Privacy Policy

Last updated: January 2025

GLV LLP ("we", "us", or "our") operates Lexis Flow. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and handling your data in an open and transparent manner. Please read this Privacy Policy carefully. By using the Service, you consent to the practices described herein.

1. Information We Collect

1.1 Information You Provide

  • Telegram account information (username, user ID) when you connect to our bot
  • Vocabulary and grammar content you create or input
  • Learning progress and responses during study sessions
  • Payment information (processed securely by Lemon Squeezy)
  • Communication data when you contact us for support

1.2 Information Collected Automatically

  • Usage data (features used, session duration, interaction patterns)
  • Device information (browser type, operating system)
  • Log data (IP address, access times, pages viewed)
  • Learning analytics (study streaks, performance metrics)

2. How We Use Your Information

We use the collected information for the following purposes:

  • To provide and maintain the Service
  • To personalize your learning experience using spaced repetition algorithms
  • To generate AI-powered vocabulary and grammar cards
  • To track and display your learning progress
  • To send notifications about study sessions and reminders
  • To process payments and manage your subscription
  • To communicate with you about updates, support, and promotional offers
  • To improve and optimize the Service
  • To detect and prevent fraud or abuse

3. Data Storage and Security

Your data is stored on secure servers. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security measures include:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure database storage with access controls
  • Regular security audits and updates
  • Limited employee access to personal data

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services that may collect and process your data:

  • Telegram — For bot functionality and user authentication
  • Lemon Squeezy — For payment processing (we do not store your payment card details)
  • OpenAI / AI Providers — For generating vocabulary cards and evaluating responses
  • Cloud Hosting Providers — For hosting and infrastructure

Each third-party service has its own privacy policy governing the use of your information. We encourage you to review their policies.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

  • With Teachers — If you are a student, your teacher can see your learning progress and card performance
  • Service Providers — With third parties who assist us in operating the Service
  • Legal Requirements — When required by law or to protect our rights
  • Business Transfers — In connection with a merger, acquisition, or sale of assets

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right to Access — Request a copy of the personal data we hold about you
  • Right to Rectification — Request correction of inaccurate or incomplete data
  • Right to Erasure — Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing — Request limitation of how we use your data
  • Right to Data Portability — Request your data in a structured, machine-readable format
  • Right to Object — Object to processing of your data for certain purposes
  • Right to Withdraw Consent — Withdraw consent at any time where we rely on consent to process your data

To exercise any of these rights, please contact us at support@lexisflow.com. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

  • Account data is retained while your account is active
  • Learning data is retained to maintain your progress history
  • Payment records are retained as required by law (typically 7 years)
  • Log data is typically retained for 90 days

Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Cookies and Tracking

Our web interface may use cookies and similar tracking technologies to enhance your experience. These include:

  • Essential Cookies — Required for the Service to function (authentication, session management)
  • Analytics Cookies — Help us understand how users interact with the Service

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

9. Children's Privacy

The Service is intended for use by language teachers and their students. If you are under the age of 16, you should use the Service only with the involvement of a parent, guardian, or teacher.

We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected such information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after any modifications constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

GLV LLP
15 Sygynak Street, Apt. 84, Nura District, Astana, Kazakhstan, 010000
Email: support@lexisflow.com

For GDPR-related inquiries, you may also contact your local data protection authority.