Lexemica

Lexemica

Privacy Policy

This policy explains how Lexemica, the app for learning languages by speaking, on iPhone, Android and the web (lexemica.com), processes your personal data. It applies to the app, the website and the links you share from them.

In short

  • Your voice is transcribed in real time and we don’t keep the audio, except the recordings you choose to share and those from the level test at the start, which are deleted after 30 days.
  • You sign in with your email, without a password, and we only use it for that: we don’t send you marketing.
  • We don’t sell your data, and there are no ads or third-party trackers. We measure usage with our own analytics, which doesn’t keep your IP address.
  • You can delete your account and your data at any time from Settings, in the app or on the web.
On this page
  1. 1. Who is responsible
  2. 2. What data we process
  3. 3. Why we use it and on what legal basis
  4. 4. Who we share it with
  5. 5. International transfers
  6. 6. How long we keep it
  7. 7. Your rights
  8. 8. Children
  9. 9. Storage on your device and cookies
  10. 10. Security
  11. 11. Changes to this policy

1. Who is responsible

Lexemica is a service of Amberwake, operated by Mario Martinez, who is the controller of your personal data.

For any privacy matter, use the Amberwake contact form, mentioning “Lexemica” and “Privacy” in your message.

2. What data we process

Your account

  • When you start, an account without an email is created and tied to your device: an identifier generated by the app or the browser, your language, your time zone and the languages you study. We don’t ask for your real name.
  • To take the level test at the start, keep your progress or use it on other devices, you add your email. You sign in with a 6-digit code or a link we send you, without a password. The code isn’t stored: it expires after 10 minutes and the record of the email is deleted within a day.
  • If you share a report, you choose a display name (up to 40 characters), which you can change in Settings.

Your voice

  • When you practise, the microphone audio goes directly from your device to a speech recognition provider, which transcribes it in real time. Our servers neither receive nor store it.
  • The app scores your answer from the recognised text. From your sessions we keep the outcome (the score of each attempt and your progress), not the audio or the recognised text.
  • When an answer doesn’t match the expected one, we may send the recognised text, together with the expected sentence, to an AI service that judges whether it is another correct way to say it. We don’t keep that text.
  • During a session, the app or the browser keeps your attempts so you can listen to yourself, and deletes them when it ends.
  • The same applies to dictation: if you dictate the description of a scenario, it is transcribed the same way.

What you share by link

  • Shared reports. At the end of a scenario or a review you can share a report: after telling you, we upload your recordings from that practice to our servers. Anyone with the link can listen to them, see your display name and the language, type what they understand and rate your pronunciation.
  • The level test at the start. When you finish it, we keep your first-attempt recordings, the recognised text, your answers to the questions (for example, the level you think you have) and the result, to show it to you and so you can share it. It is only public if you share its link.
  • Links expire after 30 days; then, or earlier if you stop sharing, the recordings are deleted. The result and what your listeners answered stay in your account so you can see what was understood.
  • Listeners don’t need an account: their browser keeps an anonymous identifier to remember their answers. From a listener we keep that identifier, what they type, whether it was right and their stars; not their name or IP address.
  • These pages are not shown in search engines.

Scenarios created with AI

  • With Pro you can create a scenario by describing a situation. We keep what you write (up to 500 characters), the generated scenario and the status of the generation.
  • To generate it, we send your description to a generative AI provider; the resulting dialogue is turned into audio by a speech synthesis service and illustrated with a generated image. It is private content of your account: its audio and images are stored under a random name and aren’t linked from anywhere.
  • Don’t write personal data about yourself or others in the description: it isn’t needed and the generation may reject it.

Your progress

The scenarios you do and save, what you learn and the state of its review (when it is due and how it went), your streak, your level and the languages you study. This is what lets the review ask you just before you forget.

Devices and IP addresses

  • So you can see and sign out of open sessions (Settings › Devices), we keep for each device its platform, app version, operating system, model or browser and an approximate location (country, region and city).
  • For security we keep your last 10 IP addresses, and each one is deleted after 90 days without use.
  • We don’t use fingerprinting: a device is an installation of the app or a browser.

App usage and errors

  • Our own analytics: we record usage events (for example, that you start or finish a session or open a screen) with a pseudonymous identifier, the platform, the version and the language. We work out the approximate location (country, region, city) on our servers from the IP address, without storing the IP in analytics. It doesn’t include your email, your name, your voice or what you say. We don’t use third-party analytics tools.
  • Error reports: if something fails, the app or the website sends a technical report (the error, the screen, the device, the version and your account identifier), without emails, names, transcripts or IP addresses.

Payments

If you subscribe to Pro, the payment is handled by the payment platform (on the web) or your app store (in the app). We never see or store your card details: only the customer or purchase identifier, the plan, its status and its dates.

Emails

We only send you the email with the code and the link to sign in. We don’t send newsletters or marketing.

