← Back to home

Privacy Policy

Last updated: April 2, 2026

Introduction

LitPath (“we,” “us,” or “our”) is committed to protecting the privacy of children and families who use our bilingual reading application. This Privacy Policy explains how we collect, use, and safeguard information when you use the LitPath mobile application (the “App”).

LitPath is designed to comply with the Children’s Online Privacy Protection Act (COPPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), and Quebec’s Law 25 (Act to modernize legislative provisions as regards the protection of personal information).

Information We Collect

Child Profile Information

When a parent or guardian creates a child reading profile, we collect:

  • Nickname (not the child’s real name)
  • Birth year (not full date of birth — used solely for age-appropriate content)
  • Reading language preference (English, French, or both)

We do not collect email addresses, photos, precise location, or other personally identifiable information from children.

Reading Activity Data

To provide personalized reading experiences, we collect:

  • Books read and reading progress
  • Assessment results (Lexile reading level)
  • Reading session duration
  • Achievement and streak data

Parent Account Information

For the parent or guardian account, we collect:

  • Email address
  • Hashed password (we never store plain-text passwords)
  • Subscription and payment information (processed by Stripe — we do not store credit card numbers)

How We Use Information

We use collected information to:

  • Provide personalized, age-appropriate reading content
  • Track reading progress and adapt difficulty levels
  • Award achievements and maintain reading streaks
  • Send parents analytics and progress reports about their child’s reading
  • Improve the App and develop new features

We do not use children’s information for advertising, profiling, or any purpose unrelated to the educational reading experience.

In accordance with COPPA and PIPEDA:

  • We obtain verifiable parental consent before collecting any information from children under 13
  • In Quebec, the consent age is 14 as required by Law 25
  • Parents can review, modify, or delete their child’s information at any time
  • Consent is never assumed — no pre-checked boxes are used

Data Storage and Security

  • All data is stored in Canada (Montreal, ca-central-1 region) to comply with Canadian data residency requirements under PIPEDA and Quebec Law 25
  • Data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
  • We use industry-standard security measures including rate limiting, JWT authentication, and encrypted credential storage

Data Retention and Deletion

  • Upon request, we will delete a child’s personal information within 30 days
  • If a parent account is deleted, all associated child profiles and data are permanently removed
  • Reading analytics are anonymized after account deletion

Third-Party Services

We use the following third-party services:

  • Stripe — for payment processing (parent accounts only)
  • Amazon Web Services (AWS) — for hosting and infrastructure (data remains in Canada)

We do not share children’s information with any third parties for marketing or advertising purposes.

Breach Notification

In accordance with PIPEDA and Quebec Law 25, we will notify affected users and the relevant privacy commissioner within 72 hours of discovering a data breach that poses a real risk of significant harm.

Your Rights

Parents and guardians have the right to:

  • Access their child’s personal information
  • Correct inaccurate information
  • Delete their child’s information and account
  • Withdraw consent at any time
  • File a complaint with the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: support@litpath.app

Changes to This Policy

We will notify parents of material changes to this Privacy Policy via email and in-app notification. Continued use of the App after changes constitutes acceptance of the updated policy.