Data Safety

This page is a plain-English companion to our Privacy Policyand the reference for Lexora’s Google Play Data safety declaration. It summarises exactly what Flowix Inc. collects in the Lexora app and on https://playlexora.app, why, who processes it, and how you can delete it. You can play Lexora as a guest with no account.

What we collect

• Account data (optional): if you sign in, our auth provider (Clerk) stores your email address and a user id. Signing in is optional.
• Gameplay & progress: puzzles you generate, scores, streaks, coins, XP and achievements, so we can sync your progress and show leaderboards.
• Topics you type: the topic text you enter is sent to our servers to generate a puzzle. It is not linked to your identity when sent to the AI provider. Please don’t enter sensitive personal information as a topic.
• Diagnostics: crash and error reports (Sentry) and aggregated product analytics (PostHog) to improve the app.
• Device & advertising identifiers: used by Google AdMob and its bidding partners to show ads to free users, and by analytics. Gold subscribers see no ads.
• Push token (only if you enable notifications) and basic device information.

How we use it

To generate and sync your puzzles, run the game economy (coins, streaks, leaderboards), show relevant ads to free users, prevent abuse, provide support, and improve Lexora. We do not sell your personal data.

Who processes your data

Data is handled by service providers acting on our behalf, each only for its function: Supabase (database), Clerk (authentication), Anthropic (AI puzzle generation), PostHog (analytics), Sentry (diagnostics), Google Play Billing (purchases), Firebase Cloud Messaging (push notifications), and Google AdMob (advertising to free users).

AdMob also runs a bidding auction among partner ad networks — Meta Audience Network, Unity Ads, ironSource Ads, Liftoff Monetize and OpenX — so a winning partner may receive the ad request instead of Google. The full list, what each receives, and how to opt out are in our Privacy Policy.

Security

All data is encrypted in transit(HTTPS/TLS) and encrypted at rest by our providers. Payment details are handled entirely by Google Play Billing and never reach our servers. Our economy is server-authoritative, so balances and entitlements can’t be forged on the device.

Retention & deletion (your control)

We keep your data while your account is active. You can delete your account and associated data at any time — in the app via Settings → Delete Account, or from our deletion page. Deletion removes your personal records from our systems; provider-side copies are purged within 30 days.

Your rights (GDPR & CCPA)

Depending on where you live, you have the right to access, correct, export (portability), restrict, or delete your personal data, and to withdraw consent at any time. We honour these requests for everyone, everywhere. To exercise a right, use the in-app deletion flow above or email privacy@playlexora.app. We do not use your data for automated decisions that produce legal effects, and we never sell it.

Children

Lexora is not directed to children under 13, and we do not knowingly collect their data.

Contact

Questions about data or privacy? Email privacy@playlexora.app.