Privacy Policy
This explains what LexiPack collects, why, who else sees it, how long it is kept, and how to get it back or deleted. It describes what the service actually does — where a section says we do not do something, that is a statement about the code, not an aspiration.
Who is responsible for your data
LexiPack is operated by Yevhenii Lypskyi, sole proprietor (Jednoosobowa Działalność Gospodarcza), NIP: 8971963461, registered in Poland (“we,” “us,” or “our”). We are the controller of the personal data described below.
You can write to that address in English or Polish about anything on this page, including to exercise any of the rights below.
What we collect
- Account details — your email address, an optional display name, and either a hashed password or the fact that you signed in with Google. We never see your Google password.
- Your study content — the languages, packs, words and translations you create or import, including anything you paste in.
- Study activity — each review you submit: the rating, what you typed or selected, how long you took, and the resulting schedule. This is what makes spaced repetition work; without it the app cannot decide what to show you next.
- Streaks and XP — a running count of study days and points, plus the calendar date of your last session.
- Subscription status — which plan you are on and when it changed. Card details are never sent to us; see Payments below.
- Technical logs — errors and performance samples, used to find bugs.
Why we are allowed to use it
Generating card content with AI
When you ask LexiPack to generate card content, we send the words you submitted, the language pair, and any hints you provided to OpenAI. We do not send your name, your email, or any other account detail with them.
Do not paste sensitive personal information into your word lists. AI output can be inaccurate or inappropriate — review it before relying on it or publishing a pack.
OpenAI processes this in the United States. Transfers rely on the safeguards in OpenAI's data processing terms. OpenAI states that data submitted through its API is not used to train its models; we rely on that commitment rather than on our own inspection of their systems.
Cookies and tracking
One cookie: the one that keeps you signed in. No advertising, no tracking pixels, and no session recording.
We use Plausible to see aggregate traffic — how many people visit and roughly what they do — chosen specifically because it sets no cookie and does not build a profile of you individually: no cross-site tracking, no fingerprinting, nothing that identifies your device across visits.
Because nothing here is optional or non-essential, there is no consent banner — there is nothing to consent to. If that ever changes we will ask first, and you will be able to say no as easily as yes.
Our mobile app stores your login token in the device keychain and keeps a local copy of your packs so you can study offline. That data stays on your device.
Who else sees your data
We do not sell your data and we do not share it for advertising. We use these service providers to run LexiPack:
Hosting and the database are in Frankfurt, so your account and study data stay in the EU in normal operation. The AI feature described above is the one routine transfer outside it.
Packs you choose to share
Sharing is entirely opt-in and comes in two separate steps, because they expose your pack to very different audiences:
- A share link means anyone who has the URL can view that pack. It is not listed anywhere and is not indexed by search engines.
- Publishing to the public library is a second, separate choice that lists the pack for anyone to find. Turning on a share link never publishes a pack by itself.
If someone saves a copy of your shared pack, that copy is theirs. Unsharing or deleting yours stops further updates reaching them, but does not delete what they already saved — the same way an emailed document stays with the recipient.
Payments
We never receive or store your card number. On the web, Paddle is the seller of record and handles the payment and applicable tax. On iOS and Android, Apple or Google is the seller. We receive only the resulting subscription status.
How long we keep it
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. We answer within one month.
Write to support@lexipack.app. If you are not satisfied with our answer you can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or to the authority where you live.
Age
LexiPack is not for children under 16. If you believe someone younger has an account, tell us and we will remove it.
Changes
If we change this policy in a way that materially affects you, we will tell you by email or in the app before it takes effect.
Last updated 26 July 2026.