Lexivale

Privacy Policy

Last updated: 3 November 2026

This Privacy Policy explains how Kishoreganj Consultancy LLC, 15020 119th Rd, Jamaica, NY 11434, USA ("we", "us") collects, uses and shares information when you use the Lexivale mobile game (the "Game"). We are the controller of personal information processed through the Game. Our website has its own privacy policy at kgcons.org/legal/privacy.

1. Summary

• You can play without an account; your progress then stays on your device.
• If you sign in with Google, we store your game progress and account details so you can restore them and use online features.
• The Game shows ads from Google AdMob, which uses device identifiers to show and measure ads. Where the law requires it, we ask for your consent first.
• We use Google Firebase to fix crashes and, outside the EEA, UK and Switzerland, to understand how the Game is played.
• We do not sell your personal information and do not share it for anyone else's marketing.
• You can delete your account and data in the Game at any time.

2. Information we collect

a) Information stored on your device. Your progress, coins, hints, settings, Word Journal, daily rewards and streaks are saved on your device. If you don't sign in, this stays on your device and is deleted when you uninstall the Game.

b) Account information (only if you sign in). When you sign in with Google we receive your Google account ID, name, email address and profile picture URL from Google. We store, in Google Firebase: your game progress and Virtual Items, your in-game player name and avatar, your friend code and friends list, gifts sent and received, referral codes and referral progress, promo codes redeemed, achievements and purchase records needed to restore purchases.

c) What other players can see. If you use friends features, players you add as friends can see your player name, avatar, friend code, current level and achievements. They cannot see your email address.

d) Device and usage information. Through Firebase Crashlytics we collect crash reports: an app instance ID, device model, operating system and version, app version and the technical details of the crash. Outside the EEA, UK and Switzerland we also use Firebase Analytics to collect language, country (from IP address) and in-game events such as levels completed, hints used and session length. In the EEA, UK and Switzerland, Firebase Analytics is switched off, and Analytics never uses your advertising ID or shares data for advertising.

e) Advertising information. Google AdMob and its partners may collect your device's advertising ID, IP address (which can indicate approximate location), device and app information, and how you interact with ads. See section 5.

f) Purchase information. Google Play processes payments. We receive purchase confirmations (product, order ID, purchase token, date and status) to deliver and restore purchases and to prevent fraud. We never receive your card or bank details.

g) Information you send us. If you email us, we receive your email address and whatever you include in your message.

We do not collect your precise location, contacts, photos, microphone or camera data.

3. How we use information

• To provide the Game: save and restore progress, deliver purchases and rewards, run daily rewards, friends, gifting, referrals and promo codes.
• To keep it fair and secure: detect cheating, clock manipulation, referral abuse and fraud.
• To improve the Game: understand which levels are too hard or easy, fix bugs and crashes, and plan new content.
• To show ads: serve and measure ads, including personalised ads where you have consented.
• To communicate with you: answer support requests and send the optional daily reminder (a local notification scheduled on your device).
• To comply with law and enforce our Terms of Service.

Legal bases (EEA, UK and Switzerland):

• Contract (providing the Game, your account, cloud save, friends features, purchases and rewards).
• Legitimate interests (keeping the Game secure and fair, preventing fraud, fixing crashes with crash reports, and showing non-personalised ads to fund the free Game). You can object to processing based on legitimate interests by contacting us.
• Consent (personalised ads, and storing or reading information on your device for advertising, collected through Google's consent tool). You can withdraw consent at any time in Settings > Privacy choices.
• Legal obligation (tax and accounting records for purchases).

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. How we share information

We share information only:

• With service providers acting for us: Google Firebase (hosting, sign-in, cloud save, analytics, crash reports), Google Play (purchases) and our web host Cloudflare (lexivale.lootvaultbd.com server used for promo codes, referrals and game settings).
• With advertising partners: Google AdMob and the ad networks it works with, as described in section 5.
• With other players: the profile details listed in section 2(c), only if you use friends features.
• For legal reasons: to comply with law, respond to lawful requests, or protect the rights and safety of players, the public or us.
• In a business transfer: if our business or the Game is sold or reorganised, information may transfer to the new owner under this policy.

