Privacy Policy
1. Who we are
This Privacy Policy explains how LEXUN ("LEXUN", "we", "us") handles personal data in connection with the LEXUN website and application at lexun.co.uk (the "Service"). LEXUN is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact for privacy matters: privacy@lexun.co.uk.
2. The data we process
a) Stored on your device only (default)
By default the Service runs entirely in your browser. The following are kept in your browser's local storage and are not transmitted to us: the decisions and questions you enter, generated predictions and probabilities, outcomes you report, goals, preferences (language, theme), and your local track record. You can export or erase all of this at any time from the app's settings.
b) Data you send us only if you choose to sync or sign in
| Data | Why | Lawful basis |
|---|---|---|
| Email address | Passwordless sign-in and account recovery | Consent / performance of a contract |
| Predictions & reported outcomes (if you opt in to sync) | To back up your record and improve calibration | Consent |
| Aggregated, anonymised outcome statistics | To measure and improve accuracy | Legitimate interests |
c) Technical data
Our hosting provider processes standard server logs (e.g. IP address, request time, user-agent) for security and reliability. Where used, IP addresses are minimised/redacted in application logs.
3. What we do not do
- We do not sell or rent your personal data.
- We do not use advertising or cross-site tracking cookies.
- We do not build advertising profiles or share individual data with data brokers.
- Aggregate statistics are k-anonymised so no individual can be identified.
4. Your rights under UK GDPR
You have the right to: access your data; have it corrected; have it erased ("right to be forgotten"); restrict or object to processing; data portability; and to withdraw consent at any time. Because most data is on your device, you can exercise access, portability and erasure yourself instantly via the app's Settings → export / erase. For any server-held data, email privacy@lexun.co.uk and we will respond within one month.
You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.
5. Retention
Local data persists in your browser until you clear it. Server-held data (if you sync) is kept while your account is active and deleted on request or after a reasonable period of inactivity.
6. Security
The Service is served over HTTPS. Sensitive fields in any server storage are encrypted at rest, sessions are revocable, and the site sends strict security headers. No system is perfectly secure, but we take appropriate technical and organisational measures.
7. Children
The Service is not directed at children under 13 and we do not knowingly collect their data.
8. International transfers
Where server processing occurs outside the UK, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
9. Changes
We may update this policy; the "last updated" date will change and material changes will be highlighted in the app.