Lexia Learning Systems LLC: Ensuring Data Privacy and Security in Educational Software

Lexia Learning Systems Llc is committed to protecting your privacy and building trust. This privacy policy explains how we handle personal information when you use our educational products and services. We understand the importance of data privacy, especially for students, and this policy is designed to be clear and comprehensive for schools, districts, parents, and anyone using our platforms. The purpose of this document is to detail our practices regarding the collection, use, sharing, and security of personal information obtained through our educational subscription products and services. We aim to provide you with a complete understanding of your choices regarding your personal information and how you can access and update it. Our practices are in place to ensure we provide services within the parameters set by your school or district, who have engaged Lexia for educational support.

This policy is specifically for Lexia’s SaaS-based educational products, related services, our website www.mylexia.com, and the MyLexia mobile application, all referred to as the “Service.”

1. Information Collection and Usage by Lexia Learning Systems LLC

Lexia Learning Systems LLC collects and uses personal data of students, staff, and other users based on service agreements with schools and districts. These institutions purchase our products and services for their users. It is important to note that Lexia typically does not have a direct relationship with individual students using our products. If you need to access, correct, amend, or delete any data, please contact your school or district first, as they are the data controllers. If the school or district requests data removal, Lexia will respond within a reasonable timeframe.

We retain personal data as long as necessary to provide services to our clients, meet legal obligations, resolve disputes, and enforce our agreements.

Types of Information Collected

Lexia collects personal information that you provide directly to us. We also gather information when schools or districts create accounts for administrators, teachers, and students. We are committed to collecting only necessary and relevant information for the specified purposes. Personal information includes data that can identify you, including direct identifiers like your name, and indirect identifiers such as IP addresses or unique device IDs, especially when linked to your identity under applicable laws.

  • For Teachers and Administrators: We collect full names, email addresses, and school affiliations.
  • For Students: We collect full names, user IDs, and school affiliations.

Schools and districts may also choose to include optional demographic data for students, such as gender, birth date, ethnicity, special education status, instructional language, free lunch program participation, and Title 1 status. This optional data is used solely to support the educational purposes for which it was provided.

Lexia may use de-identified data, from which personal information has been removed, for lawful purposes. This includes product and service improvement, general analysis, benchmarking, developing best practices, and educational research.

When you use our mobile app, we automatically collect device-specific information like device type, operating system version, and device identifier (UDID). We do not track location-based information from your mobile device.

Links to Third-Party Websites

Some parts of our Service may contain links to external websites with different privacy practices. If you share personal information on these websites, their privacy policies will govern your information. We recommend carefully reviewing the privacy policies of any website you visit.

2. Children’s Privacy and Lexia Learning Systems LLC

Lexia Learning Systems LLC takes children’s privacy very seriously. Our practices are aligned with legal requirements and designed to protect student data.

Information Collected from Children Under 13

Children under 13 typically access Lexia through student accounts created by their schools or by Lexia using school-provided information. The minimum required information for a student account includes:

  • First Name
  • Last Name
  • Username
  • Grade
  • School
  • Instructional Language (e.g., English, Spanish)

Click here to see a list of optional data fields.

Alt: Optional student data fields for Lexia student accounts including fields for gender, date of birth, ethnicity, special education status, instructional language, free lunch program participation and Title 1 status.

Some Lexia programs use Speech Recognition Engine (SRE) technology. In these programs, students may be asked to speak words or phrases into a microphone. The SRE records and converts these spoken words into pronunciation files (“Sound Logs”). These Sound Logs help measure a student’s pronunciation accuracy and track progress. Sound Logs may be analyzed to improve our products, program exercises, and the SRE itself, and for internal research. Sound Logs are never used to identify individual students and are de-identified after a subscription ends.

Parental Consent and School Authorization

Lexia does not require parental consent to collect student information. Schools typically create student accounts, or authorize Lexia to do so. Under COPPA and other relevant laws, schools can act as intermediaries for parental consent for educational purposes. By setting up student accounts, schools authorize Lexia to process student data to provide the Lexia program. Children under 13 cannot create their own accounts, and parents do not have administrative access to student account creation.

FERPA and Student Records Privacy

Lexia complies with the Family Educational Rights and Privacy Act of 1974 (FERPA) and applicable state student records privacy laws. When we handle student data from schools and districts, we act as a “school official” under FERPA. We are committed to the limitations and requirements for educational service providers under FERPA and state laws. Student data is used only to fulfill our service agreements with schools and districts and is not disclosed except as per the agreement, law, or school/district authorization.

Student Input of Personal Information

Students cannot directly enter personal information into the Lexia Service. School personnel or Lexia staff, on their behalf, input student information. Students interact with the program, and their usage data (reading performance and progress) is linked to their accounts.

Necessity of Student Personal Information

Student accounts are necessary for program access and for schools and teachers to monitor student progress within Lexia programs.

Sharing Children’s Information with Third Parties

Lexia does not share children’s personal information with unrelated third parties, except as legally required, as described in this policy (e.g., with Affiliated Businesses), or as directed by the school.

Parental Choices

Lexia collects information under the direction of schools (our clients) and has no direct relationship with individual students. Parents who wish to limit contact should contact their child’s school. Service providers who support Lexia and may access personal information are contractually bound to protect it.

Parents can review their child’s personal information by contacting the school. For further assistance, parents can contact Lexia directly, but we recommend contacting the school first, as they authorized the data collection and are best positioned to verify parental identity and connection to the student.

