COPPA Policy
Last updated October 11, 2026
Lux is made for kids in elementary school, most of them under 13. The Children’s Online Privacy Protection Act (COPPA) sets rules for how services handle children’s personal information. This policy explains how Lux follows them. It works alongside our privacy policy.
Parental consent
A parent sets up Lux, never the kid. Before any session, the parent creates an account, confirms their email with a one-time code, agrees to this policy, and adds a payment card through Stripe. We collect nothing from a kid until that is done.
What we collect about your kid, from you
- Their grade
- Their first name, if you choose to give it, so the teacher can greet them
We never ask for a last name, birthday, address, school, or photo of your kid.
What a session collects
To help with the homework, a session uses:
- Your kid’s voice, to hold the conversation. We never store the audio. We keep a written transcript.
- Photos of the worksheet, taken by the camera that looks down at the desk. The camera points at the paper, not at your kid.
- What Lux reads on the page, as text, and the note we write for you after each session.
- Basic technical data, such as session times and the device’s browser, to keep the service running.
How we use it
Only to run your kid’s sessions, to write your note, and to let the teacher remember where your kid left off. We never use it for advertising, and we never sell it.
Who processes it
- OpenAI runs the voice conversation.
- Anthropic reads the photos of the worksheet.
- Cloudflare and our database provider host and store the data.
They process it only to deliver Lux to you, under their API terms, which do not let them train their models on it. We share children’s data with nobody else, except when the law requires it.
How long we keep it
- Photos of the worksheet: deleted 30 days after the session.
- Transcripts, readings, and notes: kept while the subscription is active, so the teacher remembers your kid, and deleted 30 days after it ends.
- First name and grade: deleted 30 days after the subscription ends.
- On the waitlist: kept until you subscribe or ask us to remove you.
You can ask us to delete any of it sooner.
Security
Data travels encrypted, and only the people who run Lux can reach it. If a breach ever affects your kid’s information, we email you promptly and notify regulators where the law requires.
Your rights as a parent
You can review what we hold about your kid, correct it, delete it, or tell us to stop collecting it. Email hello@learnwithlux.com from the address on your account. We answer within 30 days. Stopping collection ends your kid’s sessions.
Changes to this policy
We post every change here. If a change affects how we handle your kid’s data, we email you and ask for your consent again before it applies.