Privacy
Updated 7 October 2026
Lexspar collects what it needs to run your account and your learning, and nothing for advertising. This page explains what that is, who helps us process it, and how to delete it.
Without an account
You can use Lexspar as a guest. Your placement, saved words, reviews, practice duels and settings stay on your phone. Ranked duels, friends and clubs need an account.
With an account
| Sign-in details | Your email address, and an identifier from Apple or Google if you sign in with them. If Apple or Google share your name, we offer it as your display name. |
|---|---|
| Profile | Your handle, display name, a bio if you write one, the medals you choose to show, app and explanation languages, learning goal, companion, privacy settings, and the date you confirmed you are 18 or older. |
| Learning progress | Saved words, your answers and review history, placement result, practice and live duel results, and app preferences, so a second device can continue where you left off. The days you study and the review sets you finish, for your streak, weekly packs and club goals. |
| Duels and rewards | Your duels, answers in them, arena rating, rank and history; coins, career XP, medals, daily missions, unlocked companions, items you own and wear; certificates you issue and the name you put on them. |
| Friends and clubs | Friend requests, friends, who you follow, who you've blocked, challenges, clubs you belong to and your role there, and when the app was last open (to show friends you're available) with your device's time zone. |
| Finding friends | When you search, the handle text you type. If you choose Find contacts, the app scrambles the email addresses in your contacts on your phone (a one-way SHA-256 hash) and sends only those scrambled values; we compare them with accounts that allow being found and keep nothing from the request. We also keep the same scrambled form of your own email so friends who have it can find you, unless you turn off Let contacts find me in Settings. |
| Reports | If you report a player, a club or a question: who and what you reported, the reason and any note you add. |
| Notifications | If you allow notifications: your device's push token, whether you want challenge and friend-request alerts, and your quiet hours, so alerts reach you only when you want them. Alerts go through Apple's push service and contain the other player's display name and what happened. |
| Technical logs | Our hosting providers keep short-lived request logs, including IP addresses, to run and secure the service. |
We use this to sign you in, sync your progress, run duels, friends, clubs and rewards, and keep the service secure and fair. We don't sell it, use it for advertising, or ask for your phone number or location. Lexspar reads your contacts only when you tap Find contacts and allow it, and only their email addresses, scrambled before they leave your phone. Inviting a contact uses the system contact picker and Messages; the number you pick isn't sent to us.
Who processes it
- Supabase hosts accounts and the database (servers in Sydney, Australia).
- Cloudflare serves this website and routes email to our support address.
- Resend delivers sign-in code emails.
- Apple and Google confirm who you are, only if you choose to sign in with them. Apple also delivers push notifications if you allow them.
Who can see what
Your email, coins, learning details, mistakes and progress are private. Anyone signed in can find you by handle and see your public profile: handle, display name, bio, companion, arena rank and rating, best rank and results, career level, medals and the items you wear, your streak if you choose to show it, and your vocabulary estimate (such as B1) if you choose to show it. Your opponents see your card during a duel. Friends also see whether you're available, unless you hide it in Settings. Club members see each other's cards, roles and learning days that week. Leaderboards show cards and rank, never email or coins.
A certificate's verification link is off unless you share it; when it's on, anyone with the link sees its title, the name you chose (in full or with an initial), the issue date, status and scope.
Keeping and deleting
We keep your account data until you delete your account. Deleting it in the app removes your profile, handle, sign-in methods, synced progress, rating, coins, items, friends, follows, challenges and certificates straight away and signs out every device. Duels you played stay in your opponents' history as a former player, without your name. A club you own passes to its longest-serving moderator, or closes. Reports you made are kept without your name so moderators can finish reviewing them. Copies in encrypted backups expire on our provider's normal schedule.
Your choices
- See and export your data: Settings › Export my data.
- Correct your name or handle: Settings › Account.
- Delete everything: Settings › Account › Delete account.
- Ask anything, or make a request we haven't covered: support@lexspar.uz.
Age
Lexspar is for adults during its preview. You must be 18 or older to create an account.
Changes
If this policy changes, we'll update the date above and, for significant changes, tell you in the app first.