Upon written request from a school or a confirmed parent/guardian, Lexia will provide an inventory of stored personal information and take steps for review, correction, or removal, within legal limits. We respond to inquiries within 30 days. Contact details are at the end of this policy.

3. Sharing Information with Third Parties by Lexia Learning Systems LLC

Lexia Learning Systems LLC does not sell student or user personal information. We do not share personal information with unrelated third parties for marketing. We may share aggregated, non-personal usage data with third parties. Personal information is shared only as described below:

Affiliated Businesses

We may share personal information with our parent organization, affiliates, and subsidiaries to manage and support our Services for schools and districts, and with authorized local Lexia representatives for sales and support. These representatives must comply with this privacy policy. We will not share personal data with other businesses, except service providers and successors, without prior authorization.

Service Providers

We share information with service providers who support Lexia functions, such as hosting, email processing, payment processing, and research. These providers are contractually obligated to use personal information only for providing services to Lexia.

Corporate Affiliates, Business Transactions, and Successors

We may share information with our parent company and Lexia affiliates. In business transactions like sales, mergers, or bankruptcy, personal information may be disclosed. We ensure that any successor adheres to the privacy practices outlined here.

Legal Compliance and Rights

We may release personal information to law enforcement, in response to court orders, subpoenas, or legal processes, or to protect our legal rights, intellectual property, or the safety of our employees, users, and the public.

Fraud Prevention

To protect against fraud, theft, or harm, we may share personal information with law enforcement or other organizations that agree to respect this privacy policy.

4. Information Security at Lexia Learning Systems LLC

Lexia Learning Systems LLC employs robust security measures to protect user information from loss, misuse, and alteration. We use firewalls, limited access controls, and SSL encryption. Data access is controlled physically and logically. Only authorized Lexia staff can access raw data or backups. Offsite backups are encrypted and securely destroyed when obsolete. Our systems are in a monitored tier-1 hosting facility with 24/7 security. Access requires management approval and is logged.

However, no online transmission or storage method is completely secure. We cannot guarantee absolute security. For security questions, contact [email protected].

Cookies and Tracking Technologies

Lexia and our service providers use cookies and similar technologies to manage the Service, track user progress, analyze trends, and gather usage and demographic data to improve our Services. We receive reports from these technologies on individual and aggregate usage. Like most online services, we automatically collect and store information in log files, including IP addresses, browser types, pages visited, operating systems, and timestamps. We do not link this data to personal information for marketing or commercial purposes, nor do we allow others to do so.

Teacher and student activity is stored in a database for reporting and analysis, including progress monitoring and trend analysis.

We do not share log file or student usage information with third parties, except with service providers supporting our Services, in de-identified form, or as authorized by the school.

We use mobile analytics software to understand our mobile app usage, recording frequency of use, in-app events, aggregated usage, performance data, and download source. We do not link this analytics data to personal user information for marketing or commercial purposes.

While most cookies are essential for program function, you can adjust browser settings to refuse certain cookies, though this may limit Service functionality.

Enforcement of Privacy Policy

Lexia regularly checks compliance with this privacy policy. For questions or concerns, please contact us. We will investigate and resolve complaints according to this policy. For unresolved complaints, we will cooperate with regulatory authorities.

Testimonials

We may display customer testimonials on our website with consent. To update or remove your testimonial, contact [email protected].

Data Transfer

Using our Internet-based services involves data transmission and processing, sometimes internationally. Personal information provided to Lexia is processed and stored on US servers. By using our Services, you consent to this transfer, processing, and storage for yourself, your organization, and your students.

Lexia uses appropriate cross-border transfer solutions, including GDPR Article 46, for data transfers, including from the EEA and UK to the US. Your Service use is your consent to this data transfer to Lexia in the United States, as permitted by law.

5. Changes to This Privacy Policy

Last Reviewed: February 1, 2024

Last Updated: February 1, 2024

This policy is effective as of the date above. We may update this policy to reflect changes in our practices, legislation, or Service enhancements. The latest policy is always available for review. Material changes will be communicated via email to the account owner/administrator.

6. Your Choices and Access to Your Information

Lexia allows teachers, administrators, and others who provide personal information for product information to withdraw consent (“opt-out”) at any time. Opting out means your data will not be used for these purposes. We have a “once out – always out” policy. Our emails include ‘Unsubscribe’ instructions. Opt-out applies until you explicitly opt back in. You can opt out of email communications via the ‘Unsubscribe’ link in our emails. Upon request, Lexia will confirm if we hold your personal information. Teachers and administrators can access, correct, amend, or delete their personal information by logging into their accounts. You can also contact us for assistance, and we will respond within a reasonable timeframe, as legally required.

GDPR and EU Data Subjects

For UK and EU residents, under GDPR, you have rights to confirm, access, review, port, delete, or block/withdraw consent to processing your Personal Data (without affecting consent legality before withdrawal), by contacting us. Certain data may be retained as legally required.

Lexia acknowledges your right to access your personal information. Students accessing Lexia through a school should contact their school administrator for data access, changes, or deletion requests. We will support schools in responding to these requests within a reasonable timeframe, as legally required.

We retain your information as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

7. Contact Lexia Learning Systems LLC

For questions or concerns about this policy or our privacy practices, please contact us:

Privacy Officer
Lexia Learning Systems LLC
300 Baker Avenue, Suite 202
Concord, MA 01742
U.S.A.
Email: [email protected]
Telephone: 1-978-405-6200

You may also contact [email protected].

Comments

No comments yet. Why don’t you start the discussion?

Leave a Reply

Your email address will not be published. Required fields are marked *