Privacy Policy
LexaPro AI Privacy Policy
Effective date: July 18, 2026
This Privacy Policy explains how LexaPro AI collects, uses, stores, shares, and protects personal data when you use the LexaPro AI mobile application, website, support services, and related features.
1. Data Controller
The controller responsible for your personal data is:
Adam Szczachor, operating LexaPro AI
ul. Wira Bartoszewskiego 18
23-400 Biłgoraj
Poland
Email: support@langswap.com
2. Scope of This Policy
This Privacy Policy applies to:
The LexaPro AI mobile application
AI chat and text-generation features
Image-generation features
Audio and voice features
Memory and approved action features
Account registration and authentication
App Store subscriptions
Customer support and related website services
3. Information We Collect
3.1 Account information
When you create or use an account, we may process:
Email address
Name or display name, if provided
Internal account identifier
Authentication credentials or tokens
Authentication information received through Sign in with Apple
When you use Sign in with Apple, we may receive an Apple-provided identifier, your name, and your email address or Apple private relay email address, depending on your Apple settings.
We do not receive your Apple Account password.
3.2 Content submitted to AI features
When you use LexaPro AI, we may process:
Text prompts and messages
Conversation context
Audio recordings submitted through voice features
Images or files selected by you
Requests for image generation
Generated text, images, or audio
Memory facts you choose to save
Actions you explicitly approve
Do not submit passwords, payment-card information, identification documents, medical records, API keys, or other highly sensitive or confidential information.
3.3 Technical information
We may process limited technical information, including:
IP address
Device type and operating system
Application version
Request date and time
Request type and response time
Error and crash information
Token usage and estimated service cost
Security and abuse-prevention information
Technical logs are not intended to contain the full content of conversations, audio recordings, or generated images.
3.4 Subscription information
Subscriptions are purchased and processed by Apple through the App Store.
We may receive:
Subscription product identifier
Transaction identifier
Subscription status
Purchase, renewal, expiration, cancellation, or refund status
We do not receive or store your complete payment-card information.
3.5 Support information
If you contact us, we may process:
Your email address
Your name, if provided
The content of your support request
Screenshots or attachments you voluntarily provide
Technical information necessary to investigate the issue
4. How We Use Personal Data
We process personal data to:
Create and manage user accounts
Authenticate users
Provide AI chat, image, audio, memory, and action features
Generate requested content
Process actions approved by the user
Verify subscription access
Provide customer support
Maintain application security
Prevent fraud, misuse, and unauthorised access
Diagnose errors and technical problems
Monitor performance, token usage, and service costs
Comply with legal, accounting, tax, and regulatory obligations
Establish, exercise, or defend legal claims
We do not sell personal data.
We do not use personal data for third-party advertising, targeted advertising, or cross-app tracking.
5. Artificial Intelligence Processing
LexaPro AI uses the OpenAI API to provide artificial intelligence features.
When you use an AI feature, information necessary to process your request may be transmitted to OpenAI. Depending on the feature, this may include:
Text prompts
Conversation context
Audio
Images
Files
Memory selected for the request
Generated outputs
The application informs users that their content may be processed by an external AI provider.
According to OpenAI’s API data policies, API inputs and outputs are not used to train OpenAI models by default unless the API account owner explicitly opts in to data sharing.
OpenAI may retain API inputs, outputs, and related abuse-monitoring information for up to 30 days, unless a longer period is required by law or different approved retention controls apply.
AI-generated content may be inaccurate, incomplete, or inappropriate. It must not be treated as professional medical, legal, financial, or emergency advice.
6. Audio and Microphone
LexaPro AI accesses your microphone only after you grant permission through your device settings.
Audio is recorded only when you actively use a voice feature. Audio may be transmitted to our backend and OpenAI to generate the requested response.
Temporary audio files are deleted after processing. If a technical failure prevents immediate deletion, temporary files are deleted as soon as reasonably possible and no later than 24 hours.
You may withdraw microphone permission at any time through your device settings. Voice features may stop working after permission is withdrawn.
7. Storage of Conversations and Generated Content
By default:
Conversations, saved memory, and generated images are stored locally on your device.
Our backend does not permanently archive the full content of conversations, audio recordings, or generated images.
The backend processes content only for the time necessary to provide the requested feature.
Local content remains until you delete it, delete your account where applicable, or uninstall the application.
Locally stored content may not be synchronised between devices and may be lost when the application is removed or device data is erased.
8. Analytics and Tracking
LexaPro AI does not currently use:
Third-party advertising networks
Google Analytics
Meta advertising tools
Cross-app tracking
Advertising identifiers for targeted advertising
We may use:
Apple App Analytics
Apple crash and performance diagnostics
Limited pseudonymous backend statistics, such as request count, response time, error rate, token usage, and estimated cost
This information is used for security, reliability, performance monitoring, and cost control.
