Privacy Policy

Last updated 11 October 2026

This policy explains what personal data Lexycraft collects, why, who else sees it, how long it is kept, and the choices and rights you have. It covers the Lexycraft web app, the iOS and Android apps, the browser extension, and the public pages on lexycraft.com.

Who we are

Lexycraft is a language-learning app. It is operated by Raphael Benhamou as an individual — there is no company — and “Lexycraft”, “we”, “us” and “our” in this policy mean him. He is the data controller for the personal data described here.

Postal address: Carrer de Sant Antoni Abat, 39, 08001 Barcelona, Spain. For anything in this policy, including a request to exercise your rights, write to privacy@lexycraft.com and we will reply within one month.

Lexycraft is a small independent product run by one person. We are not required to appoint a Data Protection Officer and we have not appointed one; the address above reaches the person who actually runs the service.

This policy explains what happens to your personal data. The agreement for using Lexycraft is separate: Terms of Service.

Information you give us

Your email address: Used to create your account, sign you in, and reach you about your account. If you sign in with Google or with Apple, we receive the email address linked to that sign-in — with Apple this may be a private relay address rather than your real one. We never receive or store your password: sign-in is handled by our authentication provider.
Your display name: When you sign in with Google or Apple we save the name those services return, and you can change it. It is shown to other people only if you choose to share a Pack — see “Pages you choose to make public”.
Your learning settings: The language you are learning, your translation language, your interface language, your practice preferences and the answers you give during onboarding. These are stored against your account so the app works the way you set it up.
Text, links and files you submit: You can paste text, submit a web address or a video link, upload a document or an image, type a theme for a vocabulary pack, import a word list, write replies in a Roleplay conversation, or answer a writing exercise. We treat all of it as potentially personal: you decide what to put in, and it may describe you or other people even though we never ask it to.
Messages you send us for support: If you contact us from the Help Center, we receive the topic you choose and the message you write, together with your account's email address so that we can reply to you. To help us look into a problem, the message also carries the kind of app you wrote from (web, iOS or Android), your interface language and the app version. What you write is up to you, so please include only what we need to help.
Voice recordings: Speaking is optional. If you use voice input, the recording is sent to us, converted to text, and discarded — we do not save the audio, and it is never written to our database or to file storage. Only the resulting text continues into the app, and you see it before it is used.

Some of what you submit is kept and some is not. The section on retention says which is which.

Information created as you use Lexycraft

Using the app produces data about your learning that is stored against your account. It is generated by Lexycraft rather than typed by you, but it is still personal data because it is tied to you:

your vocabulary library, including the words you saved and where each one came from
the stories, roleplays, exercises and vocabulary packs generated for you, and the audio generated for a story when you ask for it
your answers — the messages you write in a Roleplay, the sentences you write in a writing exercise together with the feedback on them, and which option you picked in a multiple-choice exercise
your progress: review scheduling, streaks, levels, session history and your learning calendar

Technical information

Running the service produces a limited amount of technical data. We keep this deliberately small.

Server records: Our servers record that a request happened — the method, the route it hit, and a status code. Requests are not logged with your email address, your name, or the content you submitted. Our hosting and network providers separately keep short-lived connection records that include IP addresses, as any web host does.
Error and performance reports: If something breaks we receive a diagnostic report through Sentry. It is configured not to collect personal information, request bodies, headers or cookies, and IP addresses are removed on arrival. On the web, a report may carry your account identifier so we can tell whether a fault affected one person or everyone; on iOS and Android it does not.
Product analytics: When something meaningful happens in your account — for example you finish a lesson or a training session, save vocabulary, or an activity fails — our server records a short usage event with our product-analytics provider. An event says what kind of thing happened and carries counts and categories: which kind of activity, how many words moved forward, which platform and app version, your learning language, and when it happened. It is tied to your account only by an internal identifier, never by your email or name. It never contains your words, definitions, texts, links, file names, stories, conversations, answers, searches or anything the AI wrote, and never your IP address or a device identifier. These events are sent only by our server: no Lexycraft app or the extension contains software that sends them, and they include no recording of your screen or sessions. (The web app's optional Microsoft Clarity analytics, which runs only with your consent, is separate and described under Cookies.) You can turn product analytics off at any time — in Settings → Privacy on the web, or Me → Learning preferences → Privacy in the mobile apps — and the choice applies to your whole account.
Abuse and fair-use controls: To stop the service being overused we count requests against a one-way cryptographic fingerprint of your account identifier, not against your IP address.
Device storage: The apps store your sign-in session and your local settings on your own device — in your browser, or in the operating system's secure keychain on mobile. Signing out or clearing the app's data removes it.

How we use your data, and on what legal basis

To provide Lexycraft — performance of our contract with you: Creating and securing your account, generating lessons and vocabulary from what you submit, saving your library and your progress, syncing across your devices, letting you share a Pack when you ask to, and answering you when you contact us for help.
To keep the service working and safe — our legitimate interests: Diagnosing errors, measuring performance, and preventing abuse and overuse. Our interest is in a service that stays up and is not degraded by misuse; we pursue it with the least data we can, which is why our error reports and server records exclude the content you write.
To understand whether Lexycraft helps you learn — our legitimate interests: Product analytics tells us whether new learners reach a first real lesson, whether people come back, whether vocabulary actually progresses, and which features fail, so we can fix and improve them. We can only learn that by measuring use across accounts and over time, and we do it with the minimum described above: our server sends a fixed list of event types with categories and counts, keyed to an internal identifier, and nothing you wrote. We do not use it for advertising, sell it, or use it to make decisions about you. You can object at any time by turning Product analytics off in the privacy settings described above: collection stops for your account straight away, on every device, and the analytics already held about you are deleted.
Optional analytics and diagnostics on the web — your consent: Microsoft Clarity and browser error reporting run only if you allow them. Neither loads until you choose, and you can change or withdraw either choice at any time.
To meet legal obligations — legal obligation: Responding to a valid legal request, and keeping the records we are required to keep.

We do not sell personal data, we do not use it for advertising, and we do not build advertising profiles. Accepting this policy is not itself the basis on which we process anything.

AI processing

Lexycraft uses AI to turn what you submit into learning material — extracting vocabulary from a text you paste, writing a story around your words, playing the other side of a Roleplay, grading a sentence you wrote, and turning a recording into text.

To do that we send the relevant content to the OpenAI API. That means text you submit, words from your library, the messages you write in a Roleplay, the answers you write in an exercise, and — if you use voice input — your recording. We do not send your email address, your name or your account identifier along with it: OpenAI receives the content and the instruction, not who you are.

OpenAI states that data sent through its API is not used to train its models unless the customer opts in, and we have not opted in. OpenAI keeps short-lived copies for abuse monitoring — up to 30 days for the text requests we make, and none for audio transcription. We have not asked OpenAI to store our requests beyond that.

We also do not use your content to train any model of our own.

Two other steps use specialist providers rather than OpenAI. When you ask for a story to be read aloud, the text of that story is sent to a speech provider to be turned into audio. When you upload an image, it is sent to a text-recognition provider to have its text read out of it. Each receives only the content needed for that one operation — nothing identifying you goes with it — and neither is asked to keep what it receives.

AI output can be wrong. Generated definitions, examples, stories and feedback are learning material, not statements of fact, and none of it produces a legal or similarly significant decision about you. Your review scheduling and level are calculated automatically from your own answers; they change what the app shows you next and nothing else.

Pages you choose to make public

You can share a Pack. Nothing is published until you do, and only then. When you share one, Lexycraft creates a page at a hard-to-guess address on lexycraft.com that anyone holding the link can open without signing in. That page shows the Pack's name, its words with their definitions and parts of speech, the language and level, and your display name as the creator.

These pages are not listed in search engines. You can stop sharing at any time, which takes the page down. Copies already made outside Lexycraft — a link preview cached by a messaging app, or a screenshot — are beyond our reach.

Cookies, analytics and diagnostics

The web app needs a small amount of browser storage to keep you signed in, carry a lesson you started between pages, and remember your interface choices and your privacy choices. That storage is necessary and is not used for advertising.

Two optional things run only with your consent: Microsoft Clarity, which measures how pages are used, and browser error reporting through Sentry. You are asked on your first visit, you can allow each one separately, and you can change your mind from Profile → Privacy → Cookie settings or from the sign-in page. Neither loads before you allow it.

