Privacy policy

Who is responsible

The controller of your data in the Lexicosmo app and on this site is Marc Ramirez Sebastia, an individual trading as Perseida Labs (tax ID 78221901M, C/ Misteri 20 2B, 07300 Inca). For anything about privacy, write to support@lexicosmo.com.

What data we handle

• Your email address, required to have an account.
• Your pilot name, optional, or the name Google or Apple gives us if you sign in with them.
• Identifiers: your account id, your pilot code and, if you sign in with them, your Google or Apple account id.
• The books you upload (PDF, EPUB or text), if you create a course from one.
• Your course ideas, your written answers and the words you save.
• Your activity: lessons done, answers, scores, light-years, streak and league.
• Your astronaut, your crew friends and cheers.
• Your device’s notification identifier (FCM), only if you turn notifications on.

Your password is stored only as a hash. While you use the service, the server sees your IP address and uses it to limit sign-in attempts and other abuse.

The app has no analytics, crash reporting, advertising or tracking, and we do not sell your data.

Why, and on what legal basis

• Providing the service (account, courses, reviews, crew and league): performance of a contract, GDPR article 6.1.b.
• Sending notifications to your phone: your consent, article 6.1.a. You can withdraw it at any time in Settings or on your device.
• Protecting the service and handling abuse reports: legitimate interest, article 6.1.f.

What other pilots see

Your crew friends see your pilot name, your astronaut and your activity. In the weekly league, pilots you don’t know see your pilot name, your astronaut and your light-years for the week; you can leave the league in Settings. Anyone with your pilot code can send you a request, but sees nothing of yours until you accept.

Who else handles your data

These providers work for us as processors, only to provide the service:

• Anthropic writes lessons and marks writing: it receives the text of your books, your course ideas and your written answers.
• Microsoft Azure or DeepL translate words and text: they receive what needs translating.
• Google Firebase delivers notifications: it receives the notification identifier and the notification.
• Google and Apple confirm your identity if you sign in with them.
• Amazon Web Services hosts the server and the database.
• Amazon Web Services stores the files you upload.
• Zoho sends account emails.

Some of them are outside the European Economic Area. In those cases, the transfer relies on a European Commission adequacy decision or on standard contractual clauses.

How long we keep it

As long as you have the account. When you delete it, everything goes at once and for good (what is deleted and how). Backups keep the data until they rotate, in 30 days. We keep the deleted account’s internal id and the date for 30 days, to tell your other devices. Password links expire after 1 hour.

Your rights

You can ask for access to your data, its rectification, erasure or portability, restrict its processing and object to it, by writing to support@lexicosmo.com from your account’s address. If you think we have mishandled it, you can complain to the Spanish Data Protection Agency (aepd.es).

Children

To create an account you must be at least 14 or have the consent of a parent or guardian. If you think a child has given us their data without it, write to us and we will delete it.

Data on your device

The app keeps your words, unsent reviews and preferences on your phone so it works offline. They go when you delete the account or uninstall the app. What this website stores is in the cookie policy.

Changes

If anything important changes, we will update this page and, where appropriate, tell you in the app or by email.