1. Who we are
Lexelo is a language practice service that identifies skill gaps, tracks repeated mistakes, and offers live or AI-assisted ranked matches. Questions about this policy can be sent to support@lexelo.tech.
2. Information we collect
- Account data: email address, display name, authentication status, selected language, proficiency level, and the age range you choose. We do not ask for your exact date of birth.
- Learning data: answers, response times, skill tags, placement results, recurring mistakes, progress, XP, and streaks.
- Ranked activity: matchmaking state, match results, opponent type, player blocks, report reason and match-linked display name snapshots, and other anti-abuse signals.
- Technical and security logs: request timestamps, IP address or other network identifiers, basic request or device information, function request identifiers, and security or rate-limit events automatically processed by our service providers to keep Lexelo secure and reliable.
- Support data: information you include when contacting us for help or reporting a question.
3. How we use information
We use information to:
- create and secure accounts;
- personalize question difficulty and identify learning patterns;
- run matchmaking, calculate results, and prevent unfair play;
- restore progress across devices;
- send essential account and security emails;
- answer support requests and improve question quality; and
- detect abuse, investigate incidents, and meet legal obligations.
4. Legal bases
Where data protection law requires a legal basis, we rely on performing our agreement with you, our legitimate interests in operating and protecting Lexelo, your consent where requested, and compliance with legal obligations. You may withdraw consent at any time without affecting earlier processing.
5. Service providers and sharing
We do not sell personal data. We share limited information with vendors that help us operate Lexelo, including Supabase for authentication and application data and Hostinger infrastructure for transactional email. Providers may only process data for the services they perform for us. We may also disclose information when legally required or necessary to protect users and the service.
6. Retention and security
We keep account and learning data while your account is active. When you delete your account, Lexelo deletes the account and associated progress; Ranked history is de-identified and submitted answers and latency are removed. Any remaining account-deletion audit and unreferenced player safety report is deleted after 90 days. A safety report supporting an active block can remain while both accounts are active; deleting either account removes the block and its profile-linked identity immediately.
Supabase's customer-visible operational logs for our current plan are available for one day. Hostinger transactional-email delivery and mailbox-access logs are available for 30 days. Our public website access log rotates daily and retains 14 rotations plus the current log. These logs may contain timestamps, request details, email delivery metadata, IP addresses, user agents, and IP-derived regional information. Longer retention occurs only where a legal obligation or an active security investigation requires it.
We use access controls, encrypted connections, and restricted production credentials, but no service can guarantee absolute security.
7. Your choices and rights
You can permanently delete your Lexelo account and associated progress directly in the app by going to Profile → Settings → Delete account and following the confirmation steps. If you cannot access your account or the app, email support@lexelo.tech for account-deletion assistance.
Depending on your location, you may request access, correction, deletion, portability, restriction, or objection to certain processing. You may also complain to your local data protection authority. For these privacy-rights requests, email support@lexelo.tech from the address linked to your account. We may need to verify your identity before completing the request.
8. Children
Lexelo is not directed to children under 13, or a higher minimum age where local law requires it. Onboarding requires an explicit age-range choice and does not allow a person who selects Under 13 to continue. If you believe a child provided personal data without appropriate permission, contact us so we can investigate and remove it.
9. International transfers
Our providers may process information in countries other than yours. Where required, we use recognized safeguards for international data transfers and apply contractual and technical protections.
10. Changes to this policy
We may update this policy as Lexelo changes. Material updates will be highlighted in the app or by another appropriate notice. The date above identifies the latest version.