Privacy Policy

Effective: 12 June 2026 · Jurisdiction: Australia

Leximo Writing (“we”, “us”, “our”) is an Australian educational technology platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We also observe applicable requirements of the EU General Data Protection Regulation (GDPR) for users who access the platform from within the European Economic Area.

1. Who we are

Leximo Writing is operated from Australia. Questions about this policy may be directed to support@leximowriting.com.

2. Information we collect

Account information. When you sign in via Google or Facebook we receive your name, email address, profile photo URL, and OAuth provider identifier. We do not receive your social media password.

Learning activity. We store the writing submissions you create (essays, plans, sentence challenges), your scores and feedback, XP earned across each feature (Writing Forge, Word Power, The Gauntlet, Style Studio), daily XP progress, and your login streak. We also record which literary devices you have unlocked in Style Studio.

Grade and settings. You may optionally set your school year level so we can calibrate topic difficulty and feedback. We record whether you have opted in to the public leaderboard (Arena).

Payment information. Credit purchases are processed by Stripe, Inc. We do not store your card number, CVV, or billing address. We store only the transaction record (bundle purchased, credit amount, date) and the Stripe session ID for idempotency purposes.

Technical data. We log standard server access logs (IP address, browser type, pages requested, timestamps) for security and debugging. We do not use these for advertising profiling.

3. How we use your information

We use your information to: provide and personalise the learning platform; generate AI-powered writing feedback; track your progress and XP; operate the leaderboard (for users who opt in); process credit purchases; send account-related emails (e.g. payment receipts); and detect and prevent fraud or abuse.

We do not sell your personal information. We do not use your data for advertising or share it with advertisers.

4. AI processing (Google Gemini)

Writing analysis and feedback is powered by Google Gemini. When you submit writing for evaluation, the text of your submission is sent to Google's API. No personally identifying information (name, email, user ID) is included in these requests. Google's data handling for API calls is governed by the Google Cloud Data Processing Addendum. Gemini API data is not used to train Google's models by default under the standard API terms.

5. Third-party services

Google OAuth & Facebook OAuth — used for authentication. Governed by Google's and Meta's respective privacy policies.

Stripe — payment processing. Stripe is PCI-DSS Level 1 certified. See stripe.com/privacy.

We require all third-party processors to maintain appropriate security standards and to use your data only to provide the contracted service.

6. Cookies and sessions

We use a single session cookie . This cookie is strictly necessary to keep you logged in and expires after 2 hours of inactivity or when you sign out. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No cookie consent banner is required under Australian law for strictly necessary cookies.

7. Leaderboard (Arena)

Participation in the public XP leaderboard is entirely opt-in. If you opt in, your display name and XP totals are visible to other logged-in users. You may opt out at any time from your profile settings; your entry will be removed from the leaderboard immediately.

8. Children's privacy

Leximo Writing is designed for students in Years 1–12 (approximately ages 6–18). We are conscious of our obligations under the APPs regarding children's data. For students under the age of 13, we require a parent or guardian to create the account and consent to this Privacy Policy on their behalf. Parents and guardians may request access to, correction of, or deletion of their child's data at any time by contacting us at support@leximowriting.com.

9. Data retention

We retain your account data and learning history for as long as your account is active. If your account is inactive for more than 3 years, we may delete it after giving you 30 days' notice by email. You may request deletion of your account and all associated data at any time (see Section 10). Stripe transaction records are retained for 7 years as required by Australian tax law.

10. Your rights

Under the Australian Privacy Principles (and GDPR where applicable), you have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Delete your account and personal data (subject to legal retention obligations).
Port a copy of your data in a machine-readable format (GDPR users).
Object to or restrict processing in certain circumstances (GDPR users).
Withdraw consent (where processing is based on consent) without affecting prior processing.

To exercise any of these rights, email support@leximowriting.com. We will respond within 30 days. If you believe we have not handled your information appropriately, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Security

We implement reasonable technical and organisational measures to protect your data, including: encrypted connections (HTTPS/TLS), signed and short-lived session tokens, internal API key authentication between services, and Stripe's webhook signature verification in production. No system is perfectly secure; if you suspect a security issue please contact us immediately at support@leximowriting.com.

12. Changes to this policy

We may update this policy to reflect changes to our platform or legal obligations. We will notify registered users by email at least 14 days before material changes take effect. The updated policy will be posted at this URL with a revised effective date.

13. Contact

Privacy Officer · Leximo Writing · support@leximowriting.com