Privacy Policy

1. Introduction

Welcome to Lexpresso ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we handle your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our vocabulary learning service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Authentication credentials (via Firebase Authentication)

2.2 Learning Data

We store your learning progress, including:

• Generated flashcards (vocabulary words, definitions, example sentences)
• Review history and performance metrics
• CEFR level preferences
• Video metadata (title, URL, timestamp references)

2.3 Usage Information

We automatically collect:

• Browser type and version
• Device information
• IP address (for security purposes)
• Service usage patterns and analytics

3. How We Use Your Information

We use collected information to:

• Provide and improve our vocabulary learning service
• Generate personalized flashcards based on your CEFR level
• Track your learning progress with spaced repetition algorithms
• Send important service updates and notifications
• Respond to your support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in these limited circumstances:

• Service Providers: Firebase (authentication), Stripe (payments), Railway (hosting). These providers are contractually bound to protect your data.
• Legal Requirements: When required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred (you will be notified).

5. Your Rights (GDPR Compliance)

If you are in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your account and data
• Data Portability: Receive your data in a machine-readable format
• Objection: Object to certain data processing activities
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at support@lexpresso.io.

6. Account Deletion

You can request account deletion at any time by emailing us at support@lexpresso.io. Upon deletion:

• Your account will be deactivated immediately
• Personal data will be deleted within 7 days in principle
• Some data may be retained for a certain period for legal compliance or security purposes (e.g., fraud prevention, financial records)

7. Data Security

We implement industry-standard security measures to protect your data:

• HTTPS encryption for all data transmission
• Encrypted storage for sensitive information
• Security audits and updates as needed
• Access controls and authentication requirements

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and session management
• User preferences and settings
• Analytics and performance monitoring

You can control cookies through your browser settings. Disabling cookies may affect service functionality.

9. Children's Privacy

Lexpresso is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us, and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the service. Continued use of Lexpresso after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: support@lexpresso.io
Website: https://lexpresso.io