Our Cookie Policy lists every technology individually, with what it does and how long it lasts: Cookie Policy

The public Pack pages set no cookies and use no browser storage at all.

Two things on our web pages are loaded straight from outside content-delivery providers rather than from us, which means those providers see your IP address and browser when the file is fetched: our typefaces, on both the web app and the public pages, and the example thumbnails on the Extract page. Neither is analytics and neither tracks you across sites.

The mobile apps use no cookies and contain no analytics software. They send crash and performance diagnostics, configured as described above. Product analytics is sent by our server rather than by any app or web page, sets nothing on your device, and is controlled by the privacy setting described under Technical information, not by your cookie choices.

Who else processes your data

We use a small number of third-party services to run Lexycraft. Most act as processors: they handle data on our instructions under a data processing agreement and are not permitted to use it for their own purposes. A few process limited information independently for one specific interaction, under their own terms. The list below says which is which.

We describe them by what they do rather than by company name, so that this policy stays accurate if we change supplier. What matters for your privacy is what each kind of provider receives, why, and where it goes.

Cloud hosting, database and storage providers: Run the Lexycraft server and hold your account, your library, your progress and your generated audio, and handle sign-in so that we never see your password. Your account data is stored in the European Union. Processors, on our instructions.
Background processing provider: Runs the background jobs that generate your lessons, which means it briefly handles the content those jobs work on. Processor, on our instructions.
Network, delivery and security providers: Serve and protect lexycraft.com and the web app and filter malicious traffic. They process technical connection information such as IP addresses and request metadata, and keep short-lived connection records. Processors, on our instructions.
OpenAI: The AI generation, grading and speech-to-text described above. Receives the content you submit and nothing that identifies you. Processes globally, including in the United States. Processor, on our instructions.
Content-processing providers: Perform one requested operation on content you supply: turning story text into speech, reading the text out of an image you upload, and fetching the transcript of a video when you give Extract a supported link. Each receives only what that operation needs — the text, the image, or the link — and not your account, your email or your device. The requests are made by our server rather than by your browser or phone. Processors, on our instructions.
Email delivery and communication providers: Deliver the messages you send us from the Help Center to our support mailbox, and host the mailbox where we read and answer them. They receive your message, your account email address and the app details that go with it. Processors, on our instructions.
Product analytics provider: Receives the usage events described under Technical information, from our server only — an internal account identifier with event categories and counts, never your email, name, IP address or content. Stores them in the European Union. Processor, on our instructions.
Microsoft Clarity: Optional web analytics, only with your consent.
Sentry: Error and performance diagnostics. Stored in Sentry's European Union region.
Content-delivery providers for our web pages: Serve our typefaces and some example images directly to your browser, which is why your browser contacts them rather than us. They receive your IP address and browser when it does, and nothing else about you. They act under their own terms rather than on our instructions.

Signing in with Google or with Apple involves those companies as independent controllers for the sign-in itself, under their own privacy policies rather than on our instructions.

International transfers

Your account, your content and your progress are stored in the European Union. Error diagnostics stay in Sentry's EU region, and product analytics in our analytics provider's EU region.

Some processing happens outside the EEA. OpenAI processes AI requests globally, including in the United States, and our network, analytics, content-processing and email providers operate global infrastructure. Messages you send us for support are delivered through a provider that stores them in the United States. Where personal data leaves the EEA it is transferred under the European Commission's Standard Contractual Clauses, included in those providers' data processing terms, or under an adequacy decision where one applies.

