Literacy Leap Privacy Policy

This Privacy Policy explains how Chronicle LLC, dba Decodable Reads ("we," "us," or "our") collects, uses, and shares information through Literacy Leap. Literacy Leap helps adult users provide personalized reading instruction to children.

Literacy Leap is available on the web at decodablereads.com/literacy-leap and as the Literacy Leap iOS app. This policy applies to both.

By using Literacy Leap, you agree to the practices described in this policy. If you have questions, contact us at support@decodablereads.com.

Literacy Leap accounts are intended for adults. Whether you access Literacy Leap through a library, your own subscription, or through an organization, the adult who signs up is the account holder. If a library patron signs in with a library card that belongs to a child in their care, the adult who signs up is still the account holder and is responsible for the account.

Literacy Leap is designed for adult account holders to create student profiles in order to personalize one-on-one reading instruction. In this policy, "student" means a child whose profile you create in Literacy Leap. The information we collect about students is described in "About Students" below.

About You

What we collect about you depends on how you access Literacy Leap. Find your access type below for a complete list.

About Students

We collect the following information about each student, grouped by when it is collected. Only the required items below are needed to create a student profile.

When you create a student profile

Required:

• Student name (may be a full name, first name only, or pseudonym)
• Relationship of the adult user to the student (for example, parent, teacher, or tutor)
• Enrollment authorization acknowledgment. When you confirm that you are the student’s parent or legal guardian, or that the parent or legal guardian has authorized you to enroll the student, we keep a record of the acknowledgment text, version, timestamp, linked adult account, privacy policy URL, and selected relationship to the student.

Optional:

• Student grade level
• Student age

When you use Literacy Leap with the student

• Student assessment scores
• Time spent on the assessment
• Skill progress, including the student’s current skill focus and previous and skills completed
• Time spent in learning activities
• Story topics and writing activity topics entered during lessons
• Reading content, quizzes, and other materials generated for the student
• Virtual rewards and avatar customization

If you create profiles for more than one student, we keep this information separately for each student.

About You

We use the information we collect to:

• Provide Literacy Leap, including authenticating you and personalizing reading instruction for your students
• Send the account notices and usage emails described in Emails We Send
• Maintain, secure, and improve the service
• Create aggregated or de-identified reports about progress, engagement, and usage trends to understand and communicate the effectiveness of Literacy Leap
• Comply with applicable laws and regulations

About Students

We use student information to:

• Provide personalized reading and literacy instruction within Literacy Leap
• Allow the adult account holder to monitor and manage student progress

We do not use student information for advertising, marketing, or any purpose unrelated to educational services.

We send library patrons and individual subscribers emails about their Literacy Leap account and use of the service, including:

• Account notices, such as sign-in and security alerts, billing receipts (individual subscribers), and changes to this policy. These are required to operate your account, so you cannot opt out of them.
• Usage emails, such as reading milestones and practice reminders. To stop receiving these, reply to any usage email or email support@decodablereads.com.

We do not sell or rent your personal data to third parties. We share data with trusted service providers only as necessary to provide Literacy Leap:

• Stripe processes payments from individual subscribers.
• Auth0 manages email/password and Google sign-in.
• Participating libraries' authentication systems receive the library card number and PIN (where required) you enter so your library can verify your patron status.
• Mailgun sends account notices, usage emails, and support replies.
• Formspree receives support requests and contact forms you submit.
• RudderStack and Supabase collect and store product analytics, subject to the limits described below.
• Anthropic generates and/or revises instructional content, including stories, comprehension quizzes, writing activities, word lists, practice sentences, and other lesson materials, subject to the limits described below.
• Vercel and MongoDB Atlas host the application and store data.
• RB2B / Retention.com identifies business visitors on our marketing pages only, as described below.

We will update this list if we change service providers.

All third-party providers are contractually obligated to protect your data and use it only for specified purposes.

