Privacy Policy
Last updated: 31 May 2026
LexiTap ("we", "us") is an offline-first English vocabulary app. We built it to collect as little about you as possible. This policy explains what we collect, why, and the choices you have.
The short version: Your learning progress lives on your device. We don't sell your data, show ads, or track you across other apps. Analytics are anonymous and optional. Crash reports are stripped of personal information before they leave your phone.
1. What we collect
| Data | Why | Where it lives |
|---|---|---|
| Email & display name (if you create an account) | Sign-in and device-switch recovery | Supabase (auth provider). If you choose Sign in with Apple or Google Sign-In, Apple or Google provides us your sign-in identity (Apple can hide your email via its private relay). |
| Learning progress — review history, schedule, streaks | To run spaced repetition and show your stats | Your device. Optional encrypted backup to our storage. |
| Purchases (exam packs) | To unlock and restore what you bought | Apple / Google & our payments processor |
| Anonymous usage events — e.g. app opened, session completed | To understand which features help learners and fix drop-off | PostHog (EU). Pseudonymous ID only. Opt-out in Settings. |
| Crash diagnostics — error traces, app/OS version, device model | To find and fix bugs | Sentry. Personal data scrubbed on-device first. |
What we never collect
Location, contacts, photos, microphone or voice, health data, government IDs, or advertising identifiers (IDFA/AAID).
2. How analytics work
Usage analytics are anonymous — tied to a random device ID, never to your email or account. They contain no personal information, are hosted in the EU, and are used only to improve the app (retention, conversion, and finding broken flows). We never use them for advertising, cross-app tracking, or selling data. You can turn analytics off at any time in Settings → Privacy.
3. Crash reporting
When the app crashes, a diagnostic report helps us fix it. Before any report leaves your device, we strip out identifying information — user IDs, email, IP address, device name, tokens, and URLs. We do not record your screen or session.
4. Sub-processors
We rely on a small number of trusted providers to operate LexiTap:
- Supabase — account authentication and encrypted backup storage
- Apple / Google — app distribution, payments, and optional sign-in (Sign in with Apple / Google Sign-In)
- RevenueCat — purchase and entitlement management
- PostHog (EU) — anonymous product analytics
- Sentry — crash diagnostics (PII-scrubbed)
- Text-to-speech provider — pronunciation audio
5. Where your data is stored
Your learning data is stored locally on your device by default. If you sign in and enable backup, an encrypted copy is saved to our cloud storage so you can recover it on a new device. Some providers above may process data outside your country; where required, we rely on standard contractual safeguards.
6. Data retention
On-device data stays until you delete it or uninstall the app. If you have an account, you can delete it and its backups at any time (see below). Anonymous analytics are retained only as long as needed to improve the product.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Because most data lives on your device, you control it directly. For account data, email us and we will help. We do not sell personal data.
8. Children
LexiTap is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will remove it.
9. Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected here with a new "last updated" date, and where appropriate, in the app.
10. Contact
Questions or requests about your privacy: [email protected]
General support: [email protected]