Privacy Policy
Last updated: June 2026
At LexiFr, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website, newsletter, and mobile application. This policy explains what we collect, why we collect it, and how to contact us about your data.
Data controller. LexiFr is the controller of personal data collected through the LexiFr website, newsletter, and LexiFr application. You can contact the controller at [email protected].
1. Information We Collect
To provide and improve our service, we collect the following types of information:
- Newsletter email: Your email address if you join the newsletter.
- Account Information: Your email address when you create an account, including sign-in provider information if you choose Google or Apple sign-in.
- Learning Data: Your profile level, onboarding choices, vocabulary progress, and practice history.
- Subscription Data: Your subscription status and tier if you choose a paid plan.
- Usage Analytics: Optional website analytics after consent, and app analytics to understand how the service is used.
- Technical Data: Crash reports, error diagnostics, and notification permission or delivery data if you enable notifications, to maintain app stability and deliver requested reminders.
2. How We Use Your Information
We use the collected data for the following essential purposes:
- Account Access & Sync: To authenticate your account and provide cloud sync for your progress when online.
- Learning Experience: To track your learning progress, preserve review history, and optimize the spaced repetition algorithm.
- Premium Features: To verify premium access and manage subscriptions.
- Service Improvement: To analyze app usage, fix bugs, and enhance the overall LexiFr experience.
- Notifications: To send practice reminders only if you enable notifications on your device.
3. Newsletter Emails
If you join the LexiFr newsletter, we process your email address to send vocabulary notes, product updates, and related editorial emails.
LexiFr is the data controller for newsletter subscriber data. MailerLite acts as our email marketing provider and data processor, processing subscriber data on our behalf for signup forms, subscriber management, automations, and email delivery.
You can unsubscribe at any time using the unsubscribe link included in every email. You can also contact [email protected] to request access to, correction of, or deletion of your newsletter data.
4. Microphone and Speech Recognition
LexiFr features Shadowing and oral practice modes, which require microphone access when you choose to use them. LexiFr does not store audio files on LexiFr servers. Speech recognition may be processed by native platform services (such as Apple Speech or Google Speech Recognition) depending on the user's device and operating system settings. Those native services have their own privacy and data-handling policies, which we encourage you to review on your device.
5. Third-Party Services
We work with trusted third-party providers to operate LexiFr. These services have their own privacy policies regarding how they handle data:
- Supabase: Used for secure authentication, database hosting, and data synchronization.
- MailerLite: Used for newsletter signup forms, subscriber management, email automations, and email delivery.
- PostHog: Used as a privacy-conscious website analytics tool to understand which pages and articles are useful and where readers drop off. PostHog is loaded only after analytics consent. Hosted on PostHog Cloud EU.
- Google Analytics 4: Optional website analytics, loaded only after consent.
- Firebase Analytics: Used to collect anonymous usage and crash data to help us improve the app.
- RevenueCat: May be used to securely manage and validate subscription status.
- Mobile marketplace billing: The relevant mobile marketplace may be used for billing and payments. We do not have access to your payment details.
- Stripe: Used to process payments and manage subscriptions for LexiFr Schools (organization/school plans). Stripe handles your payment details directly; we do not store full card data. Personal data such as billing email and name may be processed by Stripe to operate the subscription.
- Resend: Used to send transactional LexiFr Schools invitation emails on behalf of a teacher or school. Resend processes the recipient email address for the purpose of delivering the invitation.
MailerLite provides data processing terms for its customers. You can review MailerLite's privacy and data processing information on MailerLite's privacy policy.
6. Cookies and Analytics
The website uses strictly necessary local storage to remember your analytics consent choice. Optional analytics tools (PostHog and Google Analytics, when configured) load only after you accept analytics in the consent banner.
PostHog. When enabled, PostHog records anonymous page views and a small set of explicit events (such as which page or article was opened, scroll depth on long articles, FAQ openings, newsletter submit clicks). LexiFr does not enable autocapture, session recording, rage-click tracking, or input-value capture. The email address you type into the newsletter form is never sent to PostHog. PostHog data for LexiFr is hosted on PostHog Cloud EU.
Google Analytics 4. When enabled, Google Analytics records aggregated, anonymized usage. IP anonymization is on. Analytics events are sent only after you accept analytics.
You can change your choice by clearing your browser storage for this site, which will show the consent banner again on your next visit.
MailerLite newsletter forms process the email address you submit through the form for newsletter signup, subscriber management, automations, and email delivery.
LexiFr does not sell personal data. The app is built without advertising, and the website does not use advertising tracking.
En français — Cookies et consentement
Le site utilise un stockage local strictement nécessaire pour mémoriser votre choix de consentement aux outils d'analyse. Les outils d'analyse optionnels (PostHog et Google Analytics, lorsqu'ils sont configurés) ne se chargent qu'après acceptation des outils d'analyse dans la bannière de consentement.
PostHog. Lorsqu'il est activé, PostHog enregistre des vues de page anonymes et un petit ensemble d'événements explicites (par exemple, quelle page ou quel article a été ouvert, la profondeur de défilement sur les articles longs, l'ouverture des FAQ, les clics de soumission de la newsletter). LexiFr n'active ni la capture automatique (« autocapture »), ni l'enregistrement de session, ni le suivi des clics de frustration, ni la capture des valeurs saisies. L'adresse e-mail que vous saisissez dans le formulaire de newsletter n'est jamais transmise à PostHog. Les données PostHog de LexiFr sont hébergées sur PostHog Cloud EU.
