect the following data:

• Google Account: your name, email address, and profile picture — only if you choose to sign in with Google.
• Account record: when you sign in, we keep a minimal record of your account — your Google account identifier, email, name, and the time you were last active — in our database (hosted by Supabase in the European Union), so we can manage registered users and understand activity. For users in the EU/EEA, this record stays within the EU.
• Family profiles: when you set up a family account you may add family members (for example, your children). For each member you provide a display name, an age or age range, a role (parent or child), and a preferred / mother-tongue language. You choose this information yourself; we do not require a child's full legal identity.
• Reading & learning data (per family member): book reading progress, word lookup history, saved sentences and favorites, reading sessions and effective reading time, reading-comprehension quiz results and scores, reading streaks, and reading tasks or plans a parent sets for a child.
• LexiBot chat history: messages you exchange with the in-app AI reading assistant are saved so your conversation persists between sessions.
• PDF files: books you upload are stored in a folder named LexiByte on your Google Drive. We only access this folder to display your books within the app.
• Beta waitlist: your email address and optional name, if you join the beta list. This is stored in a Google Sheet managed by LexiByte.

We do not collect browsing data, advertising cookies, location data, or payment information.

Your reading & learning data and your LexiBot chat history are stored locally in your browser (localStorage) and, if you are signed in, synced to your own personal Google Drive (inside the LexiBytefolder). For family accounts, each child's data is stored under the parent account holder's Google Drive. The data we keep outside your devices and your Drive is limited to: a minimal account record (your Google account identifier, email, name, and last-active time) in our database, the beta waitlist (Google Sheet), and the transient text sent to our AI provider while a request is being processed (see section 5). Your reading content, progress, saved words, quiz results, and chat history are not stored on our servers.

Your data is used solely to:

• Save and restore your reading progress across devices;
• Display your word lookup history, saved sentences, dashboards, and reading streaks;
• Generate reading-comprehension questions and record quiz results;
• Let parents set and track reading tasks and plans for their children;
• Power the AI assistant (definitions, translations, explanations, and chat) by sending it the relevant text;
• Contact beta waitlist users about LexiByte testing.

LexiByte uses the OpenAI API to power word definitions and translations, reading-comprehension quiz generation, short explanations, and the LexiBot reading-assistant chat. For these features, only the text needed for the feature — a selected word or sentence, the current page or chapter text, or your chat message — is sent to OpenAI to produce a response. We do not send your account identity or a child's profile to OpenAI. OpenAI processes this data under its own Privacy Policy and does not use data submitted through its API to train its models. We do not retain the page or chapter text on our servers after the response is delivered. Because OpenAI processes data on servers located in the United States, using these features involves an international transfer of the submitted text.

Signing in with Google is optional. If you do, LexiByte requests access to your Google Drive solely to read and write files in the LexiByte folder it creates (the drive.file scope — per-file access only). We do not access any other files in your Drive. You can revoke this access at any time from your Google Account settings.

LexiByte is built to be set up and supervised by a parent or guardian.

• A parent creates the account and adds family members (children) as profiles under their own Google account. The parent is the account holder and controls all data.
• A child's reading and learning data is stored in the parent's Google Drive, not in a separate child-owned account.
• Parent-only functions — managing members, setting reading tasks, marking books as 18+, manually approving quiz results, deleting records — are protected behind a parent PIN.
• We do not knowingly collect personal data directly from a child, and we ask that profile information be provided by the supervising parent. We recommend using a first name or nickname rather than a full legal name.
• If you believe a child has provided personal data without parental consent, contact us and we will delete it.
• Google Sign-In enforces its own minimum age requirements.

Without a Google sign-in, all your data remains in your browser's localStorage on your device only. Clearing your browser cache or site data will permanently delete this information.

We keep your data only for as long as you choose to: it remains until you delete it from your browser, delete the LexiBytefolder in your Google Drive, or revoke LexiByte's access. We do not sell or share your personal data. The only third parties that process data on our behalf are Google (sign-in and your Google Drive storage), OpenAI (the AI features described in section 5), and Supabase (which hosts the account record described in section 2), each under their own privacy policies.

You may at any time:

• Access and review the data stored in your browser and in your LexiByte Drive folder;
• Correct your family profiles directly in the app;
• Delete your local data by clearing your browser's localStorage;
• Delete the LexiByte folder in Google Drive to remove all synced data;
• Revoke LexiByte's access to your Google account;
• Withdraw your consent at any time by ceasing to use the app and deleting your data.

If you are located in the EU/EEA or the UK, you also have the right to data portability and to lodge a complaint with your local data protection authority.

We may update this policy from time to time. In case of material changes, we will update the date at the top of this page.

For any questions about this policy, or to make a data request, contact us at: contact@lexibyte.app