9. Legal Bases for Processing
Where the General Data Protection Regulation applies, we rely on the following legal bases.
Performance of a contract
We process data necessary to:
Create and manage your account
Authenticate you
Provide requested application features
Verify subscription access
Provide customer support
Consent
We rely on consent where required, including for:
Microphone access
Optional device permissions
Optional processing that is not necessary to provide the core service
You may withdraw consent at any time. Withdrawal does not affect processing performed before consent was withdrawn.
Legitimate interests
We process limited information where necessary to:
Protect the application and backend
Prevent abuse and fraud
Diagnose technical failures
Improve service reliability
Protect our legal rights
Legal obligations
We may process and retain information where required by tax, accounting, consumer-protection, court, or regulatory obligations.
10. Service Providers and Data Sharing
We may share personal data only where necessary with:
OpenAI, which provides artificial intelligence processing
Apple, which provides App Store distribution, Sign in with Apple, subscriptions, analytics, and crash diagnostics
Cloud-hosting and backend-infrastructure providers
Security and technical-service providers
Professional advisers
Courts, regulators, law-enforcement authorities, or other public bodies where legally required
Service providers may process personal data only for specified purposes and must provide appropriate privacy and security protections.
We do not sell or rent personal data to third parties.
11. International Data Transfers
Some service providers may process information outside Poland or the European Economic Area, including in the United States.
Where required, international data transfers are protected using appropriate legal safeguards, including:
Adequacy decisions
Standard Contractual Clauses
Contractual and organisational security measures
Other transfer mechanisms permitted by applicable law
12. Data Retention
We use the following retention periods:
Account information: until the account is deleted
Local conversations, memory, and generated content: until deleted by the user, removed through account deletion, or deleted with the application
Temporary audio files: until processing is complete and no longer than 24 hours following a failed request
Technical and security logs: no longer than 30 days, unless longer retention is required by law or for an active security investigation
OpenAI API abuse-monitoring information: up to 30 days under OpenAI’s default API retention policy
Support correspondence: for the period necessary to resolve the request and normally no longer than 24 months
Subscription records: for as long as necessary to provide subscription access and resolve payment issues
Tax and accounting records: for the period required by applicable law, generally five years under Polish law
Information may be retained longer when required by law, a court order, an unresolved dispute, fraud prevention, or an active security investigation.
13. Account and Data Deletion
LexaPro AI provides an account-deletion option inside the application.
When account deletion is requested:
The LexaPro AI account is deleted.
Associated personal data is deleted unless retention is legally required.
Authentication access associated with the account is disabled or revoked where applicable.
Local application data is removed where technically applicable.
Deletion requests are processed without undue delay and normally within 30 days.
Important subscription information
Deleting your LexaPro AI account does not automatically cancel an active App Store subscription.
To manage or cancel a subscription:
Open Settings on your iPhone or iPad.
Tap your name or Apple Account.
Tap Subscriptions.
Select LexaPro AI.
Choose the appropriate subscription option.
Apple may continue billing an active subscription until it is cancelled through the device’s subscription settings.
14. Your Privacy Rights
Depending on applicable law, you may have the right to:
Access your personal data
Correct inaccurate or incomplete data
Request deletion of your data
Restrict processing
Object to processing based on legitimate interests
Receive a portable copy of eligible data
Withdraw consent
Lodge a complaint with a data-protection authority
To exercise these rights, contact:
We may need to verify your identity before completing a request.
Users in the European Economic Area may lodge a complaint with their local supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office.
15. Security
We use reasonable technical and organisational safeguards designed to protect personal data, including:
Encrypted network connections
Authentication and access controls
Restricted access to production systems
Limited log retention
Secure handling of API credentials
Security and abuse monitoring
Temporary-file deletion
No electronic system can guarantee absolute security.
16. Children
LexaPro AI is intended for users aged 16 or older.
We do not knowingly collect personal data from children under 16. If we discover that such information has been collected, we will take reasonable steps to delete it.
A parent or legal guardian may contact support@langswap.com regarding a child’s information.
17. Changes to This Privacy Policy
We may update this Privacy Policy when:
Application features change
New service providers are introduced
Data-processing practices change
Legal or regulatory requirements change
The revised policy will be published with an updated effective date. Where required, users will be notified through the application or asked to provide renewed consent.
18. Contact
For privacy questions, account deletion, or data-protection requests, contact:
Adam Szczachor – LexaPro AI
ul. Wira Bartoszewskiego 18
23-400 Biłgoraj
Poland
Email: support@langswap.com