LEGAL
Privacy Policy
Effective date: August 8, 2026
1. Who we are
LexiStride (“LexiStride,” “we,” “us”) is a California-based EdTech company that operates the adaptive reading platform at lexistride.com (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
2. Information we collect
Account information. When you or your school creates an account, we collect name, email address, grade level, and school/campus/class assignment (if applicable).
Learning activity. To power adaptive reading recommendations, we record reading activity, quiz and placement-test results, Lexile level history, vocabulary practice, time spent on tasks, and progress toward reading goals.
Usage and device data. We automatically collect IP address, browser type, device type, pages visited, and general usage patterns via cookies and analytics tools, including Google Analytics.
Communications. If you contact support, submit the contact form, or email us, we collect what you send us, including any contact details you provide. Our contact form is protected by Google reCAPTCHA, which processes some technical signals under Google's own privacy policy to help us tell humans from bots.
School-provided data. When LexiStride is deployed through a school or district account, the school or district may provide student roster data (name, grade, class assignment) as part of account setup. In these deployments, the school or district is typically the data controller and LexiStride acts as a service provider processing data on their behalf and instruction.
3. How we use information
- Operate, maintain, and personalize the Service — including matching content to a student's Lexile level and generating progress reports.
- Communicate with users about their account, product updates, and (where opted in) newsletters.
- Provide teacher, school, and district administrators with reporting and analytics about the students in their care.
- Monitor, secure, and improve the Service, including detecting abuse and preventing exam-integrity violations during placement and quarterly assessments.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell personal information, and we do not use student learning data to serve targeted advertising.
4. Children's privacy & student data
LexiStride is used by students of varying ages, including students under 13. Where LexiStride is provided through a school or district, that institution is responsible for obtaining any parental consent required under COPPA, FERPA, or applicable state student-privacy law before student accounts are created, consistent with the school official exception commonly relied upon for education technology providers. Where LexiStride is used directly by an individual under the age of consent in their jurisdiction outside of a school relationship, a parent or legal guardian must create and manage the account.
We use student data solely to provide and improve the Service for that student and their school, and we do not use it for behavioral advertising.
Education records (FERPA). For students enrolled through a school or district, the roster, assessment, and progress data described in Section 2 constitutes an “education record” under FERPA. LexiStride acts as a “school official” with a legitimate educational interest under 34 CFR § 99.31(a)(1), using that data only for the purposes for which the school authorized it, under the school’s direct control, and not disclosing it to further parties except as the school directs or as required by law. Parents and eligible students seeking to inspect, correct, or restrict their education records should contact their school directly, which remains the record custodian; the school may in turn contact us to fulfill that request.
5. Cookies & analytics
We use cookies and similar technologies for authentication (keeping you signed in), and analytics (understanding how the Service is used) via Google Analytics 4. You can control cookies through your browser settings; disabling them may affect Service functionality.
6. Third-party service providers
We share information with vendors who help us operate the Service, under contractual confidentiality and data-use restrictions:
- Supabase — database hosting and authentication.
- Vercel — application hosting.
- Resend — transactional email delivery.
- Google Analytics & Google reCAPTCHA — usage analytics and bot/spam protection.
- Anthropic (Claude) — used to help generate and support level-appropriate reading content; not used to process identifiable student conversations.
- The Guardian Open Platform & The New York Times API — source material and licensed images for generated reading articles and blog posts; no student data is sent to these services.
These providers may process data outside your country of residence. We take steps to ensure any such transfer is subject to appropriate safeguards.
7. Data retention
We retain account and learning-activity data for as long as the account is active, and for a reasonable period afterward to support re-enrollment, reporting obligations, and legal requirements. Schools and districts may request deletion of their students' data at the end of a contract term, subject to any independent legal retention obligations.
8. Your rights and choices
Depending on your location, you may have the right to access, correct, export, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at hello@lexistride.com. For students enrolled through a school, requests are generally directed to the school as the primary point of contact for their students' records.
When we receive and verify a deletion or erasure request, we permanently remove the identifying fields from that student’s record — name, email, and date of birth — while retaining de-identified scores and activity history where necessary to preserve the accuracy of class- and school-level reporting for other students. Login access is disabled immediately and cannot be restored once this process runs.
California residents may have additional rights under the California Consumer Privacy Act (CCPA); contact us at the email above to make a request.
9. Security
We use industry-standard safeguards — including encryption in transit, role-based access controls, and row-level database security — to protect information. No system is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above, and where appropriate, communicated directly to school and district administrators.
11. Contact us
Questions about this policy or our data practices can be sent to hello@lexistride.com or via our Support page.
