Lexemica
Privacy Policy
This policy explains how Lexemica, the app for learning languages by speaking, on iPhone, Android and the web (lexemica.com), processes your personal data. It applies to the app, the website and the links you share from them.
In short
- Your voice is transcribed in real time and we don’t keep the audio, except the recordings you choose to share and those from the level test at the start, which are deleted after 30 days.
- You sign in with your email, without a password, and we only use it for that: we don’t send you marketing.
- We don’t sell your data, and there are no ads or third-party trackers. We measure usage with our own analytics, which doesn’t keep your IP address.
- You can delete your account and your data at any time from Settings, in the app or on the web.
On this page
1. Who is responsible
Lexemica is a service of Amberwake, operated by Mario Martinez, who is the controller of your personal data.
For any privacy matter, use the Amberwake contact form, mentioning “Lexemica” and “Privacy” in your message.
2. What data we process
Your account
- When you start, an account without an email is created and tied to your device: an identifier generated by the app or the browser, your language, your time zone and the languages you study. We don’t ask for your real name.
- To take the level test at the start, keep your progress or use it on other devices, you add your email. You sign in with a 6-digit code or a link we send you, without a password. The code isn’t stored: it expires after 10 minutes and the record of the email is deleted within a day.
- If you share a report, you choose a display name (up to 40 characters), which you can change in Settings.
Your voice
- When you practise, the microphone audio goes directly from your device to a speech recognition provider, which transcribes it in real time. Our servers neither receive nor store it.
- The app scores your answer from the recognised text. From your sessions we keep the outcome (the score of each attempt and your progress), not the audio or the recognised text.
- When an answer doesn’t match the expected one, we may send the recognised text, together with the expected sentence, to an AI service that judges whether it is another correct way to say it. We don’t keep that text.
- During a session, the app or the browser keeps your attempts so you can listen to yourself, and deletes them when it ends.
- The same applies to dictation: if you dictate the description of a scenario, it is transcribed the same way.
What you share by link
- Shared reports. At the end of a scenario or a review you can share a report: after telling you, we upload your recordings from that practice to our servers. Anyone with the link can listen to them, see your display name and the language, type what they understand and rate your pronunciation.
- The level test at the start. When you finish it, we keep your first-attempt recordings, the recognised text, your answers to the questions (for example, the level you think you have) and the result, to show it to you and so you can share it. It is only public if you share its link.
- Links expire after 30 days; then, or earlier if you stop sharing, the recordings are deleted. The result and what your listeners answered stay in your account so you can see what was understood.
- Listeners don’t need an account: their browser keeps an anonymous identifier to remember their answers. From a listener we keep that identifier, what they type, whether it was right and their stars; not their name or IP address.
- These pages are not shown in search engines.
Scenarios created with AI
- With Pro you can create a scenario by describing a situation. We keep what you write (up to 500 characters), the generated scenario and the status of the generation.
- To generate it, we send your description to a generative AI provider; the resulting dialogue is turned into audio by a speech synthesis service and illustrated with a generated image. It is private content of your account: its audio and images are stored under a random name and aren’t linked from anywhere.
- Don’t write personal data about yourself or others in the description: it isn’t needed and the generation may reject it.
Your progress
The scenarios you do and save, what you learn and the state of its review (when it is due and how it went), your streak, your level and the languages you study. This is what lets the review ask you just before you forget.
Devices and IP addresses
- So you can see and sign out of open sessions (Settings › Devices), we keep for each device its platform, app version, operating system, model or browser and an approximate location (country, region and city).
- For security we keep your last 10 IP addresses, and each one is deleted after 90 days without use.
- We don’t use fingerprinting: a device is an installation of the app or a browser.
App usage and errors
- Our own analytics: we record usage events (for example, that you start or finish a session or open a screen) with a pseudonymous identifier, the platform, the version and the language. We work out the approximate location (country, region, city) on our servers from the IP address, without storing the IP in analytics. It doesn’t include your email, your name, your voice or what you say. We don’t use third-party analytics tools.
- Error reports: if something fails, the app or the website sends a technical report (the error, the screen, the device, the version and your account identifier), without emails, names, transcripts or IP addresses.
Payments
If you subscribe to Pro, the payment is handled by the payment platform (on the web) or your app store (in the app). We never see or store your card details: only the customer or purchase identifier, the plan, its status and its dates.
Emails
We only send you the email with the code and the link to sign in. We don’t send newsletters or marketing.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Providing the service: your account, signing in with your email, transcribing and scoring what you say, your progress and review, the scenarios you create and the reports you share | Performance of the contract (the terms of use) |
| Managing your Pro subscription | Performance of the contract |
| Protecting your account and the service: devices, audit IP addresses, abuse limits | Legitimate interest in security |
| Understanding how Lexemica is used and fixing errors (our own analytics and error reports) | Legitimate interest in improving the product, with pseudonymous data and no third parties. You can object (see Your rights) |
| Complying with legal obligations (for example, tax rules or requests from authorities) | Legal obligation |
We don’t make automated decisions with legal effects on you or build commercial profiles.