3. Why we use it and on what legal basis

PurposeLegal basis
Providing the service: your account, signing in with your email, transcribing and scoring what you say, your progress and review, the scenarios you create and the reports you sharePerformance of the contract (the terms of use)
Managing your Pro subscriptionPerformance of the contract
Protecting your account and the service: devices, audit IP addresses, abuse limitsLegitimate interest in security
Understanding how Lexemica is used and fixing errors (our own analytics and error reports)Legitimate interest in improving the product, with pseudonymous data and no third parties. You can object (see Your rights)
Complying with legal obligations (for example, tax rules or requests from authorities)Legal obligation

We don’t make automated decisions with legal effects on you or build commercial profiles.

4. Who we share it with

We don’t sell your data or share it with third parties for advertising. To provide the service we work with providers that process it on our behalf, under contract and only for what we ask of them:

  • Speech recognition: the microphone audio while you speak, to transcribe it.
  • Generative AI: the description of the scenarios you create and, when judging an answer, the recognised text and the expected sentence.
  • Speech synthesis: the text of the scenarios you create, to generate their audio.
  • Payments: on the web, the payment platform that charges for Pro; it acts as the seller (merchant of record) and takes care of the charge and the taxes. It receives your email and the payment details you give it.
  • App stores: purchases in the app are handled by the store you buy from, under its own terms; it tells us about the purchase and its status.
  • Hosting, storage and CDN: the servers and databases of the API, the storage of media and the network that serves the website.
  • Email delivery: your address and the code or link to sign in.

The payment platform and the app stores also process payment data as controllers in their own right, under their own policies. We may also disclose data to authorities when the law requires it.

5. International transfers

Some of these providers process data outside the European Economic Area, for example in the United States. In those cases the transfer relies on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or on the standard contractual clauses approved by the Commission, with additional measures where needed. You can ask us for more information.

6. How long we keep it

DataPeriod
Your account, your progress and the scenarios you createUntil you delete the account. If you delete a language, its progress is deleted
Sign-in code and linkThey expire after 10 minutes; the record is deleted within a day
Open sessionsThey expire after 30 days without use; you can sign out at any time
Audio of your sessionsWe don’t keep it: your device deletes it when the session ends
Recordings of a shared report or of the level test30 days, or until you stop sharing or delete the account, whichever comes first
The test result, the reports and what your listeners answeredUntil you delete the language or the account
Audit IP addressesThe last 10; each for 90 days after its last use
Error reports90 days
Usage analyticsWhat is linked to your account is deleted when you delete it, or earlier if you object
Subscription dataUntil you delete the account; the payment platform and the app stores keep their own records as the law requires

7. Your rights

You can ask us for access to your data and a copy of it (portability), its rectification or erasure, the restriction of its processing, and you can object to processing based on our legitimate interest, such as analytics. Use the contact form; we may need to check that the account is yours (for example, from its email address). We reply within one month at the latest.

Many things you can do yourself, in Settings, in the app or on the web:

  • Delete your account (or, if you use Lexemica without an email, your data): this deletes your progress, the scenarios you created, your reports and their answers, your devices and IP addresses, your analytics and your error reports. If you have Pro on the web, it is cancelled at that moment. A subscription bought in an app store isn’t cancelled when you delete the account: cancel it in the store.
  • Delete the progress of a language.
  • Stop sharing a report: the link stops working and its recordings are deleted.
  • Sign out of other devices and change your display name.

If you believe we haven’t handled your data properly, you can lodge a complaint with the data protection authority of the country where you live, work or where the infringement took place. We’d appreciate it if you told us first, in case we can sort it out.

8. Children

Lexemica is not directed at children. To use it you must be at least 16, or the minimum age your country sets for consenting by yourself to the processing of your data by online services, if lower (never under 13). If we learn that an account belongs to someone below that age, we delete it. If you are a parent or guardian and believe your child has given us data, write to us.

9. Storage on your device and cookies

The website uses no third-party or advertising cookies. It keeps in your browser (in its local storage) what it needs to work:

  • Necessary: your session and the device identifier; the theme you chose; a first-party cookie, “lx_locale”, with the language you choose in Settings (it lasts a year); the state of what you have in progress (for example, a test you started or a notice you closed); and, if you listen to a report, the anonymous listener identifier.
  • Our own analytics: a pseudonymous visitor identifier, the analytics session and the events and error reports waiting to be sent.

To pay on the web you go to a page of the payment platform, which has its own cookies and policy.

The app keeps your session and the device identifier in the system’s secure storage (Keychain on iPhone, the keystore on Android), and in its private space the analytics and error queues and the temporary recordings of each session. The daily reminder is a local notification: we don’t use push notifications or third-party analytics or advertising SDKs.

10. Security

We encrypt communications (HTTPS), we don’t use passwords, we only store a hash of session credentials, and the links you share carry a random identifier that is hard to guess. We apply limits against abuse and give each provider only what it needs. No system is infallible: if we detect a breach that affects you, we will tell you as the law requires.

11. Changes to this policy

If we change this policy, we will update the date above. If the change is significant, we will tell you in the app or by email before it applies. The previous version is available on request.

Please also read the Terms of Use.