Privacy policy
Last updated: 21 Oct 2025 (supersedes 20 May 2025 version)
Worldex Lab, Inc. (“Worldex Lab,” “we,” “us”) provides Dex — the Language‑Learning Camera for children ages 3‑7 — and the Copilot parent mobile app (together, the “Services”).
WHAT YOU NEED TO KNOW
At Worldex Lab, protecting children's privacy is our top priority. Our Services are designed with parental controls at the core.
- Parents are in control. Parents download the Copilot App and set up an account for their child during the initial setup process.
- Safe and private by design. Our Services are not built to give children access to the broader internet, nor do they allow them to share personal information with others.
- No ads, no profiling. We do not display ads within our Services, and we do not use any data collected from children for marketing purposes.
- Minimal data collection. We only collect the information necessary for our Services to function. By default, DEX does not store any photos or voice recordings of children. With your explicit consent, we may retain voice data to help improve our Services.
- No sensitive data. Our App does not request access to your child's physical location or collect sensitive personal information such as race, sexual orientation, or health data.
1. Key Principles
At Worldex Lab, privacy is a top priority. The following principles are at the heart of everything we do.
| Principle | What It Means for You & Your Child |
|---|---|
| Minimal collection | We gather only what we need to run Dex and support you. |
| Zero retention by default | Child voice and photos are discarded immediately after processing unless you turn on Cloud Media Storage. |
| Parent in control | All advanced features are toggle‑controlled in Copilot. You can review, delete, or turn them off at any time. |
| No ads / no sale | We never sell or share children's data for marketing. |
2. Data We Handle & Setting
We may collect, use and share data and aggregated data such as statistical data to provide the Services.
Personal data (or personal information) refers to any information that can identify an individual, such as name and last name, online contact information, telephone number, etc. This does not include data that has been anonymized, a process where all personal data has been removed and an individual cannot be re-identified, even with additional data.
Aggregated data may be derived from your personal data but it does not directly or indirectly reveal your identity. For example, we may aggregate your Usage log to calculate the percentage of users accessing a specific feature.
| Category | Examples | Access Settings |
|---|---|---|
| Child profile | First‑name or nickname, age (MM/YY), language level | Encrypted in Dex Cloud; used only to personalise content and age gate inappropriate features. |
| Child voice | Short utterances during flashcards & stories | Cloud speech-to-text (i.e.transcribing the children's speech to words) on by default, processed in real time by OpenAI Whisper; audio deleted immediately after transcription. You may switch to processing On‑device Only in settings. In that case, no children's voice clips will leave the device. |
| Child photos control | Pictures the child chooses to take | Sent once to OpenAI Vision for object recognition; image deleted immediately after label returned. No server copy kept unless Cloud Media Storage is enabled. |
| Device / network data | Usage of LTE data | Read from Soracom for billing; stored 12 months. |
| Usage logs | Timestamps, button taps, feature flags, error codes | Stored 30 days for analytics, then deleted or aggregated (if necessary). |
| Parent account | Email, password hash, consent record | Encrypted in Dex Cloud; retained while account is active. |
3. Optional Controls (Parent Toggles in Copilot)
| Toggle | What Changes | 3rd‑Party Involved | Max Retention | Turn Off Anytime? |
|---|---|---|---|---|
| Cloud Media Storage (default Off) | Dex keeps copies of photos and the cloud‑processed voice clips so you can replay them in Copilot. | Dex Cloud only (no external provider) | 90 days → auto‑delete (or delete sooner in app) | ✔ |
| Help Dex Improve (default Off) | Authorises named, background‑checked Worldex engineers to review the items stored under Cloud Media Storage strictly for QA/model tuning. | Worldex Lab staff only | Same 90‑day window 90 days → auto‑delete (or delete sooner in app) | ✔ |
If both toggles remain off, no voice or photo ever leaves the camera longer than the few milliseconds needed for real‑time processing.
4. How We Use Data
We use personal data only to provide our Services or when permitted by law. Most commonly, we use personal data in the following situations:
- Operate the experience: recognise objects, check pronunciation, unlock curriculum.
- Maintain the service: monitor LTE spend, fix bugs, secure the platform.
- Compliance & safety: keep consent records, meet COPPA/FTC requirements.
Never for ads, cross‑site tracking, or sale.
5. Who Can Access Data
VENDORS & TEAM ACCESS
To provide and improve our Services, Worldex Lab may work with carefully selected third-party vendors. These vendors help us with things like technical infrastructure, software tools, customer support, and other essential operations. All vendors act as data processors on behalf of Worldex Lab, and we have strict data processing agreements in place with each of them.
A limited number of authorized team members at Worldex Lab may also access certain personal data—but only when necessary to operate, support, or improve our Services. All access is controlled and logged.
| Who | Purpose | Safeguards |
|---|---|---|
| Worldex Lab engineers & support | Debugging, crash triage, fulfilling parent requests. | Multi-factor authentication, role‑based access, audit logs. |
| ElevenLabs / OpenAI Whisper (voice) | Real‑time speech‑to‑text | No account IDs sent; audio auto‑discarded; contract bars retention & model training. |
| OpenAI Vision (photos) | One‑time object recognition. | Same no‑retain contract; images deleted instantly after label returned. |
| Soracom (eSIM) | Cellular connectivity metrics. | Handles ICCID & data totals only; no child content. |
| No other parties | We do not share with advertisers, data brokers, or social media platforms. | |
6. Security Measures
- TLS 1.3 in transit; AES‑256 at rest
- Production access behind MFA + recorded audit trail
- Firmware & app signed; OTA updates only from pinned servers
- Written Children's Information‑Security Program (rev. May 2025)
7. Parental Rights (COPPA‑Compliant)
You may, at any time:
| Right | How |
|---|---|
| Review | View stored media, voice logs, and profile data in Copilot. |
| Delete | Erase single items or your entire account; deletion propagates within 14 days. |
| Withdraw consent | Toggle off any optional feature; future data stays local. |
Identity verified via password + email code (FTC‑approved method).
8. Retention Schedule
| Data Type | Maximum Retention | Deletion Trigger |
|---|---|---|
| On‑device photos (no Cloud Media Storage) | 30 days local cache | Auto‑wipe or manual delete |
| Cloud Media Storage copies | 90 days | Parent delete or auto‑delete |
| Usage logs | 30 days | Rolling purge / aggregation |
| Network‑usage totals | 12 months | Account deletion |
| Parental‑consent record | 5 years (COPPA) | Account deletion + 5 years |
9. International Transfers
Beta participation is limited to U.S. families. All processing occurs in AWS us‑west‑2. We do not transfer children's data overseas; traveling abroad still routes to the same U.S. region.
10. Updates to This Notice
The beta evolves quickly. We will email you and post an in‑app changelog at least seven (7) days before any material change takes effect.
11. Contact Us
Dex Privacy Team
Email: privacy@dex.camera
Mail: Worldex Lab, Inc. – 201 Spear St., Suite 1100, San Francisco, CA 94105
Phone: +1 (415) 818‑0101
Thank you for helping us build Dex responsibly. Your feedback is essential to delivering a safe, delightful learning experience for every child.