Last Updated: 3/20/2025

Worldex Lab, Inc. (“we,” “us,” or “our”) is committed to protecting the privacy of you and your children. This Privacy Policy (“Policy”) describes how Worldex Lab, Inc. collects, uses, discloses, and retains personal information in connection with our devices, mobile/desktop applications, websites, and related services (collectively, the “Services”). By using Dex and its Services, you agree to this Policy. If you do not agree with any part of this Policy, please discontinue your use of Dex.

1. Scope and Geographic Restriction

1.1 Limited to the United States

Dex is only permitted to be distributed within the United States. Our privacy practices are designed to comply with U.S. federal laws, including the Children’s Online Privacy Protection Act (“COPPA”). We do not warrant or represent that our Services comply with laws or regulations outside the U.S.

1.2 COPPA Compliance

We take our obligations under COPPA seriously. We do not knowingly collect personal information from children under the age of 13 without obtaining verifiable parental consent. As a parent or guardian, you have full control over what information is collected from your child, how it is used, and your rights to review or request deletion of that information.

2. Information We Collect

We collect only the information necessary to provide and improve our Services. This includes:

2.1 Information Provided By Parents/Guardians

• Account Registration: When you set up a Dex account, we collect your name, email address, and password.
• Child Profile: We do not collect a child’s full name or full date of birth. Instead, we only collect the child’s first name (or nickname) and approximate age to tailor the learning experience.
• Consent Verification: To comply with COPPA, we may collect additional information from you to verify your identity and confirm you are the parent or guardian, such as minimal payment confirmation or other methods permitted by law.

2.2 Images and Camera Data

• Cloud Processing and Storage: Dex uses a camera for educational activities. Images are processed and stored securely in the cloud by default, rather than solely on the device. We anonymize these images so they are not directly linked to a specific family or child’s identity.
• Parent Access: You can download images locally or delete them at any time via your Dex parental dashboard.
• Retention Period: By default, photos in the cloud are retained for 90 days. You can shorten or extend this retention period in your account settings.

2.3 Voice Data

• Speech-to-Text: Dex may offer voice recognition features to transcribe words or phrases for educational activities. By default, Dex does not store voice recordings after transcription.
• Optional Consent: If you choose to opt in (via verifiable parental consent), Dex may store audio recordings in the cloud to help improve our speech recognition algorithms and user experience. You can revoke this permission at any time.

2.4 Approximate Location Information

• Default Setting: Dex does not collect precise GPS data unless parents explicitly enable it for safety or location-based features (e.g., “Locate My Child” functionality).
• General Region: We may gather an IP address or similar data to infer a general geographic region (e.g., state or time zone) to deliver region-appropriate content.

2.5 Usage Data and Insights

• Learning Progress: Dex collects interaction data such as lesson completions, time spent on certain modules, and skill assessments. This helps personalize your child’s learning path.
• Device and System Data: We automatically collect technical data (e.g., device model, operating system, app version, error logs) to maintain and improve Services.

3. How We Use Your Information

3.1 Providing the Services

• We use the collected information to operate, personalize, and deliver Dex’s educational modules.
• Images are processed in the cloud to identify letters, objects, or words. We anonymize photos to minimize privacy risks.

3.2 Improving User Experience

• Voice Data (Optional): If you consent, stored voice recordings may be used to refine our speech-recognition features.
• Usage Analysis: We analyze lesson completion rates, user interactions, and feedback to optimize curriculum modules and troubleshoot issues.

3.3 Communication

• Administrative Messages: We may send emails regarding updates, changes to our Policy, or technical notices about your account.
• Marketing (Optional): With your explicit consent, we may send promotional materials or newsletters. You can opt out at any time.

3.4 Legal and Security

• Regulatory Compliance: We may use your information to comply with COPPA and other applicable U.S. laws.
• Fraud Prevention: We may process information to detect or prevent suspicious activity or breaches of our Terms of Service.

4. Parental Rights Under COPPA

4.1 Verifiable Parental Consent

• Before collecting personal information from a child under 13, we will obtain verifiable parental consent through methods approved under COPPA (e.g., minimal credit card charge, email confirmation with follow-up, etc.).
• You may withdraw your consent at any time by contacting us or adjusting your account settings.

