Privacy Policy

Last updated: September 8, 2026

This Privacy Policy explains how information is handled by the LexiTrainer website (lexitrainer.org) and the LexiTrainer mobile application for iOS and Android (together, "LexiTrainer", "we", "us"). LexiTrainer is operated by Oleg Voronchenko, an individual based in Portugal. Privacy questions can be sent to heureqa.support@gmail.com.

This Website

lexitrainer.org does not use cookies. The homepage includes a small third-party visitor-count badge (from visitor-badge.laobi.icu) that loads an image to display a public page-view counter; like any external image request, this lets that provider see standard technical information such as your IP address and browser type, under its own practices, which we don't control. Beyond this badge, the website does not collect personal information beyond what's described in Hosting below.

Website Analytics

lexitrainer.org uses simple, first-party analytics: a running daily count of page views, and a daily count of clicks on the App Store and Google Play download buttons. This does not use cookies, localStorage, or any visitor identifier — no individual visit is ever recorded, only a single aggregated total for each calendar day, which we review as a daily report. This data is never shared with any third party or used for advertising.

Contact Form

If you use the contact form at lexitrainer.org/contact/, we process the name, email address, subject, message, and optional reason category you submit, in order to respond to you. Your message is sent as an email to our support inbox via Cloudflare's Email Service — we don't store the message, or any part of it, in a database. To reduce spam, the form uses a hidden field real visitors never fill in, plus standard server-side validation; no rate-limiting record or other data is stored for this purpose. Submitting the form doesn't use cookies.

Hosting

This website is hosted on Cloudflare (Cloudflare Workers Static Assets). As with any web host, Cloudflare may log standard technical information (such as IP address and browser type) as part of normal server operation; this site's operators do not have access to that data beyond what Cloudflare provides. See Cloudflare's own privacy policy for details on their practices.

Account & Authentication

The LexiTrainer app lets you create an account using Firebase Authentication, with email and password, Google Sign-In, or (on iOS) Sign in with Apple. You can also use the app as an anonymous Guest, which can later be upgraded to a full account. Depending on the method you choose, we process an email address, a display name, and an identifier from the sign-in provider (Google or Apple) needed to sign you in and keep your account secure.

App Data & Learning Progress

Once signed in, your profile and app data — such as your vocabulary lists, learning progress, and other content you create in the app — are stored in Firestore, under a record tied to your account.

Third-Party Services Used By The App

The app relies on a small number of third-party services: Firebase for authentication and data storage; Google Sign-In and, on iOS, Sign in with Apple for account sign-in; Google Translate for in-app translation requests; Openverse for image search results; and ipapi.co together with open-meteo.com for the app's weather-greeting feature. The weather greeting uses an approximate location derived from your network connection via ipapi.co — it does not use your device's GPS. Each provider processes what you send it (such as text to translate, a search term, or your approximate network location) under its own privacy policy, which we don't control. LexiTrainer has no advertising SDK, no cross-app advertising tracking, and no subscriptions or in-app purchases, so no advertising or payment data is collected.

International Data Transfers

The third-party services above (including Firebase/Google services, Google Sign-In, Sign in with Apple, Google Translate, Openverse, ipapi.co, open-meteo.com, and Cloudflare) may process information in countries other than your own, including outside the European Economic Area. Where that happens, we rely on the safeguards required by applicable data protection law for such transfers.

How We Use This Information

Information described above is used to let you create and access your account, save and sync your vocabulary lists and learning progress, provide translation and image-search results inside the app, show a location-appropriate weather greeting, and keep the app and your account secure.

Legal Bases for Processing

We process the information described above under different legal bases depending on the purpose. Creating and managing your account, authenticating you, syncing your vocabulary lists and learning progress, and providing translation or image-search results you request are necessary to provide the service you asked for (contract/service necessity). Keeping the app and your account secure, preventing abuse, and understanding overall website usage through the privacy-friendly analytics described above all rely on our legitimate interest in operating a reliable, secure website and app without tracking individual visitors across visits. Responding to a message you send through the contact form relies on our legitimate interest in answering questions you've directly asked us. We do not currently rely on consent as the basis for any of the processing described in this policy; if a genuinely optional feature ever required your consent, we would ask for it separately at that time. Some limited information may also be processed or retained where required to comply with applicable law.

Data Retention

We keep your account and Firestore app data for as long as your account exists. If you delete your account (see Account Deletion below), that data is deleted from Firebase Authentication and Firestore. Some infrastructure-level records — for example, standard server or network logs kept by providers such as Cloudflare, Firebase, or the third-party services above — may be retained for a limited time under those providers' own policies or as required by law; we don't control, and can't verify from our own systems, exactly how long such infrastructure logs persist.

Account Deletion

You can delete your LexiTrainer account at any time from within the app. Deleting your account removes your Firestore data, deletes your Firebase Authentication record, clears the app's local data on your device, and signs you out. See the Delete Account page for full details

Your Privacy Rights

If you are in the European Economic Area, the United Kingdom, or another region with similar data protection laws, you generally have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to certain processing. You can exercise any of these rights, or ask a question about this policy, by contacting heureqa.support@gmail.com. As LexiTrainer is operated from Portugal, the EU General Data Protection Regulation (GDPR) applies to this processing in addition to any data protection law that applies based on your own location.

Security

We rely on the security infrastructure provided by Firebase Authentication and Firestore and use reasonable measures to help protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

Contact

Questions about this policy, or requests relating to your data or account, can be sent to: heureqa.support@gmail.com