Privacy policy

Who we are

Lexicue is run by Robert Meyer trading as Lexicue, based in England, United Kingdom. We decide how your information is used (we're the “controller”). For anything about your data, email support@lexicue.com.

Age groups

Every account picks an age group. It decides which decks you see and which rules apply:

• Kids' accounts: Young children (5–7) and Children (8–11). A parent or guardian sets these up.
• Teens (12–16) and Adults.

When a kids' group is chosen, a parent or guardian ticks a box to confirm they're setting up the account for their child, and sets a grown-up PIN that guards changes such as the age group and deleting the account. We don't ask for the grown-up's name or any documents.

What we keep and why

• Your account: your email address and sign-in details, held by our sign-in provider, Clerk. We need these to run your account.
• Your nickname and age group. The age group decides which decks you see and which rules apply.
• For kids' accounts: when a parent or guardian confirmed the account, and the grown-up PIN (stored scrambled, never as the digits). We keep both while the account exists and delete them when it's deleted.
• Your play: games, scores, streaks, leagues, Daily Deck results and your Memory Bank, so the game can track your progress.
• Playing without an account: if you play the Daily Deck without an account, we store that run’s score with a random code instead of your name or any account details, so its share link works, and so you can add it to an account you create.
• What you make: decks and paths you create, and the topics and instructions you type to create them.
• What you do with others: ratings, votes, follows, shared links and Ask a friend.
• Reports and feedback you send us, and an email address if you give one.
• Plus and credits: your subscription status, top-ups and credits. Stripe handles payments; we never see your card number.
• Running costs: a record of each AI request made for you, so we can keep costs and misuse in check.
• Visits: counts of which pages are visited, from Vercel Web Analytics. It doesn't use cookies or identify you.

The law asks us to give a reason (a “lawful basis”) for each use:

Who we share it with

Only with the services that run Lexicue, and only what each one needs:

• Clerk: sign-in and accounts.
• Stripe: payments for Plus and top-ups.
• Neon: our database.
• Vercel: hosting the website, and counting page visits without cookies.
• DeepSeek: when you create a deck or path, the topic and instructions you type are sent to DeepSeek to write the cards. DeepSeek is based in China. We send only the text needed to write the cards, never your name, email or account details. Please don't type personal information, such as names, email addresses, phone numbers or school details, into the create boxes.
• Google Gemini: the text of decks and paths, and what you type into search, to find matching ones.
• RunPod: the titles of decks and paths, to draw their cover pictures.
• Wikipedia and Wiktionary: when a deck is made, we look up its topic and words there to check facts and word origins.

Some of these services store or process data outside the UK, including in the United States and China. We don't sell your data and we don't show adverts.

What other players see

Other players see your nickname, never your real name or email. Your nickname appears on leaderboards, leagues and the Daily Deck rankings, and on any deck or path you share. Teens and adults who share decks get a public creator page that players can follow.

Kids' accounts have no creator page and can't be followed. Decks a child shares are checked before anyone else can see them.

How long we keep it

We keep your information while you have an account. When you delete your account, we delete your games, Memory Bank, progress, credits, settings and private decks straight away, and remove your name from reports, feedback and cost records. Copies can stay in our database provider's backups for a short time until they're overwritten.

Decks and paths you shared stay so other players can keep playing them. They keep your nickname unless you choose otherwise when deleting, in which case they show as made by “a former player”. Stripe keeps payment records for as long as UK tax law requires (usually six years).

Your rights

You can ask us to:

• give you a copy of the information we hold about you, including in a format a computer can read;
• correct anything that's wrong;
• delete it. You can do this yourself in Settings, under Delete account;
• limit how we use it, stop using it for a particular purpose, or object to how we use it.

Email support@lexicue.com and we'll reply within a month. A parent or guardian can make these requests for their child. If you're unhappy with our answer, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

Cookies

We only use cookies that Lexicue needs to work: keeping you signed in (set by Clerk), remembering your age group, and remembering your time zone so streak days follow your own calendar. When you pay, you go to Stripe's own payment page, which uses its own cookies to take payment safely and prevent fraud. We don't use advertising or tracking cookies, and our visit counts don't use cookies. Your browser also keeps your own Daily Deck run if you play without an account. It stays on your device and isn't used to track you.

Changes

If we change this policy, we'll update the date at the top. For a big change, we'll tell you in the app first.