Privacy Policy

Effective August 18, 2026. This is the same policy shown inside the app (Settings → Legal). If they ever differ, the in-app copy players accepted governs their use.

Overview

This policy describes what Lexi: Vocabulary Crosswords collects, how it is used, and the choices you have. The short version: no email, password, or real name is required; no advertising; no sale of personal data. Lexi's social features are public by design, and this policy tells you exactly which parts are visible to others.

Data we collect

• Account identifiers: an anonymous authentication token and an identifier derived from your device's iCloud account. We never see your Apple ID email or password.
• Profile data you provide: display name, chosen avatar, and optional bio and city.
• Learning and gameplay data: puzzle history, review schedules, streaks, achievements, statistics, and preferences.
• User content: profile comments and direct messages you send, and reports you submit.
• Purchase state: which subscriptions or entitlements are active, via Apple. We never receive your payment details.
• Device data in reports: bug and feedback reports include basic device model and OS version to help us fix problems.
• Push token: if you enable multiplayer invitations, a notification token for your device.

What other players can see

If you appear on the leaderboard or make your profile public, other users can see your display name, avatar, gameplay statistics, streaks, achievements, activity summary, presence (recently online), bio, and city if you entered one. Public profiles are also discoverable by name search. Comments you post on profiles are visible to viewers of that profile. Friend codes you share identify your account or a profile to whoever holds the code. You can make your profile private and disable direct messages in profile settings.

Direct messages

Direct messages are delivered through our database and are visible to you and the recipient in the app. They are not end-to-end encrypted, and our systems store them to deliver and display conversations; treat them accordingly and do not send sensitive personal information.

How we use data

To operate the game and its social features, sync your progress across your devices via iCloud and our database, maintain leaderboards, deliver messages and invitations, process referral rewards and entitlements, improve word quality from your reports, and protect the service from abuse. We do not use your data for third-party advertising, we do not sell it, and we do not use it to train AI models.

Where data lives

Lexi uses Apple iCloud/CloudKit (progress sync, identity), Apple StoreKit (purchases), and Google Firebase (database, file storage, cloud functions, anonymous authentication, push delivery) as service providers. Data is stored on their infrastructure, primarily in the United States, and is protected in transit by encryption.

Retention and deletion

Gameplay and profile data is kept while your account is active. Deleting a profile in the app withdraws its leaderboard entry, directory listing, and friend code. Old comments and messages may persist in conversations they were part of. To request deletion of all data associated with your account, contact lexidevsup@gmail.com from the device in question so we can locate your anonymous identifiers; we will delete server-side data within 30 days except where retention is legally required (for example, records of abuse reports).

Children

Lexi's online features are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 is using the online features, contact us and we will delete the associated data.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Exercise them by contacting lexidevsup@gmail.com. We do not discriminate for exercising privacy rights.

Security

We use industry-standard safeguards: encrypted transport, server-side security rules restricting reads and writes, and server-only storage for sensitive records like entitlements and reports. No system is perfectly secure; report suspected vulnerabilities to lexidevsup@gmail.com.

Changes to this policy

We will update this policy as Lexi evolves. Material changes are presented in-app for review before continued use. The effective date above reflects the latest revision.

Contact

Privacy questions or requests: lexidevsup@gmail.com.