How long we keep things

Your account and everything in it: Kept while your account exists. Your library, packs, stories, roleplay conversations, exercise answers, progress and generated audio are kept so the product works — a vocabulary app that forgot your words would not be one. Deleting your account deletes all of it.
Text and files you submit for vocabulary extraction: The text is kept with the extraction job it produced, so the job can be retried and so you can see where a word came from. Uploaded files themselves are never stored on our servers: a document or image is read in memory, its text is taken, and the file is discarded when the request ends. On phones, the file you pick is copied into the app's own temporary storage on your device; it stays there, private to the app, until your phone clears that space or you uninstall Lexycraft.
Voice recordings: Not kept. Discarded as soon as the text has been produced.
Vocabulary pack themes and similar one-off prompts: Used to generate the result and not stored as a separate record.
Support messages: A message you send us is kept as an ordinary email in our support mailbox for as long as we need it to answer you and deal with any follow-up; we do not copy it into a separate support system. The provider that delivers it keeps its own copy for 30 days. You can ask us to delete your support messages at any time.
Server logs: Kept by our hosting provider for 7 days on our current plan.
Error and performance reports: Kept by Sentry for 30 days on our current plan.
Product analytics: Kept while your account exists and product analytics is on. Turning it off in Settings deletes the analytics already collected for your account, and so does deleting your account. Independently of that, our provider deletes any event older than 7 years.
Optional web analytics: Microsoft retains Clarity session playbacks for 30 days and aggregated click data for 9 months.
AI provider copies: OpenAI retains abuse-monitoring copies of text requests for up to 30 days, and none for audio transcription.

Deleting your account and your data

Our dedicated account-deletion page gives you the secure sign-in path and the fallback request route: account-deletion page

You can delete your Lexycraft account yourself, from inside the app. There is nothing to request and no one to ask.

In the mobile app: Me → Account → Delete account.
In the web app: Profile → Account → Delete account.

Deletion is immediate and permanent. It removes your sign-in identity, your profile and display name, your vocabulary library, your packs, your stories and roleplay conversations, your exercise answers, your progress and history, the audio files generated for you, and the product analytics held about your account. Any Pack you had shared stops being available at the same moment. We cannot restore a deleted account.

If you would rather ask us to delete your account than do it yourself — for example because you cannot sign in — email privacy@lexycraft.com from the address on the account. We will verify it is yours and delete it within one month.

If you signed in with Apple, deleting your account also revokes Lexycraft's access to your Apple account, as Apple requires. On iPhone we ask you to confirm with Apple first, then tell Apple to revoke it. When you delete from the web we cannot do that for you, so we delete everything and show you where to remove Lexycraft yourself in your Apple account settings.

Two things survive briefly and are outside our control at the moment of deletion: short-lived technical records held by our hosting, network and diagnostics providers, which age out on the schedules listed above, and abuse-monitoring copies at our AI provider, which expire within 30 days. Neither is used for anything else. We also keep a minimal record that a deletion happened, to prove we carried it out.

Messages you sent us for support are email correspondence rather than part of your account, so deleting your account does not remove them. Ask us at privacy@lexycraft.com and we will delete them too.

How we protect your data

Everything travels over encrypted connections (HTTPS/TLS). Data is stored on managed European infrastructure with encryption at rest. Sign-in and passwords are handled by our authentication provider, so we never hold your password. Every request is checked against the account it belongs to, and the database enforces that separately so one account cannot reach another's data. On mobile, your session is kept in the operating system's secure keychain. Our diagnostics are configured to exclude your content by default rather than to filter it afterwards.

No service can promise perfect security. If a breach affects your personal data and is likely to put you at risk, we will tell you and the supervisory authority as the law requires.

Your rights

Under the GDPR you have the right to:

get a copy of the personal data we hold about you
have inaccurate data corrected
have your data deleted
restrict how we use it
receive it in a portable, machine-readable form
object to processing we base on our legitimate interests
withdraw a consent you gave, at any time, without affecting what was lawful before

Much of this you can do directly in the app: change your settings, edit your display name, remove individual words or Packs, stop sharing a Pack, turn product analytics off, change your cookie choices, or delete your account outright. For anything else, write to privacy@lexycraft.com. We reply within one month and we do not charge for it.

If you are unhappy with how we handle your data you can complain to your national data protection authority. In Spain this is the Agencia Española de Protección de Datos (aepd.es).

Children

Lexycraft is not directed at children and we do not knowingly collect data from them. Our Terms of Service set a minimum age of 13 for a Lexycraft account. Under Spanish data-protection law, a person aged 14 or over may generally give their own consent to the processing of their personal data where consent is the legal basis; below that age a parent or guardian must give it. If you believe a child has an account, write to privacy@lexycraft.com and we will remove it.

Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we use your data, we will tell you in the app before it takes effect, and where a change needs your consent we will ask for it first.