Privacy Policy

1. Who we are and what this covers

This Privacy Policy explains how LexaLingo LLC (“LexaLingo,” “we,” “us,” or “our”) handles personal information when you use the LexaLingo mobile applications, website, account, learning-content services, and support channels (together, the “Service”). It does not govern Apple, Google, Supabase, or other third parties acting under their own privacy policies.

2. Information you provide

• Account information. If you create an optional account, we receive a unique account identifier and email address. Apple or Google may also provide your name or profile information, depending on your choices and their settings. We do not receive your Apple or Google password. Email-link sign-in does not create a LexaLingo password.
• Synchronized learning information. When account sync is on, we receive the progress needed to continue across devices, such as vocabulary identifiers and levels, mastery stages, confidence values, correct and incorrect outcome counts, learning-session identifiers and timestamps, reading positions, Saved Words, and Write progress. Saved Words can include the Japanese word, romaji, English meaning, associated story, status, and timestamps.
• Optional learning-response analytics. If you choose “Share answers,” LexaLingo receives the Learn and LexaCoach prompts shown to you; answers you submit; expected answers; whether an answer was accepted, incorrect, almost correct, or revealed; attempt number and response time; learning level and exercise type; and app, build, and learning-content versions. This optional dataset is sent without your LexaLingo account identifier or email address. It uses a random installation deletion credential stored on your device. Please do not enter personal, confidential, or sensitive information as a practice answer.
• Support information. If you contact us, we receive your message, contact details, and any diagnostics or attachments you choose to provide. Please do not send passwords, sign-in codes, or sensitive information that is not needed to solve the issue.

3. Information collected automatically

• Service and security logs. When your device or browser contacts the Service, our systems receive technical request information such as IP address, request date and time, requested path, response status and size, referring page, and browser or device user-agent. We use these logs to deliver content, diagnose failures, rate-limit abuse, investigate security events, and keep the Service reliable.
• App and browser data. LexaLingo stores downloaded lessons and media, preferences, a device installation identifier, authentication-session information, and unsynchronized mobile learning state locally. Mobile authentication tokens are kept in the operating system’s secure storage where supported. The website uses secure, HttpOnly cookies for account sessions and to keep each signed-out browser’s learning records separate.
• Age eligibility. On first launch, the app asks for a date of birth and evaluates it only on the device. The date itself is discarded and is not sent to LexaLingo or retained by the app. The app stores only the resulting full-experience or limited-preview status, the age-screen version, and the time the check was completed on that installation. A limited result expires after 30 days so the app can ask again without retaining a birth date.
• No advertising or cross-app tracking. LexaLingo does not include third-party advertising, behavioral-advertising trackers, or an advertising analytics SDK. Optional first-party learning-response analytics is used only to understand and improve LexaLingo’s lessons and answer checking. We do not track you across other companies’ apps or websites.

4. What stays local

You can use core learning features without creating an account. Unsigned mobile learning records, preferences, downloaded content, and any optional answers waiting to upload can remain on the device. If you decline answer sharing, Learn and LexaCoach answer text is not added to the optional response-analytics queue. On the website, a random browser cookie separates your unsigned learning progress from other visitors; the server stores that progress under the random identifier rather than an account identity. Downloaded lessons, audio, pictures, and content packs are device-specific and are not uploaded as part of account sync. Unsigned data is not protected by account recovery and may become inaccessible if you delete the app, clear its storage, lose the device, or remove the browser cookie.

5. How we use information

We use personal information to:

• authenticate accounts and keep signed-in sessions working;
• provide lessons, downloads, saved words, progress, and cross-device synchronization;
• combine legitimate offline changes and resolve sync conflicts;
• operate support, troubleshoot errors, and communicate about the Service;
• secure accounts and systems, prevent fraud and abuse, enforce our Terms, and comply with law; and
• with your choice to share answers, find valid answers that should be accepted, confusing prompts, content errors, and learning-flow weaknesses; and
• understand and improve reliability and learning functionality using operational and appropriately aggregated information.

Where a law requires a legal basis, these activities rely as applicable on performing our agreement with you, our legitimate interests in operating and securing the Service, your consent, or compliance with legal obligations. You may withdraw consent where consent is the basis, without affecting earlier lawful processing.

6. When information is disclosed

We do not sell personal information, rent it, or use it for targeted or cross-context behavioral advertising. We may disclose information:

• To service providers. Supabase supports authentication and synchronized account data; infrastructure and hosting providers deliver the website, APIs, content, and optional response analytics. Apple and Google process sign-in when you choose their buttons. We may provide privacy-filtered response-analytics exports to contracted artificial-intelligence or data-analysis providers solely to help identify lesson and answer-checking improvements. Before doing so, we use service terms and settings that restrict the provider from using LexaLingo data to train general-purpose models. Providers receive only information needed to perform their services and are subject to their contracts and privacy terms.
• For safety and law. We may preserve or disclose information when we reasonably believe it is necessary to comply with valid legal process, investigate fraud or abuse, protect the security or rights of users and the Service, or prevent harm.
• For a business change. Information may be transferred as part of a financing, reorganization, merger, acquisition, or sale of assets, subject to applicable law and appropriate notice.
• At your direction. We may disclose information when you request it or give valid consent.

