Privacy Policy

XAHKids is a reading comprehension app built for autistic and neurodivergent children in Kindergarten through Grade 6 to grow their reading skills in an engaging, personalized way. We take the privacy of children seriously and are committed to complying with the Children's Online Privacy Protection Act (COPPA) and applicable privacy laws.

Parents or legal guardians create and own the XAHKids account. Children use the app under parent supervision within the account the parent creates. We do not allow children to create accounts directly.

Parent / Guardian:

• Email address (used for sign-in and account communications).

Child (within the parent's account):

• A chosen hero name — a pseudonym; a real name is never required.
• Reading session data: which stories were read, time spent reading, and quiz questions answered.
• Vocabulary words the child encountered during reading missions.

We do NOT collect real names, location data, contacts, photos, voice recordings, biometric data, or any other personal information from children.

• To deliver adaptive reading content personalized to your child's level and progress.
• To show reading progress to parents in the Family Dashboard.
• To operate, maintain, and improve the service.

We do NOT use data for advertising.

We do NOT sell or rent data to anyone.

We do NOT use children's data to train AI models outside the immediate scope of generating their next story.

We use these sub-processors, who process data strictly on our behalf:

• Base44 — app hosting and database infrastructure.
• ElevenLabs — text-to-speech audio narration. We send only the story text for narration — never personal data — and only server-side via a secure proxy.

We do not share data with any other third parties for their own purposes.

We comply with COPPA. We do not knowingly collect personal information from children under 13 beyond what a parent creates inside the app on their behalf. Parents may review, correct, delete, or refuse further collection of their child's information at any time by contacting us at the address below or by using the account deletion feature in the app.

Every data record is stored with owner-only access controls — only the parent who created the account can access their family's data. All data transmission uses HTTPS encryption.

However, no method of transmission over the internet or electronic storage is 100% secure. We use commercially reasonable safeguards but cannot guarantee absolute security.

We retain your data while your account is active. Parents can delete their account at any time from Account Settings, and all associated data will be permanently removed.

You may request access to, deletion of, or a copy of your data at any time by contacting us at the address below. We will respond within 30 days.

These rights are subject to applicable law and reasonable identity verification. Honoring requests may take up to 30 days.

We will post material updates to this Privacy Policy here and notify parents via email. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

The app generates personalized stories, questions, and vocabulary using automated systems. We do not warrant that generated content will be free of errors, inaccuracies, or content unsuitable for every learner. Parents are responsible for reviewing content their child encounters and reporting any concerns to info.xah@xah-fhe.com.

Privacy questions or requests: info.xah@xah-fhe.com