4.2 Review and Deletion

• Access: You have the right to review any personal information we have about your child.
• Amendment and Deletion: You can request that we correct or delete your child’s personal information at any time. Deletion requests may affect some Dex features.

4.3 Refusal of Further Collection

You can refuse to permit any further collection of your child’s personal information by discontinuing use of Dex or deleting your account.

5. Data Sharing and Disclosure

5.1 Service Providers

We may engage third-party partners to host our cloud infrastructure, process payments, or analyze product usage. These partners are bound by strict confidentiality and data protection obligations, and they may only use personal information in accordance with our instructions and this Policy.

5.2 Business Transfers

In the event of a corporate transaction (such as a merger, acquisition, or sale of assets), we may transfer user data to a new entity. We will notify you if this occurs and your information becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose personal information if we believe such action is necessary to:

• Comply with a legal obligation or a lawful request by public authorities.
• Protect and defend our rights, property, or safety.
• Prevent or investigate possible wrongdoing in connection with our Services.

5.4 No Selling of Data

We do not sell any personal information, including that of children, to third parties.

6. Data Retention and Deletion

6.1 General Retention

We keep personal information only as long as necessary to fulfill the purposes outlined in this Policy or as required by law.

6.2 Photo and Media Retention

• Default 90 Days: Images stored in the cloud are automatically retained for 90 days unless you choose to shorten or extend this period.
• Deletion: You can delete any photo, lesson plan, or recorded insight at any time via your parental dashboard.

6.3 Voice Recordings

• Default Non-Retention: Unless you opt in, Dex does not store voice recordings.
• Opt-In Retention: If you have consented to voice storage for improvements, you may revoke this consent and request deletion of existing recordings at any time.

6.4 Account Closure

When you delete your Dex account, we delete all generated insights, content, lesson plans, and personal information associated with your account. Residual copies may remain in encrypted backups for a limited period, but will be deleted or anonymized when those backups are overwritten.

7. Security Measures

7.1 Technical Safeguards

• We use encryption (SSL/TLS) to protect data in transit and at rest.
• We anonymize images so they cannot be directly tied to a specific user identity.
• We maintain secure cloud infrastructure with access controls.

7.2 Administrative Measures

• Only authorized personnel can access personal information, and only for legitimate business purposes.
• We train employees on data protection requirements and COPPA compliance.

7.3 No Guarantee

While we follow industry best practices to safeguard your data, no system is completely foolproof. We encourage strong passwords, secure networks, and immediate reporting of any suspected unauthorized access.

8. Your Choices and Controls

8.1 Account Settings

• Notifications: Manage email or push notification preferences.
• Photo Retention: Adjust default retention periods for images.
• GPS Data: Disable or enable location-based features.

8.2 Opting Out

• Marketing Communications: You can opt out of promotional emails by clicking “unsubscribe” or adjusting your settings.
• Cloud Voice Storage: If you previously consented, you can withdraw consent at any time, which stops any further collection and prompts us to delete stored recordings.

8.3 COPPA-Specific Rights

Refer to Section 4 for detailed information on your rights related to your child’s data.

9. Third-Party Links and Services

Our Services may contain links to or integrations with third-party services (e.g., payment processors, content providers). We do not control the privacy practices of these external services. We recommend reviewing the privacy policies of any third-party platforms or websites you interact with.

10. Changes to This Policy

We may update this Policy to reflect changes in our practices or legal requirements. We will post the updated Policy on our website with the new “Last Updated” date. If the changes are significant, we may notify you by email or through a prominent notice on Dex.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

• Email: privacy@dex.com
• Address: 201 Spear St STE 1100, San Francisco, CA 94105
• Phone: +1 (415) 818-0101

We are committed to addressing and resolving any privacy or data protection issue in a timely and satisfactory manner.

Effective Date

This Privacy Policy is effective as of the “Last Updated” date above. By using Dex and its Services within the U.S., you acknowledge that you have read and understood this Policy and agree to its terms.