Privacy Policy

Last updated: October 20, 2025

LexyBooster ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our language learning application.

1. Information We Collect

We collect the following types of information:

• Account Information: Email address, name, and password (hashed and encrypted)
• Learning Data: Words you study, review history, quiz results, XP earned, levels, achievements
• Usage Statistics: Session duration, feature usage, study patterns (anonymous aggregated data)
• Device Information: Browser type, device type, operating system (for app compatibility)

2. How We Use Your Information

We use your information to:

• Provide and maintain the LexyBooster service
• Track your learning progress and personalize your experience
• Calculate spaced repetition intervals and optimize your study schedule
• Display your achievements, streaks, and leaderboard rankings
• Send notifications (if you enable them) for study reminders and streak alerts
• Improve our app based on usage patterns
• Provide customer support

3. Data Storage and Security

• Secure Storage: All data is stored on Railway PostgreSQL with encryption at rest
• HTTPS Encryption: All communications between your device and our servers use HTTPS/TLS encryption
• Password Security: Passwords are hashed using industry-standard bcrypt algorithm
• Access Control: Only authorized personnel can access backend systems
• Backup: Regular automated backups to prevent data loss

4. Data Sharing

We DO NOT sell, trade, or rent your personal information to third parties. We may share data only in these cases:

• Public Leaderboards: Your name, XP, and level are visible on public leaderboards (you can use a pseudonym)
• Service Providers: Railway (hosting), Cloud TTS providers (for voice generation) - under strict privacy agreements
• Legal Requirements: If required by law or to protect our rights and users' safety

5. Your Rights and Control

You have the following rights:

• Access Your Data: View all your learning data in the Statistics section
• Export Your Data: Download all your words as CSV at any time
• Delete Your Data: Contact us to request account deletion (we'll permanently erase all your data within 30 days)
• Opt-Out of Notifications: Disable notifications in browser settings or app settings
• Change Settings: Update your language pairs, preferences, and privacy settings anytime

6. Cookies and Local Storage

We use the following:

• Authentication Cookies: To keep you logged in (JWT tokens)
• LocalStorage: To store your preferences (theme, voice settings, UI language)
• Service Worker Cache: To enable offline functionality
• No Tracking Cookies: We do not use third-party tracking or advertising cookies

7. Children's Privacy

LexyBooster is suitable for users age 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.

8. Third-Party Services

Our app uses the following third-party services:

• Railway: Cloud hosting (data stored in secure data centers)
• Google Fonts: For typography (no personal data sent)
• Chart.js (CDN): For statistics visualization (client-side only, no data sent)
• Web Speech API: Browser-based text-to-speech (processed locally on your device)

9. Data Retention

• Active Accounts: Data retained as long as your account is active
• Inactive Accounts: Data may be deleted after 2 years of inactivity (with prior email notification)
• Deleted Accounts: All personal data permanently deleted within 30 days of deletion request
• Backups: Backup copies may persist for up to 90 days (encrypted and inaccessible)

10. International Users

LexyBooster is hosted on Railway's infrastructure. By using our service, you consent to the transfer of your data to servers that may be located outside your country of residence. We ensure that all data transfers comply with applicable privacy laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an in-app notification (for major changes)

Continued use of LexyBooster after changes constitutes acceptance of the updated policy.

12. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we don't sell data)
• Right to non-discrimination for exercising your rights

13. GDPR Compliance (European Users)

If you are in the European Economic Area (EEA), you have rights under GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Data Portability: Export your data in machine-readable format (CSV)
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent for data processing at any time

---

← Back to LexyBooster | Terms of Service