AI Features

Some platform features use artificial intelligence to create instructional content personalized to your students' skill level. In creating instructional content, we send Anthropic only the story or writing activity topic you enter and your student's phonics skill objectives based on their assessment results and learning progress.

Anything you enter in open text boxes for story or writing activity topics is sent to Anthropic exactly as written, including any names or personal details you type.

When we ask the model to revise a passage so it stays decodable, or to write comprehension questions about a passage, we also send back the text the model itself just generated.

We do not send any other information about you or your student to Anthropic. Under Anthropic's commercial terms, the information we send is not used to train Anthropic's AI models.

For a plain-language explanation of how AI is used, see How We Use AI.

Analytics

We use RudderStack and Supabase to collect, route, and store product interaction events, such as pages viewed, buttons clicked, feature usage, session metadata, and anonymous or pseudonymous identifiers. We use these analytics only to operate, secure, and improve the service. We do not intentionally transmit patron library card numbers, PINs, names, student names, or student assessment or progress details to these analytics services.

Aggregated and De-identified Data

We may share aggregated or de-identified progress and usage data in marketing materials, grant reports, sales materials, case studies, or public communications to show how Literacy Leap is used and how effective it is. This information will not identify individual users, students, families, library patrons, libraries, or institutions unless we have appropriate permission.

Marketing Visitor Identification

On our public marketing pages only, we use RB2B / Retention.com to identify business visitors so our team can follow up about our products. It never runs inside Literacy Leap and is never used to identify students. Visitors outside the United States are asked to consent first. To opt out, decline on the consent banner or email support@decodablereads.com.

Literacy Leap is designed for adult account holders to create student profiles in order to personalize one-on-one reading instruction. We do not knowingly collect personal information directly from children under 13. All student information is entered by adult users, who are responsible for obtaining any required parental or guardian consent before doing so.

This section describes our practices in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506.

The information we collect about students, and how we use it, is described in the "About Students" parts of Information We Collect and How We Use Information.

Adult User Responsibilities

Adult users must:

• Confirm they are the student’s parent or legal guardian, or that the student’s parent or legal guardian has authorized enrollment before entering student information
• Supervise student use of Literacy Leap as appropriate
• Ensure compliance with applicable laws, including COPPA and FERPA

Parent and Guardian Rights (COPPA)

If your child's information has been entered into Literacy Leap, you have the right to:

• Review the personal information we have collected about your child
• Correct inaccurate information about your child
• Delete all personal information about your child
• Refuse further collection of information about your child, which requires removing the student from Literacy Leap

To exercise these rights, email support@decodablereads.com with the subject line "COPPA Parent Request" and include the name of the adult account holder. We will respond within 30 days. Deletion requests follow the timeline in Data Retention and Deletion below.

We retain your personal data while your account is active, as long as needed to provide our services, and as required by law. Marketing consent records are kept to demonstrate regulatory compliance.

Student data is retained only while the associated adult account is active.

Deleting a single student: When you delete a student profile, we delete that student's profile and all associated information, including assessment results, learning progress, topics, and generated content, from our active database. Your account and any other student profiles are not affected.

Deleting Your Account

To delete all data associated with your account, or to request deletion of your child's information, email support@decodablereads.com with the subject line "Account Deletion Request" (or "COPPA Parent Request" for a child's information). We handle deletion requests on this timeline:

When deletion is complete, your account and the Student Data associated only with your account are deleted from the active database, unless a longer retention period is required by law.

Depending on your location, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to data processing
• Opt out of usage emails, such as milestones and reminders, at any time
• Lodge a complaint with your local data protection authority

To exercise these rights, email support@decodablereads.com. We will respond within 30 days, or sooner if required by local law.

Chronicle LLC operates in the United States. If you access Literacy Leap from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your region. By using our services, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

We will notify users of updates to this Privacy Policy by email and will update the "Last Updated" date at the top of this policy when changes are made.

If you have questions about this Privacy Policy or the practices of Chronicle LLC, email support@decodablereads.com — we're happy to help.