Privacy Policy

Lemmerly (“we”, “our”, or “us”) operates the vocabulary rating platform at lemmerly.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We take privacy seriously and collect only what is necessary to provide the service.

When you sign in using Google OAuth, we receive:

• Your name (as registered with Google)
• Your email address
• Your Google profile ID (used for authentication only)

We do not receive your Google password, contacts, calendar, or any other Google data.

• Your vocabulary ELO rating and progression history
• Words you have answered correctly or incorrectly
• Session history (number of sessions, accuracy, streaks)
• Spaced repetition queue (words scheduled for review)
• Subscription tier and payment status (not payment card details)

Payments are processed by Razorpay. We do not store your credit card, debit card, or UPI details. We only store your subscription status (free or paid) and subscription expiry date.

• Authentication — to identify you when you sign in
• Personalisation — to track your ELO rating, progress, and review schedule
• Service delivery — to show you words appropriate to your level
• Communication — we may email you about significant service changes (infrequently)

We do not use your data for advertising. We do not sell your data to any third party. We do not use your personal information (name, email) to train AI or machine learning models. Aggregate, anonymised gameplay data — such as word difficulty statistics and overall accuracy patterns — may be used to improve the vocabulary rating system. This data cannot be linked to any individual.

Lemmerly uses Google OAuth solely for authentication. We request only the minimum scopes necessary:

• openid — to verify your identity
• email — to identify your account
• profile — to display your name

We do not access your Gmail, Google Drive, Google Contacts, or any other Google service. Your use of Google sign-in is also governed by Google's Privacy Policy.

Your data is stored in a secure Supabase PostgreSQL database hosted in the Seoul, South Korea region. We use industry-standard security practices including:

• Encrypted connections (HTTPS/TLS) for all data transmission
• Row-level security policies to prevent unauthorised data access
• Authentication tokens managed by Supabase Auth

No system is 100% secure. In the event of a data breach, we will notify affected users promptly.

We retain your account data for as long as your account is active. If you request deletion, we will delete your account and all associated data within 30 days. Anonymous, aggregated statistics (such as overall word difficulty ratings) may be retained indefinitely as they cannot be linked to any individual.

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated data
• Portability — request your data in a machine-readable format
• Objection — object to any processing you believe is unlawful

To exercise any of these rights, email us at mklauria@gmail.com. We will respond within 30 days.

Lemmerly uses browser session storage to maintain your login state via Supabase Auth. We do not use third-party tracking cookies or advertising cookies. We do not use Google Analytics or any third-party analytics service.

Lemmerly is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The “Last updated” date at the top of this page will always reflect the most recent revision.

For any privacy-related questions or requests: