Effective date: 14 June 2026
This Privacy Policy explains how Yaowen Xu, an individual based in Sweden ("we", "us"), collects, uses, and shares information when you use the VibeLex mobile application ("the App"). We have written it to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and Canada's PIPEDA.
For the purposes of the GDPR, Yaowen Xu is the data controller for the personal data described below. You can reach us at xuyaowen@me.com.
If you choose to sign in with Apple or Google, we receive your name and email address from that provider so we can create your account. If you use anonymous mode, we create an anonymous account that is not linked to your name or email — only a random identifier. If you sign in with an email address and password, we receive your email address; your password is processed by our authentication provider (Google Firebase) and never stored by us in readable form, and we send you an email to verify the address.
To provide the App we store, against your account: the languages you are learning and your native language; the topics you select; an optional city you type in (used only to make some stories locally relevant — we do not collect GPS or precise location); your reading level; and words you save for review and words you have already seen, with timestamps.
To create your stories, the App sends your selected topics, your optional city, your language pair, and (for review exercises) the words you have saved to Google's AI models. These inputs are processed to generate text and are not used to identify you.
When you tap a word to see its definition, that word and its language are sent to FreeDictionaryAPI.com, a third-party dictionary service, which returns the definition. These requests are rate-limited by your IP address by that service.
We do not access your contacts, photos, microphone, camera, or precise location, and the App does not contain third-party advertising trackers. Text-to-speech is performed on your device.
| Purpose | Legal basis |
|---|---|
| Create and maintain your account | Performance of a contract (Art. 6(1)(b)) |
| Generate stories, dictionary lookups, save your words | Performance of a contract (Art. 6(1)(b)) |
| Verify app integrity and prevent abuse | Legitimate interests (Art. 6(1)(f)) |
| Analytics to improve the App | Your consent (Art. 6(1)(a)), where required |
Where we rely on consent for analytics, you can withdraw it at any time, and we will ask for it before collecting non-essential analytics where the law requires.
We do not sell your personal data. We share data only with the service providers that make the App work:
Your data may be processed outside your country, including in the United States. Where data leaves the European Economic Area or the UK, it is protected by Standard Contractual Clauses and/or the EU–US Data Privacy Framework as described above.
We keep your account and learning data for as long as your account exists. Generated story content is cached only for as long as needed to operate the feed and is then deleted. If you delete your account, we delete the personal data associated with it, except where we must keep it to meet a legal obligation.
Depending on where you live, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent. EU/EEA and UK users may lodge a complaint with their local data protection authority. California residents have the right to know, delete, correct, and to not be discriminated against for exercising these rights; we do not "sell" or "share" personal information as those terms are defined under California law.
You can delete your account and its data directly in the App (Settings → Account → Delete account). You can also contact us at xuyaowen@me.com to exercise any of these rights.
VibeLex is not directed to children under 13 (or the minimum age of digital consent in your country, which can be up to 16 in the EU). We do not knowingly collect personal data from children under that age. If you believe a child has provided us personal data, contact us and we will delete it.
We may update this policy. We will revise the effective date above and, for material changes, notify you in the App.
Questions or requests: xuyaowen@me.com.