Privacy Policy

PRIVACY POLICY Last Updated: October 26, 2026 1. INTRODUCTION This Privacy Policy explains how information relating to you ("You" or "User") may be processed by the Data Controller ("We" or "Us") when you use the Lexiego website and application (together, the "Service"). 2. DATA MINIMIZATION AND LOCAL STORAGE Learning progress, scores, coins, achievements, downloaded dictionaries, and saved AI explanations in the App are primarily stored on your device in encrypted local storage. When you choose Google sign-in on the website, a browser account session may be stored by Firebase so you can return to your account. The website may store your latest listening-and-typing exercise and subscription entitlement on our Cloudflare-hosted service so you can resume the exercise and use Pro access on a signed-in device. We aim to process only the information that is needed to provide and protect these features. We may count onboarding selections and other app usage in aggregate to improve the App. A daily rotating pseudonymous visitor code may be derived from connection data for general usage measurement. This code is not linked to onboarding selections. Service providers may process ordinary request metadata to deliver and protect the service. Temporary event references may be retained to prevent duplicate onboarding counts and are scheduled for deletion after approximately one year through routine maintenance. Website statistics may be compiled as daily totals of page openings, store-button clicks, download-link copy actions and automatic store-opening attempts. Totals may be separated by website language, entry-page category, a limited source label and the download step. Shared navigation flags can keep a download continuation separate from an initial page opening; they are not intended to identify a person or connect a browsing history. Sources may be inferred from limited browser context or a shared campaign label and are approximate. This measurement is designed to use no analytics cookies, browser storage or visitor identifiers. Copy actions and opening attempts do not confirm a successful copy, store visit or installation. The statistics database stores daily totals rather than individual browsing records; these totals are normally retained for up to 180 days. Cloudflare processes connection metadata to deliver and protect the service under its applicable terms. Connection information may also be used temporarily to limit abusive requests; it is not added to website statistics records. 3. THIRD-PARTY SERVICE PROVIDERS The App may retrieve dictionaries, reading articles, and educational content through content delivery networks and third-party open-source repositories using standard internet protocols. Your device IP address and basic request metadata may be processed by those providers to deliver the requested content. We use Google Firebase services, including Crashlytics, Performance Monitoring, Anonymous Authentication, and App Check. These services may process technical information such as an anonymous installation or authentication identifier, application version, operating system, device class, language setting, crash reports, error logs, performance data, and cryptographically signed app-integrity tokens. This supports security, fraud prevention, stability, and the operation of online features without requiring a name or email address. When you choose Google sign-in on the website, Firebase Authentication processes your sign-in credentials and account identifiers. Our account database uses your Firebase user identifier to associate the latest learning language, story, missing-word answers, exercise settings, sentence position, completed-story identifiers and completion times, and Pro entitlement status with your account. The latest exercise progress is replaced as you continue practising. These records are kept while needed to provide the account feature and can be deleted on request using the contact details in this policy. We do not store your Google password. Deleting website data does not itself cancel an active subscription. 3.1 AI EXPLANATIONS AND PRO VERIFICATION If you explicitly request an AI explanation, the selected sentence and its source and target language are sent through our Cloudflare-hosted service to Google Gemini to generate the requested learning explanation. We use the request only to provide the feature and apply technical safeguards, including authentication, app-integrity checks, rate limits, and an aggregate spend cap. Shared server-side response caching is limited to approved Lexiego catalogue sentences. Manually entered or imported text is cached only in encrypted local storage on your device. To verify Lexiego Pro access, we may send store purchase evidence to our service. The service may retain a pseudonymous Firebase identifier, store name, original transaction reference, product identifier, expiration status, and monthly generated-explanation count. We do not request or retain payment-card numbers or billing addresses. Google, Apple, Cloudflare, and other service providers process data under their respective privacy terms. For website subscriptions, RevenueCat and the selected payment provider (such as Paddle) may process your account identifier, subscription product, renewal and expiration status, email address, billing details, and payment information to complete and manage the purchase. Our service receives the subscription status needed to grant or remove Pro access; payment card details are handled by the payment provider. Entitlement records are updated when the billing provider sends subscription changes. Some transaction records may be retained afterward where needed for security, accounting, or legal obligations. You can request deletion of account-linked learning progress, subject to records that must be kept by law or to administer an active purchase. The App does not access advertising identifiers for tracking or profiling. If advertising is displayed, it is intended to be non-personalized. 3.2 VOLUNTARY SUBTITLE CONTRIBUTIONS If you choose to suggest subtitle corrections, the submitted text, video reference, language, time ranges, submission date, and a random submission code may be processed to review and improve educational content. A name, email address, or public profile is not required for this feature. Please do not include personal information. Approved text may be incorporated into subtitles displayed to other users. Submission records are normally removed after approximately 90 days; approved subtitle content may remain available as part of the educational content. Draft corrections and the submission code may be stored in encrypted local storage so you can resume editing and view the review status. You may use that code when contacting us about your contribution. 4. PURCHASES AND SUBSCRIPTIONS In-app purchases and Lexiego Pro subscriptions are processed through the Apple App Store or Google Play Store. Store purchase evidence may be verified by our service to determine whether Pro access is active. Subscription status may change when a store reports expiration, cancellation, refund, or other entitlement changes. 5. SPEECH RECOGNITION AND VOICE DATA The App may use your device's native speech-recognition service for voice-based learning exercises. Audio may be processed by Apple, Google, or the relevant device provider to convert speech to text. We do not intentionally collect voice recordings through the AI explanation service. 6. LEGAL BASIS, RETENTION, AND YOUR RIGHTS Processing is based, where applicable, on performance of a contract, legitimate interests in operating and securing the App, consent where required, GDPR Article 6, and KVKK Article 5. You may have rights to request access, correction, deletion, restriction, objection, or portability under applicable law. Device-stored information can generally be removed by deleting App data. Requests concerning service-side data may be made using the contact details published with the App. Retention periods may vary where necessary for subscription verification, security, accounting, or legal obligations. 7. CONTACT AND CHANGES This policy may be updated to reflect changes to the App, providers, or applicable law. The current version is made available in the App. For formal questions or requests, use the contact details published in the App store listing or legal notice.