Privacy Policy

This Privacy Policy explains how Lex ("Lex", "the app", "we", "us", or "our") collects, uses, and protects your information when you use the app. Lex is operated by Muhammed Yıldırım (the "Developer").

If you have any questions, contact us at muhammedyildirim48@gmail.com.

Quick summary

Who we are (Data Controller)

For users in the European Economic Area (EEA), the United Kingdom, and similar jurisdictions, the data controller is the Developer named above. You can reach our privacy contact at the email above.

Information we collect

We collect only what we need to run the app. We do not ask for your name, phone number, or address.

1. Account & identifiers

• Anonymous user ID. On first launch, the app creates an anonymous account (via Supabase) so your words and progress can sync. This ID is not tied to your real-world identity unless you choose to link Apple.
• Sign in with Apple (optional). If you link your account, Apple shares a unique identifier and the email address you choose to share (which may be Apple's private relay address). We use this only to keep your library when you change devices.

2. Content you create

• Photos you capture. When you use the camera (or pick a photo) to learn a word, the image is processed to create a "sticker" and to suggest the word. The resulting sticker image and the word are stored in your library.
• Saved words & learning progress. The words you collect, definitions, examples, and your spaced-repetition review history.
• Chat messages. Messages you exchange with the in-app AI tutor.
• Audio recordings (voice features). If you use speech/pronunciation features, short audio clips are captured to transcribe what you say. These are used to provide the feature and are not used to identify you.

3. Subscription & purchase information

• Purchases are processed by Apple. We receive subscription status (e.g., active, expired, trial) via Adapty and Apple's receipts so we can unlock premium features. We do not receive your full credit card number.

4. Device & technical data

• Basic technical data needed to deliver content reliably (e.g., app version, language settings, and connection metadata). We do not use third-party analytics or crash-reporting SDKs.

What we do NOT collect

• No precise location.
• No contacts.
• No health or financial records.
• No advertising identifier (IDFA); no cross-app/website tracking.

Camera, photos, microphone & speech permissions

• Camera / Photos: Used only to capture or select an image so you can learn the word for an object. Object detection and text recognition run on your device using Apple's Vision framework; only the resulting sticker and any text needed for word suggestions are sent to our servers.
• Microphone / Speech Recognition: Used only for optional voice/pronunciation features, to capture and transcribe your speech.

You can revoke any of these permissions at any time in iOS Settings → Lex.

How AI processing works (important)

Lex uses AI to suggest words, write definitions and examples, and power the tutor chat.

• The app never talks to AI providers directly. Requests go to our own backend gateway, which forwards them to a third-party AI provider (OpenRouter, which routes to the underlying model).
• What is sent: the relevant text (e.g., a recognized word, your chat message, the explanation language) and, where needed, the captured image or a short audio clip for voice features.
• We send only what is necessary to generate the response. We do not send your Apple email or payment details to the AI provider.

How we use your information

• To provide core features: capturing words, building your library, flashcard review, streaks, and the AI tutor.
• To sync your library across your devices.
• To manage your subscription and unlock premium features.
• To maintain security, prevent abuse, and fix problems.
• To comply with legal obligations.

Legal bases (GDPR/UK GDPR): performance of our contract with you (providing the app), your consent (e.g., camera/microphone access), and our legitimate interests (security and improving reliability).

Third-party services

We rely on a small number of trusted processors:

Each provider processes data under its own privacy terms and only as needed to provide its service to us.

Data sharing & selling

We do not sell, rent, or trade your personal data. We share data only with the processors listed above, when required by law, or to protect our rights and users' safety.

Data retention

• Your library, words, chat history, and stickers are kept while your account exists so you can access them across devices.
• When you delete your account, we delete your associated personal data from our active systems within a reasonable period, except where we must retain limited records to meet legal obligations.
• Audio clips for voice features are processed transiently and not retained as a long-term voice profile.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to erasure").
• Export/port your data.
• Object to or restrict certain processing.
• Withdraw consent at any time (e.g., revoke camera/microphone permissions).

How to exercise: Use the in-app account deletion option, or email muhammedyildirim48@gmail.com. We respond within the time required by applicable law.

California (CCPA/CPRA)

California residents have the right to know, delete, and correct personal information, and to opt out of "sale" or "sharing." We do not sell or share your personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights.

EEA/UK (GDPR)

You have the rights listed above and the right to lodge a complaint with your local data protection authority.

International data transfers

Our service providers may process data in countries outside your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) to protect your data during these transfers.

Children's privacy

Lex is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Security

We use industry-standard measures (encryption in transit, access controls, and trusted infrastructure providers) to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information.

Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide notice in the app. Continued use after changes means you accept the updated policy.