LEXA Privacy Policy

Última actualización: Enero 2025

LEXA Privacy Policy

Last Updated: December 21, 2025

Blyzai ("us", "we", or "our") operates the LEXA mobile application ("the Application"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Application.

1. Information We Collect

1.1 Account Information

  • Parents/Guardians: Email address, name, and authentication method (Google, Apple, or email).
  • Students: Name, grade level, and selected avatar. Students access via PIN, with no email required.

1.2 Educational Usage Data

  • Subjects studied (Mathematics, Physics & Chemistry, History)
  • Duration of study sessions
  • Academic progress and achievements
  • Interactions with the AI tutor (questions asked)

1.3 Technical Data

  • Device type and operating system
  • Anonymous identifiers for analytics
  • Error logs for service improvement

1.4 Subscription Data

  • Subscription status (BASIC, PLUS, TUTOR)
  • Transaction history (managed by Google Play/Apple App Store)

2. How We Use Information

We use the collected data to:

  • Provide the educational service: Personalize the learning experience and adapt the AI tutor's responses to the student's level.
  • Inform parents: Display the student's academic progress on the parent dashboard.
  • Improve the Application: Analyze aggregated and anonymous usage patterns to enhance the experience.
  • Manage subscriptions: Process payments and provide access to corresponding features.
  • Communications: Send important service-related notifications (never advertising to students).

3. Data Processing by Artificial Intelligence

3.1 Local AI (BASIC Tier)

  • The AI model runs entirely on the user's device.
  • Conversations are not sent to external servers.
  • Data remains on the user's device.

3.2 Cloud AI (PLUS and TUTOR Tiers)

  • Queries are processed using the Google Gemini API.
  • Data is transmitted in encrypted form (TLS 1.3).
  • Google processes data according to its Gemini API Privacy Policy.
  • We do not store conversation content on our servers beyond the active session.

4. Protection of Minors

LEXA is designed for high school students (ages 13-18). We implement the following measures:

  • Parental consent: Parents/guardians create student accounts and profiles.
  • No advertising: Students never see ads within the Application.
  • No social networks: There are no user-to-user chat features or connections to social media.
  • Appropriate content: All content is designed to be educational and age-appropriate.
  • Parental control: Parents have full visibility into the Application's usage.

5. Data Sharing

We do not sell personal data. We only share information in these cases:

| Recipient | Purpose | Data Shared | |---|---|---| | Google Firebase | Authentication & database | Email, UID, profile data | | Google Gemini API | AI Processing (PLUS/TUTOR) | Educational queries | | RevenueCat | Subscription management | User ID, subscription status | | Google Analytics | Anonymous usage analysis | Aggregated anonymous events |

All our providers comply with GDPR and have data processing agreements in place.

6. Storage and Security

  • Location: Data is stored on Google Cloud servers in the European Union (europe-west1 region).
  • Encryption: All data is encrypted in transit (TLS) and at rest (AES-256).
  • Access: Only authorized Blyzai personnel have access to data, under strict controls.
  • Retention: We retain data as long as the account is active. Upon account deletion, data is erased within 30 days.

7. Your Rights (GDPR)

As a user in the European Union, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request the deletion of your data ("right to be forgotten").
  • Portability: Receive your data in a structured format.
  • Objection: Object to the processing of your data.
  • Restriction: Restrict processing under certain circumstances.

To exercise these rights, contact us at: privacy@blyzai.com

We will respond to your request within 30 days.

8. Cookies and Similar Technologies

The mobile Application does not use cookies. for analytics, we use anonymous identifiers that do not personally identify users.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

  • Notice within the Application
  • Email to the registered address (for parents/guardians)

We encourage you to review this policy periodically.

10. Contact

If you have questions about this Privacy Policy or our data practices:

Blyzai
Email: privacy@blyzai.com
Website: https://blyzai.com

For data protection complaints, you can also contact the Spanish Data Protection Agency (AEPD): https://www.aepd.es

11. Legal Basis for Processing

| Purpose | Legal Basis | |---|---| | Provision of service | Performance of a contract | | Service improvement | Legitimate interest | | Service communications | Performance of a contract | | Anonymous analytics | Legitimate interest | | Marketing (parents only, opt-in) | Consent |

This policy complies with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).