Legal
Last updated: 2026-06-22
XAHKIDS is a reading comprehension app built specifically for autistic and neurodivergent children in grades K–6. We designed this product, and this policy, with childhood data protection at the center. This policy is written to be consistent with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws. Because COPPA applies when services are directed to children, we obtain verifiable parental consent before a child's account is created, and we describe below exactly what we collect and why.
Parents and legal guardians create and own the account. A child uses XAHKIDS under parental supervision with the hero identity the parent set up. The "account holder" referenced throughout this policy is the parent or guardian; the "child" is the minor who reads and interacts with the content. Parents control the child's profile, can review what was collected, and can delete it at any time.
We do not collect the child's real name, location, contacts, photos, or voice recordings. We do not collect biometric data. Voice features, where used, are processed server-side for text-to-speech output only.
We use the data we collect to:
We do not use children's data for advertising. We do not sell personal data to third parties, ever.
We rely on trusted service providers to operate XAHKIDS:
We do not use a payment processor (such as Stripe) because XAHKIDS is currently free. Sub-processors are bound by contract to protect data and to use it only to deliver our service.
Because XAHKIDS is directed to children under 13, we follow COPPA. We require verifiable parental consent before collecting any personal information from a child. Parents may review the information collected, request deletion, and decline further collection. We limit collection to what is necessary to run the reading experience and to report progress to the parent.
Access to account data is restricted to the account owner. Data is transmitted over HTTPS. We apply reasonable technical and organizational safeguards. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.
We keep a child's reading data for as long as the account is active. When a parent deletes the account, we remove the associated reading data within a standard processing window. We do not retain children's personal information beyond what is necessary to operate the service.
Parents have the right to access the information collected about their child, to receive a copy of it, and to request deletion. Requests are subject to verification of the parent's identity. We respond to verified requests within 30 days. To exercise any of these rights, contact us at the email below.
If we make material changes to this policy, we will update the "Last updated" date and notify parents through the app or by email where appropriate. Continued use after changes take effect constitutes acceptance of the updated policy.
Some story and question content is generated or adapted using AI systems. While we review and test content for age-appropriateness, we make no warranty that generated content is free of error, fully accurate, or suitable for every learner. Parents remain responsible for reviewing material presented to their child.
We do not knowingly collect personal information from children without parental consent. If you believe we have collected information from a child in a way that does not comply with this policy or applicable law, please contact us and we will investigate and take appropriate action.
XAHKIDS is committed to protecting your family's privacy. If you have any question about this policy or your child's data, we want to hear from you.
Questions? Reach us at info.xah@xah-fhe.com.