LexiJar

Legal

Privacy Policy

Effective August 26, 2026 (last updated September 12, 2026)

Lexijar ("the app," "we," "us") is a small, independently-run word-of-the-day app at lexijar.com. This page explains what information we collect when you use it, why, and what you can do about it.

Information we collect

When you sign in: you can sign in with Google or, on the mobile app, with Apple. Either way, we receive your name, email address, and a unique account identifier from whichever one you chose, and use these to create and maintain your Lexijar account. We never see or store a password; Google or Apple handles sign-in entirely, and we only find out that you successfully signed in, and who you are. If you sign in with Apple and use its "Hide My Email" option, we receive the private relay address Apple generates for you instead of your real email — we treat it exactly like any other email address on your account, and it works the same way for everything in this policy. Signing in with Google and signing in with Apple are treated as two separate ways to create an account today — we don't currently attempt to link or merge an account created one way with one created the other way, even if the email happens to match.

Quiz results: once you're signed in, if you complete the weekly quiz, we store your score, which words you got right or wrong, and when you completed it, tied to your account so you can see your own history in the app. We also record when you start a given week's quiz and whether you left before finishing it (which locks that week out until the next one), so the "one attempt per week" rule can actually be enforced — this is stored even if you never complete that week's quiz. Separately, each word is shown blurred until you tap to reveal it; we count how many times you reveal a given word within that week — tied to your account, and reset every week — because revealing it more before the quiz lowers the credit that word earns toward your weighted score. This reveal count isn't shown to anyone, including friends, and doesn't cost anything. If you spend streak tokens on a quiz hint, we record that you used a hint (and which word), and deduct the token cost from your balance; a hint used is shown on your own score breakdown and, as a simple "hint used" indicator (not which word), on the weighted score your accepted friends can see, since that's the whole point of it counting against you.

MidWeek Checkin results: once you're signed in, if you complete the separate, smaller Wednesday "MidWeek Checkin" quiz (4 words instead of 7, drawn from its own separate, harder word pool), we store your score, which words you got right or wrong, and when you completed it, tied to your account, the same way we do for the weekly quiz above — kept as its own separate record, since it's a genuinely different quiz. We also record when you start a given week's checkin and whether you left before finishing it, for the same "one attempt per week" reason as the weekly quiz. There's no weighted score or hint mechanic for this quiz, so neither of those apply here. Like the weekly quiz, your MidWeek Checkin score is visible to your accepted friends, and reactions work the same way.

Word activity (streaks, favorites, and notes): once you're signed in, we track how many days in a row you've visited (your "streak," including any streak tokens you've earned toward it), which words you've starred as favorites, and any personal notes you write for a word (for example, a sentence or a memory trick to help it stick). To keep that streak count accurate, we also log each individual qualifying visit that counts toward it — the date, whether it came from the web or mobile app, and a couple of internal technical details used only to troubleshoot streak-counting issues. That visit log is never shown to you or anyone else; it exists solely so we can verify the streak number itself is correct. Favorites and notes are tied to your account and visible only to you; we don't display them to anyone else, including other Lexijar users, and we don't read or review them ourselves except as described below. Your streak is visible to your accepted friends, as described next.

Username, friends, and reactions: if you choose a username, it's used to identify you to other users, for example so a friend can find and add you. If you send or accept a friend request, you and that friend can each see the other's username, quiz scores (weekly and MidWeek Checkin), and streak, and can send each other small emoji reactions on individual quiz attempts. We store the friend relationship itself (including any pending requests and blocks) and any reactions sent, tied to both accounts involved. None of this is visible to anyone who isn't an accepted friend. You can remove or block a friend at any time from the app, which stops further sharing between you and that person going forward. You can also report a friend, which opens a pre-filled email to support@lexijar.com in your own email app — we never see or store the contents of a report unless you actually send that email yourself.

Push notification tokens (mobile app only): if you use the mobile app and allow notifications, we store a device push token (a unique identifier for your device, provided by Apple through Expo's push service, not by us) so we can notify you when a friend reacts to one of your quiz scores. This token is tied to your account. See "Push notifications" below for how this token is used.

Cookies and sign-in storage: on the web, a small cookie remembers your timezone, so "today's word" matches your local date rather than the server's, and a separate session cookie keeps you signed in between page loads. The mobile app doesn't use cookies at all: it reads your device's timezone directly each time it needs it, and instead of a session cookie, it stores your sign-in token in your device's secure, encrypted storage (Apple's Keychain or the Android equivalent) to keep you signed in between app launches. None of this — web or mobile — is used for tracking or advertising, and none of it is shared with anyone else.