4. Who we share it with
We don’t sell your data or share it with third parties for advertising. To provide the service we work with providers that process it on our behalf, under contract and only for what we ask of them:
- Speech recognition: the microphone audio while you speak, to transcribe it.
- Generative AI: the description of the scenarios you create and, when judging an answer, the recognised text and the expected sentence.
- Speech synthesis: the text of the scenarios you create, to generate their audio.
- Payments: on the web, the payment platform that charges for Pro; it acts as the seller (merchant of record) and takes care of the charge and the taxes. It receives your email and the payment details you give it.
- App stores: purchases in the app are handled by the store you buy from, under its own terms; it tells us about the purchase and its status.
- Hosting, storage and CDN: the servers and databases of the API, the storage of media and the network that serves the website.
- Email delivery: your address and the code or link to sign in.
The payment platform and the app stores also process payment data as controllers in their own right, under their own policies. We may also disclose data to authorities when the law requires it.
5. International transfers
Some of these providers process data outside the European Economic Area, for example in the United States. In those cases the transfer relies on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on the standard contractual clauses approved by the Commission, with additional measures where needed. You can ask us for more information.
6. How long we keep it
| Data | Period |
|---|---|
| Your account, your progress and the scenarios you create | Until you delete the account. If you delete a language, its progress is deleted |
| Sign-in code and link | They expire after 10 minutes; the record is deleted within a day |
| Open sessions | They expire after 30 days without use; you can sign out at any time |
| Audio of your sessions | We don’t keep it: your device deletes it when the session ends |
| Recordings of a shared report or of the level test | 30 days, or until you stop sharing or delete the account, whichever comes first |
| The test result, the reports and what your listeners answered | Until you delete the language or the account |
| Audit IP addresses | The last 10; each for 90 days after its last use |
| Error reports | 90 days |
| Usage analytics | What is linked to your account is deleted when you delete it, or earlier if you object |
| Subscription data | Until you delete the account; the payment platform and the app stores keep their own records as the law requires |
7. Your rights
You can ask us for access to your data and a copy of it (portability), its rectification or erasure, the restriction of its processing, and you can object to processing based on our legitimate interest, such as analytics. Use the contact form; we may need to check that the account is yours (for example, from its email address). We reply within one month at the latest.
Many things you can do yourself, in Settings, in the app or on the web:
- Delete your account (or, if you use Lexemica without an email, your data): this deletes your progress, the scenarios you created, your reports and their answers, your devices and IP addresses, your analytics and your error reports. If you have Pro on the web, it is cancelled at that moment. A subscription bought in an app store isn’t cancelled when you delete the account: cancel it in the store.
- Delete the progress of a language.
- Stop sharing a report: the link stops working and its recordings are deleted.
- Sign out of other devices and change your display name.
If you believe we haven’t handled your data properly, you can lodge a complaint with the data protection authority of the country where you live, work or where the infringement took place. We’d appreciate it if you told us first, in case we can sort it out.
8. Children
Lexemica is not directed at children. To use it you must be at least 16, or the minimum age your country sets for consenting by yourself to the processing of your data by online services, if lower (never under 13). If we learn that an account belongs to someone below that age, we delete it. If you are a parent or guardian and believe your child has given us data, write to us.
9. Storage on your device and cookies
The website uses no third-party or advertising cookies. It keeps in your browser (in its local storage) what it needs to work:
- Necessary: your session and the device identifier; the theme you chose; a first-party cookie, “lx_locale”, with the language you choose in Settings (it lasts a year); the state of what you have in progress (for example, a test you started or a notice you closed); and, if you listen to a report, the anonymous listener identifier.
- Our own analytics: a pseudonymous visitor identifier, the analytics session and the events and error reports waiting to be sent.
To pay on the web you go to a page of the payment platform, which has its own cookies and policy.
The app keeps your session and the device identifier in the system’s secure storage (Keychain on iPhone, the keystore on Android), and in its private space the analytics and error queues and the temporary recordings of each session. The daily reminder is a local notification: we don’t use push notifications or third-party analytics or advertising SDKs.
10. Security
We encrypt communications (HTTPS), we don’t use passwords, we only store a hash of session credentials, and the links you share carry a random identifier that is hard to guess. We apply limits against abuse and give each provider only what it needs. No system is infallible: if we detect a breach that affects you, we will tell you as the law requires.
11. Changes to this policy
If we change this policy, we will update the date above. If the change is significant, we will tell you in the app or by email before it applies. The previous version is available on request.
Please also read the Terms of Use.