Google Analytics 4. Lorsqu'il est activé, Google Analytics enregistre une utilisation agrégée et anonymisée. L'anonymisation de l'adresse IP est activée. Les événements d'analyse ne sont envoyés qu'après acceptation des outils d'analyse.
Vous pouvez modifier votre choix en effaçant le stockage de votre navigateur pour ce site, ce qui affichera à nouveau la bannière de consentement lors de votre prochaine visite.
Les formulaires de newsletter MailerLite traitent l'adresse e-mail que vous soumettez via le formulaire aux fins d'inscription à la newsletter, de gestion des abonnés, d'automatisations et d'envoi d'e-mails.
LexiFr ne vend aucune donnée personnelle. L'application est conçue sans publicité, et le site n'utilise pas de suivi publicitaire.
7. Children's Privacy
LexiFr is not intended for children under 13. In the European Union, users under 16 should use LexiFr only with parental consent. We do not knowingly collect personal information from children under these ages without verified parental consent.
Institutional enrolment
When a school uses LexiFr Schools, a staff member enters the student’s email address and sends an invitation. The student must then accept the invitation from their own LexiFr account: the school does not automatically create a student account, and a student who does not accept an invitation has no learning data associated with the school. LexiFr does not collect parental consent in place of the school or verify the age of invited students; the age conditions above continue to apply to every user.
En français — Confidentialité des mineurs
LexiFr n'est pas destiné aux enfants de moins de 13 ans. Dans l'Union européenne, les utilisateurs de moins de 16 ans ne doivent utiliser LexiFr qu'avec le consentement parental. Nous ne collectons pas sciemment d'informations personnelles auprès d'enfants n'ayant pas atteint ces âges sans consentement parental vérifié.
Inscription par un établissement. Lorsqu'une école utilise LexiFr Schools, c'est un membre du personnel de l'établissement qui saisit l'adresse e-mail de l'élève et lui envoie une invitation. L'élève doit ensuite accepter cette invitation depuis son propre compte LexiFr : aucun compte élève n'est créé automatiquement par l'école, et l'élève qui n'accepte pas l'invitation n'a aucune donnée d'apprentissage associée à l'établissement. LexiFr ne recueille pas lui-même le consentement parental à la place de l'établissement et ne vérifie pas l'âge des élèves invités : les conditions d'âge ci-dessus restent applicables à chaque utilisateur.
8. Lawful Bases for Processing
Where the GDPR or equivalent laws apply, LexiFr relies on the following lawful bases:
- Consent for newsletter subscriptions and optional analytics cookies.
- Performance of a contract for account creation, learning progress, and subscription management.
- Legitimate interests for service improvement, crash diagnostics, and protecting LexiFr against fraud and abuse, balanced against your rights.
- Legal obligation where applicable, including responding to lawful requests and tax or accounting requirements.
9. Data Retention
LexiFr retains personal data only for as long as necessary for the purposes described in this policy:
- Newsletter email addresses are retained for as long as the subscriber is on the list. You can unsubscribe at any time, after which your email is removed within a reasonable period.
- Account and learning data are retained while your account is active and for a limited period afterwards in case you re-open the account, unless you request deletion.
- Crash and analytics data are retained according to the providers' standard retention windows.
You can request earlier deletion at any time at [email protected].
En français — Durée de conservation des données
LexiFr ne conserve les données personnelles que le temps nécessaire aux finalités décrites dans la présente politique :
- Les adresses e-mail de newsletter sont conservées tant que l'abonné figure sur la liste. Vous pouvez vous désabonner à tout moment ; votre e-mail est ensuite supprimé dans un délai raisonnable.
- Les données de compte et d'apprentissage sont conservées tant que votre compte est actif, puis pendant une durée limitée par la suite au cas où vous rouvririez le compte, sauf si vous demandez leur suppression.
- Les données de plantage (« crash ») et d'analyse sont conservées selon les délais de conservation standards des prestataires concernés.
Vous pouvez demander une suppression anticipée à tout moment à [email protected].
10. International Data Transfers
Some of the third-party providers used by LexiFr (including MailerLite, Supabase, Firebase, and RevenueCat) may process personal data outside the European Economic Area. When that happens, LexiFr relies on appropriate safeguards, including providers' Standard Contractual Clauses and equivalent transfer mechanisms, to keep your data protected.
11. Your Data Rights
You have the right to control your personal data. Under applicable privacy laws, including the GDPR, you have the right to:
- Access the personal data LexiFr holds about you.
- Request correction of inaccurate or incomplete data.
- Request the deletion of your data and, once LexiFr is available, your account.
- Restrict or object to certain processing.
- Request portability of the data you provided to LexiFr.
- Withdraw consent for newsletter or analytics processing at any time.
To exercise any of these rights, contact [email protected]. You can also delete your account directly in the app settings.
12. Right to Lodge a Complaint
If you believe your personal data has not been handled in accordance with applicable privacy law, you have the right to lodge a complaint with your local data protection authority. We would also appreciate the opportunity to address your concerns directly. You can reach us at [email protected].
13. Changes to This Policy
This policy may be updated over time as LexiFr evolves and as legal requirements change. Significant updates will be reflected in the "Last updated" date at the top of this page.