Information we don't collect

Who can see your information

By default, your quiz scores (weekly and MidWeek Checkin), streak, favorites, and notes are visible only to you. The one exception is friends: if you accept a friend request (or someone accepts yours), that person can see your username, quiz scores (both kinds), streak, and any reactions you exchange with each other. Favorites and notes are never shared with friends or anyone else. Removing or blocking a friend stops this sharing going forward, though it doesn't retroactively un-send anything they already saw while you were connected.

How we use your information

To run your account, remember your quiz history and word activity, keep you signed in between visits, connect you with friends you choose to add, and (on mobile, if you opt in) notify you when a friend reacts to your score. We do not sell, rent, or share your information with third parties for their own marketing purposes, and we do not use it for advertising. We don't send any email today; if that ever changes (for example, an optional quiz reminder), it'll be something you can opt out of at any time, and this policy will be updated first.

Hosting and infrastructure

Lexijar runs on AWS Lightsail (Amazon Web Services), which is the infrastructure that runs the app and stores its data, not a third party we share your information with for their own purposes. Like most web servers, ours keeps standard access logs (IP address, timestamp, browser type) temporarily, for security and troubleshooting; these aren't tied to your account or used to track you. Separately, the app itself briefly checks IP addresses in memory to prevent abuse of the quiz-saving feature; this isn't written to disk and clears whenever the server restarts.

Push notifications

The mobile app uses Expo's push notification service (run by Expo, the toolmaker we built the mobile app with) to deliver notifications to your device, for example when a friend reacts to one of your quiz scores. To do this, we send your device's push token and the notification's text (for example, "a friend reacted to your score") to Expo, who relay it to Apple for delivery to your device. We don't send your quiz content, notes, or any other personal information as part of that notification. Expo's handling of this data is governed by Expo's Privacy Policy, not this one. You can turn notifications off at any time from your device's system settings, which stops new tokens from being used (an already-registered token is removed the next time you sign in with notifications disabled, or on request, see "Data retention and deletion" below).

Local reminder notifications (mobile app only)

Separately from the friend-reaction push notifications above, the mobile app can also remind you daily that a new word is ready, if you turn this on in the app's account menu. This reminder is scheduled entirely on your own device — we don't send it, no push token is involved, and nothing about your visits or activity is sent to us to make it happen. Turning it on or off only changes a setting stored on your device. Granting notification permission on your device covers both this reminder and the friend-reaction push notifications above; you can turn either off independently — the reminder from the app's account menu, and reactions from your device's system notification settings.

Data retention and deletion

We keep your account, quiz history and attempts, word activity (streaks, favorites, notes, and the visit log described above), username, friend connections, reactions, and any push notification token for as long as your account exists. You can permanently delete your account and all associated data yourself, at any time — no email required. On mobile, this happens within the app: open the account menu and choose "Delete account." You don't need the app installed to do this, though — on the web, go to delete your account directly, and you'll be asked to sign in first if you aren't already. Either way, you'll be asked to type your username (or email, if you haven't set one) to confirm before anything is deleted — this can't be undone, and takes effect immediately. You can still reach support@lexijar.com with any questions about the process.

Security

Because sign-in is handled entirely by Google or Apple, we never store a password of yours to begin with. The app uses standard web security practices (CSRF protection on every request that changes data, and the entire site is served over HTTPS with a valid TLS certificate) to protect your information in transit. Every friend-facing feature (viewing a friend's scores, sending a reaction) is checked server-side to confirm a real, accepted friendship exists before any information is shared; usernames you enter for friend requests are validated the same way.

We don't proactively read or review the personal notes you write, since doing so would defeat the point of them being private. That said, like any service that stores content on your behalf, we may access, retain, or disclose it if required to by law (for example, a valid legal request from law enforcement) or to protect the security of the app or its users.

Google's and Apple's roles

Signing in uses either Google's own OAuth sign-in service or, on the mobile app, Apple's Sign in with Apple service — whichever one you choose. Google's handling of your information during that process is governed by Google's Privacy Policy, and Apple's by Apple's Privacy Policy, not this one. Separately, our own use of any information we receive through Google's sign-in API complies with Google's API Services User Data Policy.

Children's privacy

Lexijar is not directed at children under 13, and we do not knowingly collect information from children under 13.

Changes to this policy

We may update this policy from time to time. Any changes take effect as soon as they're posted on this page.

Contact

Questions about this policy, or about deleting your account (which you can also do yourself, in-app — see "Data retention and deletion" above): support@lexijar.com.