Who we are
Lexiboo is made by André Marcos Silva Boyd, an independent developer based in Spain, who is responsible for your data under the EU General Data Protection Regulation (GDPR). Contact: help@lexiboo.com.
Short version: we collect only what Lexiboo needs to work, we never sell your data, and there are no ads, trackers or analytics in the app.
What we collect and why
| Data | Why | Where it lives |
|---|---|---|
| Account: email address and name, from Sign in with Apple, Google or email sign-up | To create your account and keep your words with it | Our servers (Supabase) |
| Your vocabulary: saved words with their meanings, examples and notes, collections, review history and 7-day challenges | To back them up and bring them back on a new or reinstalled iPhone | Your iPhone, and our servers when you are signed in |
| Words you look up with Lexiboo's AI, and how many lookups you made each day | To write the meaning and to apply the daily allowance of your plan | Our servers; the word itself is also sent to OpenAI |
| Purchase details from Apple: product, transaction ID and expiry date | To unlock Premium on your account | Our servers |
| Search history, mistake statistics, streak and settings | To show your progress and pick what to review | Your iPhone only |
We never see your card details: payments are made through Apple. When you use Sign in with Apple you can hide your email; Apple then gives us a private relay address.
Processed only on your iPhone
- Microphone and speech recognition: used only while you practise pronunciation. The recording is checked on your iPhone and deleted right after; it is never sent to us.
- Apple Translation: example sentences translated on your device.
- Kindle import: the Kindle vocabulary file you choose is read on your iPhone. The words and quotes you import are saved like any other word.
- Reminders and widgets: created on your iPhone from your own data.
Who processes data for us
- Supabase: database and sign-in for Lexiboo accounts.
- OpenAI: writes the meaning of a word you look up. It receives the word and the language pair only, never your name, email or account.
- Apple: Sign in with Apple, the App Store and payments.
- Google: Sign in with Google, if you choose it.
These providers may process data outside the European Economic Area, for example in the United States. Where they do, the transfer is covered by the EU's standard contractual clauses or an equivalent safeguard. Meanings the AI writes are kept in a shared dictionary so the next person who looks up the same word gets an instant answer; that dictionary holds words and meanings only, with nothing that identifies you.
Legal basis
We process your data to provide the service you signed up for (GDPR article 6(1)(b)), and to keep it secure and prevent abuse such as exceeding AI limits (our legitimate interest, article 6(1)(f)). Our providers keep standard technical logs, such as IP address and time of a request, for security.
How long we keep it
We keep your account data until you delete your account. Profile & Settings → Delete account and data permanently deletes your account and everything stored for it on our servers, including your words, collections, reviews, challenges and lookup counts. Signing out keeps your backup so you can sign in again. Deleting the app removes the data stored on your iPhone.
Your rights
You can ask to access, correct, export or delete your data, or object to or restrict how we use it, by writing to help@lexiboo.com. If you are unhappy with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or the authority in your country.
Children
Lexiboo is not directed at children under 14. If you believe a child under 14 has created an account, write to us and we will delete it.
Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.