Privacy Policy

1. About this policy

Kourion Apps LTD (“we”, “us”, or “our”) is responsible for the personal information described in this policy. Lexi is also identified internally as Kerkira. This policy covers the app, its cloud services, support interactions, and this website.

Lexi uses an anonymous account by default. You do not need to provide a name or email address to start learning. However, an anonymous account identifier can link your activity, learning records, and subscription status, so this information is not necessarily anonymous for privacy-law purposes.

2. Information we process

• Account identifiers: a Firebase user ID and identifiers used by our subscription and analytics providers to recognize an account, device, or app installation.
• Learning information: your language preferences, starting and target levels, learning goals, onboarding answers, selected vocabulary, exercise results, progress, practice history, and streaks.
• Content you submit: photos, notes, documents, and other files you choose to upload to extract vocabulary, together with the resulting words. We also process word reports and feedback, including the report text, word identifier, and user ID.
• Purchase information: subscription products, transaction and receipt information, purchase dates, and entitlement status. We do not receive your full payment card details from Apple.
• Technical and usage information: app interactions, sessions, event timestamps, app version, device model, operating system, language, IP address, approximate location derived from IP, and service logs, depending on the service and its configuration.
• Support information: your email address and the information you choose to include when contacting us.

3. Why we use information

• Provide your account, personalize learning, save progress, and deliver exercises and vocabulary.
• Extract vocabulary from files you choose to submit.
• Validate purchases, restore access, and manage subscriptions.
• Understand feature usage and improve learning experiences, reliability, and performance.
• Investigate content reports, answer requests, prevent abuse, and meet legal obligations.

4. Providers and data sharing

We share information with providers as needed to deliver the services below. Providers may also process some information for their own legal, security, or operational purposes under their applicable terms.

We may also disclose information when required by law, to protect rights and security, or as part of a merger, acquisition, or business transfer subject to applicable privacy protections.

5. Photos, files, and permissions

Vocabulary import is optional. If you use it, the content you select is uploaded to Firebase and processed by OpenAI to extract vocabulary. Submit only content you are comfortable sharing for this purpose, and avoid including sensitive personal information or information about others that is not needed.

Camera and photo access are used for the import features you choose. You can manage available permissions in your device’s Settings. Denying access may prevent the relevant feature from working. Learning preferences and cached progress may also be stored on your device.

6. Analytics and this website

Google Analytics and, when introduced, Amplitude help us measure how Lexi is used. Analytics identifiers may be associated with usage events; removing your name does not make such records fully anonymous. Where consent is required for optional analytics, we will request it before that collection and allow withdrawal.

This privacy page does not embed analytics scripts or advertising cookies. Firebase Hosting may process IP addresses and technical request information to serve the page and operate and secure the hosting service.

7. Legal bases

Where UK or EU data protection law applies, we process information to perform our contract with you when providing learning features, processing requested uploads, and managing subscription access. We rely on legitimate interests for service security, troubleshooting, responding to feedback, and improving the service where those interests are not overridden by your rights. We rely on consent where required, including for optional analytics, and on legal obligations where records or disclosures are required by law.

You can withdraw consent for processing based on consent without affecting the lawfulness of processing before withdrawal. Contact us using the details below to exercise this choice.

8. Retention and security

We keep account and learning records as needed to provide your learning history and the service. Uploaded content and extracted vocabulary may remain in cloud storage; completion of an import does not mean the original upload has been automatically deleted. You can request deletion using the contact details below.

We retain support reports, technical logs, and analytics only as needed for their purposes, taking into account security needs, provider retention settings, and legal requirements. Purchase and related records may be kept longer for accounting, fraud prevention, or legal claims. Backup copies may persist until they expire under the relevant backup cycle.

We use technical and organizational measures to protect information, including access controls and encrypted connections. No storage or transmission system can be guaranteed completely secure.

9. International processing

Our providers may process information in countries outside the United Kingdom, the European Economic Area, or your country, including the United States. Where required, transfers are subject to applicable safeguards, such as adequacy decisions or approved standard contractual clauses and UK transfer provisions. Contact us to request information about safeguards applicable to your data.

10. Your privacy rights

Depending on your location and the applicable law, you may request access to, correction of, deletion of, or a portable copy of your information; restrict or object to processing; and withdraw consent. Some rights are subject to legal exceptions.

Contact us to make a request. We may need information to verify your request and locate an anonymous account, and may coordinate with our providers. Do not send passwords or full payment details. Uninstalling Lexi does not automatically delete cloud records, and deleting data does not cancel an Apple subscription; manage subscriptions through your Apple account.

You may complain to your local data protection authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO).

11. Children

Lexi is not intended for children below the age at which they can lawfully consent to the relevant processing without parental authorization in their country. If you believe a child has provided personal information without the required authorization, contact us so we can investigate and address it.

12. Changes and contact

We may update this policy as the app or our practices change. We will revise the date above and provide additional notice or seek consent when required by law.

For privacy questions, consent withdrawal, or requests concerning your data, contact Kourion Apps LTD at support@kourionapps.com.