Privacy Policy

Last updated: June 2026

What we collect

Lexiki collects only the data needed to run the service:

• Account information — your name, email address, and profile picture from Google when you sign in with Google. We never see or store your Google password.
• Study content — the decks, notes, cards, tags, and media you create, import (for example Anki .apkg files), or generate with AI.
• Review history — your FSRS scheduling state, grades, and study timestamps, used to schedule your reviews.
• API keys — if you create keys for API or MCP access, they are stored as irreversible hashes.
• Usage metadata — request timestamps, counts, and error logs for operational monitoring.

How we use your data

Your data is used solely to operate and improve Lexiki:

• To authenticate you and authorize access to your decks.
• To store, sync, and serve your decks, cards, media, and review schedule across your devices.
• To generate flashcards from the notes, text, or PDFs you submit.
• To send transactional email (such as account or import notifications) where applicable.
• To monitor service health and debug issues.

AI generation

When you use AI card generation, the source material you submit (notes, text, or PDFs) is sent to our AI providers only to produce your cards. This content is not used to train our models or theirs, and the cards it produces are stored only in your account.

Public decks

Decks you set to public are visible to anyone with the link. Complete, moderation-clean decks may also appear in Lexiki’s public library and sitemap after automated quality and duplicate checks. Public previews can show card questions and answers, titles, descriptions, tags, and media. Keep a deck private if it contains anything you don't want publicly available.

What we do not do

• We do not sell, rent, or share your personal data with third parties.
• We do not use your data for advertising or profiling.
• We do not train AI models on your private decks or study history.

Data storage

Data is stored on Cloudflare infrastructure (Workers, Durable Objects, D1, KV, and R2). Sessions use secure, HTTP-only cookies. API keys are stored as irreversible hashes.

Cookies

Lexiki uses a session cookie to keep you signed in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Account deletion

You can request deletion of your account and all associated data at any time. After a short grace period, your personal data, decks, media, and review history are permanently removed.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated in the app or by email.

Contact

Questions about this policy? Get in touch.