Privacy Policy
The short version
LEXIO is a daily Scripture word game at lexiodaily.com and in our iOS and Android apps. Version 1 is free, shows no ads, and sells nothing. You can play the whole game without an account. Our website uses Google Analytics to understand how people find and use LEXIO; our apps run no analytics and no crash reporting. Signing in is optional and only syncs your streak across your devices. There is no public leaderboard, and we do not sell personal information.
What stays on your device
Your settings (translation, hard mode, accessibility options, reminder), your statistics (streaks, guess distribution) and your game history are stored on your device. The optional daily reminder is a local notification scheduled on your device, with no server involved. Uninstalling the app or clearing your browser's site data removes local data that has not been synced; your own device or browser backups may keep copies under your backup settings.
Daily puzzle results
When you complete a daily puzzle while online, the app sends one result to our server: a randomly generated identifier (not your name, email or phone), the puzzle number, the guesses used, whether you solved it, whether hard mode was on, and how long it took. Practice games never send anything. Because that identifier is persistent, we treat these records as pseudonymous rather than strictly anonymous, and if you sign in they may be associated with your account. We do not show them on any public leaderboard.
Optional account
You never need an account to play. If you choose to sign in with Apple, Google or an email link, we store the account identifier and the email address from your sign-in, and use them only to sync your streak across your devices. Your sign-in provider handles your information under its own privacy terms. Without an account you can still play; only cross-device syncing is unavailable.
Website analytics
Our website, but not the apps, uses Google Analytics 4 through Google Tag Manager to understand how people discover LEXIO and use the site. This can include page views, events, referral source, approximate location, and device or browser details, using cookies and similar identifiers. We use it for measurement only: Google Signals, advertising personalisation and ad integrations are turned off, and we do not send your email address to Google. The website does not yet show a cookie banner; you can limit or block analytics through your browser's cookie settings or Google's opt-out tools. Our apps contain no analytics or crash-reporting code.
Who handles your data
- Netlify hosts the website and may process technical information such as your IP address, the pages requested, timestamps and browser details to deliver and protect the site.
- Supabase is our database (Asia-Pacific / Sydney region). It stores the pseudonymous daily results and, if you sign in, your optional account, over HTTPS.
- Google (Analytics and Tag Manager) provides the website analytics described above, under its own privacy policy.
- Apple, Google or your email provider are involved only if you sign in, and only to authenticate you.
These providers may process information outside New Zealand. Version 1 uses no advertising, payment or crash-reporting providers, and we do not sell your data.
Deleting your account and data
You can delete your account and the data we hold about you at any time, in the app or on the web, from Settings → Privacy & data → Delete my account (labelled Delete my data if you have not signed in). This removes your account record, the email tied to it if you signed in, and your pseudonymous daily results from our active systems, and it cannot be undone. Settings, statistics and game history held on your device are removed when you uninstall the app; signing out alone returns the app to anonymous play. To ask us to do it for you, email support@kraftdigital.co.nz from the address tied to your account, or describe your device if you played without one.
How long we keep information
We keep your account and synced streak while your account exists, until you ask us to delete it; inactivity alone does not trigger deletion. We keep individual pseudonymous daily results for up to 12 months, after which they are deleted or aggregated into statistics that cannot reasonably be linked back to a person or device. Website analytics data follows our Google Analytics retention setting and Google's own policies.
Children
LEXIO's content is family-friendly, but the app and its optional sign-in are not directed at young children, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact support@kraftdigital.co.nz and we will delete it.
Your rights
You can ask to see or correct the information we hold about you, ask us to delete it, or raise a privacy concern by emailing support@kraftdigital.co.nz. Depending on where you live you may have further rights, including to withdraw consent or to complain to a regulator such as the New Zealand Privacy Commissioner. We may need to verify your identity before we act.
Changes
If this policy changes, we will post the updated version at this address with a new effective date.