7. Retention

• Account and synchronized learning information is generally kept until you delete the account or the information is no longer needed to provide the Service.
• Website authentication cookies may remain valid for up to 30 days unless you sign out, delete them, or the session is revoked.
• Unsigned website learning records and their random browser identifier may be retained for up to approximately one year. Signing in from that browser transfers supported Learn progress into the account and removes the anonymous record.
• Routine website request logs are ordinarily rotated and removed within approximately 14 days. We may retain specific security records longer when reasonably necessary to investigate abuse, protect the Service, or satisfy law.
• Optional raw learning-response analytics is ordinarily deleted within 90 days of receipt. Unsent response events on a device are removed after approximately 14 days or when answer sharing is turned off. We may retain grouped or statistical results longer when they no longer reasonably identify an individual or installation.
• Local downloads and learning data remain until you remove them using LexaLingo or your device/browser controls. Operating-system or cloud backups may follow the provider’s own retention schedule.
• Service providers may retain limited backup, security, fraud-prevention, or legally required records under their own retention rules.

We consider the amount, sensitivity, purpose, security risk, and legal requirements when setting retention periods.

8. Your choices and rights

You may learn without an account, choose among available sign-in methods, sign out, manage downloaded content, and delete your account. You may decline optional answer sharing when first offered. If enabled, you can turn it off in Settings; this clears unsent answers and requests deletion of raw response analytics associated with that installation’s random deletion credential. If the device is offline, the deletion request retries when the Service becomes reachable. Because this dataset is not connected to account identity, we generally cannot locate it from an account email alone. The Account screen provides in-product deletion; our public account-deletion page explains the same process and how to request help.

Depending on where you live, you may also have rights to request access, correction, a portable copy, restriction, objection, or deletion of personal information, and to appeal or complain to a privacy regulator. To make a request, use the contact below. We may verify your identity and may decline or limit a request where the law permits. Authorized agents must provide proof of authority, and we may still verify the request directly with the account holder.

9. Account deletion

Deleting an account removes the managed authentication identity, LexaLingo account record, and synchronized learning records associated with it. The app also turns off optional answer sharing and requests deletion of raw response analytics associated with the current installation’s random deletion credential. Because response analytics is deliberately not linked to the account, account deletion cannot identify data from another installation; you can turn off sharing on each installation, contact us for assistance, or allow raw events to expire under the 90-day retention schedule. Account deletion does not automatically erase other data already stored locally on every device. Short-lived request logs expire on their normal schedule, and limited information may be retained where necessary for security, fraud prevention, dispute resolution, or law. Deletion is permanent and cannot be undone.

If you used Sign in with Apple in a current version of the iOS app, LexaLingo requests revocation of the stored Apple authorization before deleting the account. Older accounts, or accounts created through a sign-in flow that did not provide LexaLingo with a revocable Apple token, may still show LexaLingo among apps connected to the Apple Account. You can remove that remaining connection in Apple Account settings.

10. Security

We use safeguards intended to protect information, including encrypted network transport, access controls, secure session handling, row-level database protections, and minimized app permissions. No storage or transmission system is guaranteed to be completely secure. Protect access to your email, Apple or Google account, and device, and contact us promptly if you suspect unauthorized access.

11. Children

The full Service is not directed to children under 13. Before account, download, synchronization, optional answer-sharing, or other connected features start, the mobile app uses an on-device birth-date screen. The date itself is discarded and never transmitted or retained by LexaLingo. If the on-device check indicates that a person is under 13, the app provides only a small offline preview and does not mount the account, download, synchronization, or response-analytics systems.

If local law requires a higher age for a connected feature or valid consent, that higher age applies. We do not knowingly collect personal information from a child below the applicable age. If you believe a child provided personal information contrary to this section, contact us so we can investigate and take appropriate action.

12. International processing

LexaLingo and its hosting, authentication, artificial-intelligence, and other service providers may process information in countries other than the one where you live, including the United States and Canada. Those countries may have different privacy laws. Where required, we use legally recognized protections for international transfers.

13. Changes to this policy

We may update this Policy as the Service or law changes. The revised version will be posted here with a new effective date. If a change materially affects your rights, we will provide additional notice appropriate to the change where required.

14. Contact

For privacy questions or requests, email lexalingo.support@gmail.com. Please identify the request and the email connected to your account, but never send a password or sign-in code.