Privacy Policy

Lexidapt AI ("we," "our," or "us") is operated by Ryong Intelligence Group, a company registered in GIFT City, Gandhinagar, Gujarat, India. We are committed to protecting the privacy of all users, especially students and minors who use our platform.

This Privacy Policy explains how we collect, use, store, and protect your information when you use lexidapt.ai, including when you install it on your phone or computer as an app from the website.

By using Lexidapt AI, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account we collect:

• –Full name
• –Email address
• –Class/grade level (optional)
• –School name (if applicable)
• –Profile preferences (language, theme)

1.2 Content You Upload

When you use Lexidapt AI you may upload:

• –PDF documents and textbooks
• –YouTube video links
• –Audio recordings
• –Text content

This content is processed to generate your study materials. Uploaded files themselves are never stored: a PDF or audio file is processed in memory and discarded once your material has been created. What is saved to your account is the text extracted from it (or the text you pasted, or the video's link and transcript) and the study material generated from it — see Section 6.

1.3 Generated Content

We store content Lexi generates for you:

• –Study notes
• –Flashcards
• –Quiz questions
• –Podcast scripts and audio files
• –Presentations
• –Question papers (teacher accounts)
• –Journal entries

1.4 Usage Data

We automatically collect:

• –Features you use and how often
• –Study session duration and frequency
• –Quiz scores and performance metrics
• –Device type and browser information
• –IP address — used for abuse prevention, rate limiting and security audit logs, and stored only as a truncated keyed hash, never in full
• –App crash reports

1.5 Payment Information

We do not store credit card or banking details. Payments are processed by:

• –Razorpay (INR payments) — razorpay.com

Razorpay is a PCI DSS compliant processor. We only receive confirmation of payment status.

2. How We Use Your Information

2.1 To Provide Our Service

• –Generate personalized study materials
• –Save your notes, flashcards, and quizzes
• –Remember your preferences and settings
• –Enable chat with your study materials
• –Track your learning progress

2.2 AI Processing

To turn your material into study content, we send it to external AI services for text generation, audio transcription and podcast voice generation. Section 8 names each provider, says what it receives and where it is located.

2.3 School Contracts

If your school has a contract with Lexidapt AI:

• –Your school administrator can view your activity summary (notes created, quiz scores)
• –They cannot view the content of your notes
• –They cannot access your journal entries
• –They cannot read your chat conversations

2.4 Analytics

We use anonymized usage data to:

• –Improve our AI models and prompts
• –Fix bugs and performance issues
• –Understand which features are most useful
• –Make product decisions

• We do NOT sell your data to any third party.
• We do NOT use your data for advertising.
• We do NOT share your data with other schools.

3. Data Storage and Security

3.1 Where Your Data Is Stored

• –Database: Google Cloud (India region)
• –File storage: Google Cloud (India region)
• –AI processing: regional Indian-language AI providers (India) and global AI organisations
• –App hosting: Vercel (global CDN)

3.2 Security Measures

We protect your data with:

• –AES-256 encryption at rest
• –TLS 1.3 encryption in transit
• –JWT authentication tokens
• –HTTP-only secure cookies
• –Rate limiting on all API endpoints
• –Regular security audits
• –No plaintext passwords stored

3.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• –Notify you within 72 hours via email
• –Notify relevant authorities as required by law
• –Provide details of what was affected
• –Describe steps we are taking to fix it

4. Children's Privacy (COPPA)

Lexidapt AI is designed for educational use including students under 13 years old.

4.1 For users under 13 (USA)

In compliance with the Children's Online Privacy Protection Act (COPPA):

• –Accounts for users under 13 must be created with the consent of a parent, guardian or the school
• –School contracts serve as institutional consent for enrolled students
• –We collect only educationally necessary data
• –We do not use data of under-13 users for advertising or marketing
• –Parents can request deletion of their child's data at any time

4.2 For users under 18 (India)

In compliance with India's Digital Personal Data Protection Act 2023 (DPDP Act):

• –Accounts for users under 18 must be created with the consent of a parent, guardian or the school
• –School enrollment constitutes institutional consent for contracted schools
• –Data of minors is processed only for educational purposes

If you believe a child has provided personal information without consent, contact us at greetings@lexidapt.ai. We will delete such information promptly.

5. Your Rights

5.1 All Users

You have the right to:

• –Access all personal data we hold about you
• –Download your notes and generated content
• –Correct inaccurate information
• –Delete your account — email greetings@lexidapt.ai. We close it and remove your content from the app; Section 6 sets out how long the underlying data is kept afterwards and how to ask for it to be erased outright
• –Object to how we process your data
• –Withdraw consent at any time

5.2 European Users (GDPR)

If you are in the European Economic Area:

• –Right to data portability
• –Right to restriction of processing
• –Right to lodge a complaint with your local Data Protection Authority
• –Legal basis for processing: contract performance and legitimate interests

5.3 Indian Users (DPDP Act 2023)

If you are in India:

• –Right to access your personal data
• –Right to correction and erasure
• –Right to grievance redressal
• –Contact our Data Fiduciary at: greetings@lexidapt.ai

5.4 California Users (CCPA)

If you are a California resident:

• –Right to know what data we collect
• –Right to delete your personal information
• –Right to opt-out of sale (we do not sell data)
• –Right to non-discrimination

To exercise any right contact: greetings@lexidapt.ai — We respond within 30 days.

6. Data Retention

We retain your data as follows:

• –Active account: data kept while account exists
• –Account deletion: request it at greetings@lexidapt.ai. We close your account and stop showing your content in the app straight away. We then keep the underlying data for a minimum of 30 days, and may keep it for longer — including to develop and improve Lexidapt AI. It is never restored to your account and is never shown to another user
• –Uploaded files: not retained. Your PDF or audio file is processed in memory and discarded once your study material has been created — only the extracted text and the material generated from it are saved, and those are deleted when you delete the note
• –Payment records: 7 years (legal requirement)
• –Anonymized usage analytics: indefinitely

When you delete a note, flashcard set, or journal entry it is permanently deleted immediately and cannot be recovered.

If you want the data behind a closed account erased outright rather than retained, write to greetings@lexidapt.ai and ask for erasure. A person reviews every such request and we will confirm to you when it is done.

7. Cookies and Tracking

We use only essential cookies:

• –lexidapt_token: authentication session (HttpOnly, Secure, expires in 7 days)
• –Google sign-in cookies (__Secure-authjs.session-token, __Host-authjs.csrf-token, __Secure-authjs.callback-url, __Secure-authjs.pkce.code_verifier): set by our own sign-in system, only if you use the Google button, to complete the sign-in securely and let you sign out (HttpOnly, Secure; the session cookie expires in 7 days, the code-verifier cookie after 15 minutes, and the other two when you close your browser)
• –lexi_consent: records that you ticked the consent boxes, so your choice survives the Google sign-in redirect (expires after 2 hours)
• –gcal_state: a one-time security token used only while connecting Google Calendar

Every cookie we set is strictly necessary to sign you in or to complete something you asked for. We do NOT use:

• Advertising cookies
• Third-party tracking pixels
• Google Analytics, Facebook Pixel or any advertising or profiling tracker
• Any analytics cookie — neither of the page-view counters described below sets one
• Cross-site tracking of any kind

We run two privacy-preserving page-view counters. Vercel Web Analytics, from Vercel, who already host this site, records the page visited, the referring site, and coarse device and country information, so that we can tell how many people reach us. PostHog records the same kind of page view on our public pages only — the homepage, pricing, FAQ, the free chapter pages, the legal pages and the sign-in page — so that we can see which pages visitors move between before signing up. Neither sets a cookie or stores an identifier on your device, neither can link one visit to the next, and neither receives your name, your email, or anything inside your notes. PostHog receives nothing at all from any page you use after signing in. Everything else — per-feature usage statistics — is derived internally from your account activity.

8. External Service Providers

Running Lexidapt means sending specific, limited pieces of your data to external service providers. Each one receives only what it needs to do its job — never your whole record. What is shared, by category:

These are the companies we use today. If we add or change one, we update this list. Questions about any of them, from a user, a parent or a school, can be sent to greetings@lexidapt.ai. We do not sell your data to any of these providers or to anyone else, and none of them is permitted to use it for their own purposes.

8.1 Google API Services & Limited Use

Lexidapt AI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When you sign in with Google or connect Google Calendar, we access only:

• –Your basic profile (name, email address) — used solely to create and identify your account
• –Google Calendar access (only if you connect it) — used solely to add and sync your study sessions and exam reminders to your calendar

We do NOT:

• Sell Google user data or use it for advertising
• Transfer Google user data to third parties except as needed to provide the calendar sync feature you requested
• Allow humans to read your Google data, except with your explicit consent, for security purposes, or where required by law
• Use Google user data to train AI or machine-learning models

We store only the minimum needed to keep the integration working (your calendar connection tokens and the events we created for you). If you disconnect Google Calendar in Settings, we delete the stored tokens immediately. You can also revoke Lexidapt AI’s access at any time at myaccount.google.com/permissions.

9. School and Institutional Accounts

9.1 School Administrator Access

School administrators with contracted access can:

• –View number of active students
• –See aggregate quiz scores per branch
• –View student activity summaries within the admin dashboard
• –Add or remove student email access

School administrators CANNOT:

• Read individual student notes
• Access student journal entries
• Read student chat conversations
• View individual student uploaded files

9.2 Teacher Accounts

Teachers with authorized access can:

• –Generate question papers, worksheets and presentations from their own material

A teacher account gives no access to students' data. Teachers cannot see students' notes, journal entries, chat conversations or activity; the only school-level view is the administrator dashboard described in 9.1.

9.3 Data Processing Agreement

Schools requiring a Data Processing Agreement (DPA) for GDPR compliance may request one at: greetings@lexidapt.ai

10. International Data Transfers

Your data may be processed in:

• –India (primary)
• –Outside India — global AI organisations, application hosting, error monitoring and public-page analytics

For transfers out of the EEA, we rely on Standard Contractual Clauses as approved by the European Commission.

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via:

• –Email to your registered address
• –In-app notification
• –Notice on our website

Continued use after changes constitutes acceptance of the updated policy.

12. Disclaimer & Limitation of Liability

Lexidapt AI is provided on an "as is" and "as available" basis, without warranties of any kind, whether express or implied. While we take reasonable, industry-standard measures to protect your data (see Section 3), no method of transmission or storage over the internet is 100% secure, and we cannot and do not guarantee absolute security.

To the maximum extent permitted by law, Lexidapt AI, Ryong Intelligence Group, and its founders, employees, and partners shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages, or for any loss of data, profits, or goodwill, arising from or related to:

• –Any data breach, leak, unauthorized access, or loss of your data
• –Any downtime, interruption, or unavailability of the service
• –Any errors, inaccuracies, or omissions in AI-generated study materials
• –Any decisions or academic outcomes based on content generated by Lexidapt AI
• –Any acts, failures, or breaches of third-party service providers or processors

You use Lexidapt AI at your own risk. AI-generated content may contain errors and should be verified against authoritative sources before you rely on it for exams or academic work.

13. Contact Us

For privacy questions or to exercise your rights:

© 2026 Ryong Intelligence Group. All rights reserved.

Lexidapt AI is operated by Ryong Intelligence Group, GIFT City, India