Privacy

Last updated: 27 May 2026

Lexo is built to do as little with your data as possible. This page explains what is collected, where it goes, and what it is used for.

What stays on your device

• Words and translations you save. Stored only on your device, in a SQLite database managed by iOS. They never leave your device unless you choose to export them via the Backup feature in Settings.
• Your review history. Same — stays on your device.
• App preferences (language pair, daily goal, motivation choice, onboarding state). Local to the device.

What gets sent off your device

• Text you ask Lexo to translate. When you type or dictate a word, the source text is sent to a server we operate (a Cloudflare Worker) so it can be forwarded to DeepL for translation. DeepL receives the text and processes it according to DeepL's privacy policy. Once the translation comes back, our server caches the result for up to 30 days, keyed by a one-way hash of the source text — we do not store the source text itself, only its hash.
• Your IP address. Our translation server retains your IP address for up to 48 hours, paired with a daily character counter, to enforce a per-user fair-use limit. After 48 hours it is deleted automatically.
• Standard request metadata. Cloudflare, our hosting provider, logs basic request metadata (IP address, timestamp, status code) at the network edge per Cloudflare's privacy policy.

Subscription and Sign in with Apple

Lexo Pro is a paid subscription. To subscribe and continue using Lexo after the onboarding flow, you sign in with Apple. Three things happen at sign-in:

• Sign in with Apple. Apple shares a stable identifier with Lexo — a long, opaque string Apple calls the user identifier, specific to your Apple ID and to Lexo. On the first sign-in only, Apple also offers your name and email; Lexo does not request, persist, or transmit either.
• Our translation server. We exchange the Apple identifier for a Lexo session token so subsequent translations are counted toward a per-user fair-use limit instead of a per-IP one. The session token is keyed by the Apple identifier; no name, email, or content is stored alongside it.
• RevenueCat. We use RevenueCat to manage subscriptions and verify Apple receipts. RevenueCat receives the Apple identifier and your Apple subscription receipt to track subscription state. It does not receive your name, email, or any words, translations, or review history.

Apple processes the payment. Lexo never sees your payment information. Subscription purchases are governed by Apple's Standard EULA.

Dictation

iOS dictation runs on-device using Apple's Speech framework. The audio you record for dictation is not sent to our servers. Once iOS has downloaded the on-device speech model for your language, audio does not leave your device.

What we don't collect

• No traditional accounts. Sign in with Apple is only used to subscribe, and is described above.
• No analytics, no crash reporters, no advertising SDKs.
• No tracking across apps or websites.
• No sale or sharing of your data with third parties, beyond what is described above (DeepL for translation, Cloudflare for hosting, Apple for sign-in and payment, RevenueCat for subscription management).

Web fonts

This website loads two type families (Inter and Fraunces) from Google Fonts. Google may see your IP address when loading them. The Lexo iOS app does not use Google Fonts.

Children's privacy

Lexo is not directed at children under 13 and does not knowingly collect personal information from them.

Changes to this policy

If we make material changes to how Lexo handles your data, we will update this page and the date above.

Contact

Questions about privacy: privacy@getlexo.app.