LexiLex Privacy Policy

Effective Date: 05/20/2025

1. General Information

1.1. This Privacy Policy ("Policy") explains how ILYA KHARYN ("Developer"), residing in Poland, collects, uses, and protects personal data in the LexiLex mobile application ("Application").

1.2. This Policy complies with the EU General Data Protection Regulation (GDPR) and applicable local laws.

1.3. The English version of this Policy prevails. Translated versions are for convenience only.

2. Data Controller

• Developer: ILYA KHARYN
• Location: Poland
• Trademark: Qellum
• Contact: lexilex.qellum@gmail.com

3. Data We Collect

3.1. Required Data:

• Email (for email registration).
• Google/Apple identifiers (for social login).
• User texts and translations.
• Account creation date and last activity.

3.2. Automatically Collected Data:

• Device info (model, OS, app version).
• Technical logs, error data, crash reports.
• Usage metadata (session time, feature usage frequency).

3.3. Audio Data:

• Voice recordings for speech-to-text, processed on Hetzner servers (Germany).
• Deleted immediately after text conversion.

3.4. Images:

• Photos for text recognition (OCR), processed on Hetzner servers.
• Deleted immediately after text extraction.

3.5. Not Collected:

• Geolocation.
• Contacts.
• Text content is not sent to analytics services.

4. Purposes of Data Processing

4.1. Service Provision:

• Account authentication.
• Speech-to-text and OCR processing.
• Translation and analysis via Claude API.
• Phrase vocalization via Google TTS.
• Saving user content.

4.2. Improvement:

• Usage analysis via Firebase and Google Analytics.
• Fixing errors and crashes.
• Technical support.

5. Legal Grounds

• Contract: To provide Application services.
• Consent: For analytics and non-essential processing, obtained during registration or in-app settings.
• Legitimate Interests: For security and operational stability.

6. Data Transfers

6.1. Google LLC (USA):

• Firebase Authentication, Analytics, and Google TTS (processes text for vocalization, no storage).
• Protected by Standard Contractual Clauses.

6.2. Anthropic (USA):

• Claude API for translation and analysis (text only).
• Protected by Standard Contractual Clauses.

6.3. Hetzner (Germany):

• Server hosting, GDPR-compliant.

7. Data Storage

7.1. Location: Hetzner servers, Germany.

7.2. Retention:

• User data: Stored until deleted by user or after 24 months of inactivity, unless legally required.
• Technical logs: Up to 24 months.
• Analytics data: Per Google’s policy.
• Audio/images: Deleted immediately after processing.

8. Your Rights (GDPR)

8.1. Access, rectify, erase, restrict, or port your data.

8.2. Object to processing or withdraw consent at any time.

8.3. California residents (CCPA): Right to know, delete, and opt out of data sales (we do not sell data).

8.4. Exercise rights via lexilex.qellum@gmail.com.

9. Data Security

9.1. We use:

• Encryption (HTTPS/TLS).
• Server access controls.
• Regular security updates.

9.2. Security breaches will be reported to users within 72 hours.

10. Cookies and Analytics

10.1. Application:

• Uses local storage for functionality.
• Firebase and Google Analytics for usage analysis.

10.2. Website:

• Google Analytics cookies for functionality.

11. Children

11.1. The Application is for users 16 and older. We do not knowingly collect data from users under 16.

12. Changes to the Policy

12.1. Users are notified of changes via in-app messages or email.

12.2. Significant changes require renewed consent.

13. Contacts

For data-related questions:

• Email: lexilex.qellum@gmail.com
• Response: Within 30 days

14. Supervisory Authority

For complaints in Poland, contact the Personal Data Protection Office (UODO) or your local data protection authority.

Trademark: Qellum
Last updated: 05/20/2025