LEXA Privacy Policy

Last updated: 13 September 2026

LEXA Privacy Policy

Last Updated: 13 September 2026

Blyzai ("us", "we", or "our") operates the LEXA mobile application ("the Application"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Application.

1. Information We Collect

1.1 Account Information

  • Parents/Guardians: Email address, name, and authentication method (Google, Apple, or email).
  • Students: Name, grade level, and selected avatar. Students access via PIN, with no email required.

1.2 Educational Usage Data

  • Subjects studied (Mathematics, Physics & Chemistry, History)
  • Duration of study sessions
  • Academic progress and achievements
  • Interactions with the AI tutor (questions asked)

1.3 Technical Data

  • Device type and operating system
  • Anonymous identifiers for analytics
  • Error logs for service improvement

1.4 Subscription Data

  • Subscription status (BASIC, PLUS, TUTOR)
  • Transaction history (managed by Google Play/Apple App Store)

1.5 Beta Access Requests

When an adult requests a beta place from lexa.blyzai.com we collect: their name and contact email, the student's year, the device type and, optionally, the city and how they heard about us. We also store the page language, the browser and the date. We ask for no data about the child beyond their year.

  • Legal basis: explicit consent, collected with a non-pre-ticked checkbox.
  • Purpose: to get in touch about the beta place. Nothing else.
  • Location: Firestore in the “europe-west1” region, in a project separate from the one holding application data.
  • Notification: on receiving each request we generate an internal notification containing no personal data: only the stated year and an internal reference to the record.
  • Retention: until the beta programme closes, or until erasure is requested by writing to lexa@blyzai.com.
  • Sharing: none with third parties for commercial purposes.

1.6 Contact Enquiries

When you write to us through the contact form on blyzai.com we collect your name, your email, your company if you provide it, the subject and the message. We also store the page language, your browser and the date.

  • Legal basis: your consent, given through a checkbox that is not pre-ticked.
  • Purpose: to answer your enquiry. Nothing else.
  • Location: Firestore in the europe-west1 region, in a project separate from the one holding LEXA application data.
  • Internal notice: on each enquiry we generate an internal notification that contains no personal data: only the subject and a reference to the record.
  • Retention: until the enquiry is resolved, or until you request deletion by writing to lexa@blyzai.com.
  • Sharing: none.

2. How We Use Information

We use the collected data to:

  • Provide the educational service: Personalize the learning experience and adapt the AI tutor's responses to the student's level.
  • Inform parents: Display the student's academic progress on the parent dashboard.
  • Improve the Application: Analyze aggregated and anonymous usage patterns to enhance the experience.
  • Manage subscriptions: Process payments and provide access to corresponding features.
  • Communications: Send important service-related notifications (never advertising to students).

3. Data Processing by Artificial Intelligence

3.1 Local AI (BASIC Tier)

  • The AI model runs entirely on the user's device.
  • Conversations are not sent to external servers.
  • Data remains on the user's device.

3.2 Cloud AI (PLUS and TUTOR Tiers)

  • Queries are processed using the Google Gemini API.
  • Data is transmitted in encrypted form (TLS 1.3).
  • Google processes data according to its Gemini API Privacy Policy.
  • We do not store conversation content on our servers beyond the active session.

4. Protection of Minors

LEXA is designed for high school students (ages 12-18). We implement the following measures:

  • Parental consent: During the private beta, access to LEXA is granted only to families who have expressly requested it through lexa.blyzai.com, with the consent of a parent or guardian. Registration inside the application may be completed by the student. Adult-initiated sign-up is planned ahead of public launch.
  • No advertising: Students never see ads within the Application.
  • No social networks: There are no user-to-user chat features or connections to social media.
  • Appropriate content: All content is designed to be educational and age-appropriate.
  • Parental control: Parents have full visibility into the Application's usage.

5. Data Sharing

We do not sell personal data. We only share information in these cases:

| Recipient | Purpose | Data Shared | |---|---|---| | Google Firebase | Authentication & database | Email, UID, profile data | | Google Gemini API | AI Processing (PLUS/TUTOR) | Educational queries | | RevenueCat | Subscription management | User ID, subscription status | | Google Analytics | Anonymous usage analysis | Aggregated anonymous events |

All our providers comply with GDPR and have data processing agreements in place.

6. Storage and Security

  • Location: Data is stored on Google Cloud servers in the European Union. LEXA application data resides in the European multi-region “eur3”; beta access requests collected from the website reside in the “europe-west1” region.
  • Encryption: All data is encrypted in transit (TLS) and at rest (AES-256).
  • Access: Only authorized Blyzai personnel have access to data, under strict controls.
  • Retention: We retain data as long as the account is active. The application does not yet allow deleting the account from within: to request erasure, write to lexa@blyzai.com and we will delete the data within 30 days at most. In-app deletion is planned ahead of public launch.

7. Your Rights (GDPR)

As a user in the European Union, you have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request the deletion of your data ("right to be forgotten").
  • Portability: Receive your data in a structured format.
  • Objection: Object to the processing of your data.
  • Restriction: Restrict processing under certain circumstances.

To exercise these rights, contact us at: privacy@blyzai.com

We will respond to your request within 30 days.

8. Cookies and Similar Technologies

The mobile Application does not use cookies. for analytics, we use anonymous identifiers that do not personally identify users.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

  • Notice within the Application
  • Email to the registered address (for parents/guardians)

We encourage you to review this policy periodically.

10. Contact

If you have questions about this Privacy Policy or our data practices:

Blyzai
Email: privacy@blyzai.com
Website: https://blyzai.com

For data protection complaints, you can also contact the Spanish Data Protection Agency (AEPD): https://www.aepd.es

11. Legal Basis for Processing

| Purpose | Legal Basis | |---|---| | Provision of service | Performance of a contract | | Service improvement | Legitimate interest | | Service communications | Performance of a contract | | Anonymous analytics | Legitimate interest | | Marketing (parents only, opt-in) | Consent |

This policy complies with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).