Privacy policy

This policy explains which personal data Lexoverse processes, why, and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

[Company name GmbH], [Street and number], [Postal code] [City], Germany
E-mail: [contact e-mail]

2. Data we process and why

Account

E-mail address, password (stored only as a hash), username, name, profile photo or emoji, short bio, native language, time zone. Purpose: providing your account (Art. 6 (1) (b) GDPR).

Learning

Languages and levels, answers, XP, streaks, study time, flashcard progress, saved questions and your word list. Purpose: your learning path, practice and progress (Art. 6 (1) (b) GDPR). Your weekly XP, username and achievements can be seen by other users on leaderboards and your profile.

Community

Posts, articles, comments, likes, follows, saved posts, community memberships and messages between friends or with teachers. Public posts and profiles are visible to other users; messages only to the people in the conversation (Art. 6 (1) (b) GDPR).

Lessons with teachers

Bookings (time, teacher, topic, price, status), lesson notes, homework and files you hand in, the shared lesson board and reviews. Video lessons run through Daily (see section 3) and are not recorded unless both people agree.

Recordings and AI lesson notes

If both you and your teacher agree in the call, the lesson is recorded and transcribed. From the transcript an AI creates notes (topic, summary, new words, corrections) and adds the new words to the learner's word list. Legal basis: your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time in the call; the recording then stops. Recordings and notes are only available to the two people of the lesson.

Payments and wallet

Balance, top-ups, gift codes, purchases of lessons, packages, gems, materials and Pro (Art. 6 (1) (b) and (c) GDPR, as tax law requires us to keep records). Card and bank payments will be processed by Stripe once available; we will update this policy then.

Teacher applications and materials

Details of your application, your CV and certificates, your lesson profile, availability and the materials you upload or sell. Purpose: reviewing applications and running the teacher marketplace (Art. 6 (1) (b) GDPR).

AI features

Learning content (lessons, quizzes, flashcards, reading and speaking units) is generated by an AI model. To create AI lesson notes, the lesson transcript is sent to the AI provider. We do not use your data to train AI models.

Technical data

When you use Lexoverse, our hosting providers process your IP address, browser and time of access in server logs to keep the service secure and working (Art. 6 (1) (f) GDPR).

Reports

When you report content, we store the report (what, why, your details text) and who sent it, to review it and tell you the outcome (Art. 6 (1) (c) GDPR with the EU Digital Services Act). The author of the content is not told who reported it.

3. Service providers

We use the following processors under data processing agreements (Art. 28 GDPR):

• Supabase (database, sign-in, file storage). Data is stored in the EU (Ireland).
• Vercel (hosting of the website). Server functions run in the EU (Dublin); Vercel Inc. is based in the USA.
• Daily.co (video lessons, recordings, transcription). Transcription is processed in the EU; Daily is based in the USA.
• Groq (AI model for learning content and lesson notes), USA.

Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses (Art. 45, 46 GDPR).

4. Cookies

We only use cookies that are needed for Lexoverse to work: your sign-in session, your language setting, an invite (referral) code when you follow an invite link, and display preferences. We do not use tracking or advertising cookies, so we do not ask for cookie consent (§ 25 (2) TDDDG).

5. How long we keep data

We keep your data while you have an account. When your account is deleted (Settings → Delete my account, or write to [contact e-mail]), we delete or anonymise your data, except where the law requires us to keep it (for example invoices and payment records for up to 10 years). Recordings are kept until you ask us to delete them or the account is deleted.

6. Your rights

• Access to your data (Art. 15 GDPR)
• Correction (Art. 16) and deletion (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consent at any time, for the future (Art. 7 (3))

You can download a copy of your data at any time under Settings → Download my data, and delete your account under Settings → Delete my account. Write to [contact e-mail] to use these rights. You can also complain to a data protection authority, for example [Data protection authority of your federal state, e.g. Berliner Beauftragte für Datenschutz und Informationsfreiheit].

7. Age

Lexoverse is meant for people aged 16 and over. Younger learners may only use it with the consent of a parent or guardian.

8. Changes

We update this policy when Lexoverse changes. The current version is always on this page. See also our terms of use.