We do not sell personal information and do not share it for cross-context behavioural advertising except through AdMob as disclosed here, which you can opt out of (section 5).

5. Advertising and your choices

• Consent: in the EEA, UK and Switzerland, and in other places where the law requires it, the Game asks for your consent through Google's consent tool before personalised ads are shown. You can change your choice at any time in Settings > Privacy choices.
• US state privacy rights: you can opt out of the "sale" or "sharing" of personal information for targeted advertising in Settings > Privacy choices.
• Advertising ID: you can reset or delete your advertising ID in your phone's settings (Settings > Privacy > Ads on most Android devices).
• Remove Ads / Lexivale Pass: buying either removes banner and between-level ads.
• More about how Google uses data from apps: policies.google.com/technologies/partner-sites.

6. Children

The Game is intended for players aged 13 and over, or 16 and over in the EEA, and is not directed at children below those ages. We do not knowingly collect personal information from children below the minimum age. If you believe a child below the minimum age has given us personal information, contact us and we will delete it.

For players under 18 in the UK, we aim to follow the UK Information Commissioner's Age Appropriate Design Code: the Game does not collect precise location, has no chat or public profiles, uses privacy-friendly defaults, and shows personalised ads only with consent.

7. How long we keep information

• Account data and cloud saves: until you delete your account, or after 24 months of inactivity, when we may delete it after notice in the Game where possible.
• Analytics data: up to 14 months (Firebase retention setting).
• Crash reports: up to 90 days.
• Purchase records: as long as needed to restore purchases and as required for tax and accounting law.
• Support emails: up to 2 years.

8. Deleting your data

• In the Game: Settings > Delete my account permanently deletes your account, cloud save, friends list, gifts, referral progress and achievements stored with us, within 30 days. Purchase records we must keep for legal reasons are retained, separated from your profile.
• Without the Game: email us from the Google account you signed in with, subject "Lexivale data deletion". This is also the deletion address listed on Google Play: lexivale.lootvaultbd.com/privacy#delete.
• Data only on your device is deleted when you uninstall the Game or clear its data.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information; to object to or restrict certain processing; to withdraw consent at any time; and to opt out of targeted advertising. California and other US state residents have the right to know what we collect, to delete it, to correct it, to opt out of sale or sharing, and not to be discriminated against for using these rights. EEA and UK residents may also complain to their local data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, the authority in the country where you live or work (listed at edpb.europa.eu).

To use these rights, use the in-game settings or email us. We will verify your request (for example, by asking you to write from your signed-in Google account) and respond within the time the law requires. An authorised agent may make a request for you with proof of authorisation.

10. Security

Data is encrypted in transit. Account data is stored with Google Firebase, which uses industry-standard security. Access to our admin tools is restricted and protected by two-factor sign-in. No system is completely secure, so we cannot guarantee absolute security.

11. International transfers

We are based in the United States and our service providers may process information in the United States and other countries. For players in the EEA, UK and Switzerland, transfers to the United States are protected by our providers' certification under the EU-US Data Privacy Framework (and its UK Extension and Swiss framework) where applicable, and otherwise by the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. You can ask us for more information about these safeguards.

12. Our representatives in the EU and UK

Because we are based outside the EU and UK, we have appointed representatives under Article 27 of the GDPR and the UK GDPR. You and data protection authorities may contact them about any data protection matter:

• UK representative: Sakhawat Hossain, 25A Balaam Street, London E13 8EB, United Kingdom. Email: mehrinmufrat@gmail.com.
• EU representative: Mehrab Araf, Via Ippolito Nievo, 23, 80014 Giugliano in Campania (NA), Italy. Email: mufratmehrinarnob@gmail.com.

13. Changes to this policy

We may update this policy. We will change the date at the top, and show significant changes in the Game before they take effect.

14. Contact

Kishoreganj Consultancy LLC, 15020 119th Rd, Jamaica, NY 11434, USA

Email: kishoreganjconsultancy@gmail.com (subject: "Lexivale privacy")

Website: lexivale.lootvaultbd.com/privacy