Privacy Policy
Effective October 30, 2026
Lexis is a free app for reading the Bible in Hebrew, Greek and Latin and studying its vocabulary. It is available as a web app at www.lexis-bible.com and as an Android app. Lexis is made and run by Joshua Ewing (“we”, “us”). This policy explains what information Lexis handles, why, and the choices you have. It applies to both the web app and the Android app.
- You can use Lexis without an account. Your decks then stay on your device.
- An account is optional. It stores your name, email address and study data so your decks are backed up and synced between devices.
- There are no ads, no analytics and no tracking, and Lexis has no third-party code in it.
- We do not sell, rent or share your information.
- You can delete your account and all of its data at any time.
Contents
- Using Lexis without an account
- Information stored with an account
- Information collected automatically
- Cookies and device storage
- How we use information
- Sharing
- Security
- How long information is kept
- Your choices and rights
- Deleting your account
- Children
- Where information is processed
- Changes to this policy
- Contact
1. Using Lexis without an account
Without an account, Lexis keeps your decks, flashcards, review history and settings only on your device: in your browser’s storage for the web app, or in the app’s private storage for the Android app. This information is not sent to us.
The Bible texts, dictionaries and parsing data are downloaded to your browser or come built into the Android app. Looking up words, searching, reading and studying all happen on your device. We do not receive which passages you read or which words you look up.
2. Information stored with an account
If you create an account, the Lexis server stores the following:
| Information | Why it is stored |
|---|---|
| Email address | It is your sign-in name, and it lets us identify your account when you contact us. Lexis does not send marketing email. |
| Name | It is shown on your Profile. You can change it at any time. |
| Password | It is stored only as a salted scrypt hash, which cannot be turned back into your password. We never see your password. |
| Study data | Your decks, cards, card settings and review history are stored so they are backed up and kept in sync on every device you sign in on. |
| Backup history | Up to 30 earlier copies of your study data are kept, about one per hour, so you can restore your decks after a mistake. |
| Sign-in sessions | For each device you sign in on, we store a session identifier (only as a hash), when the session started, when it was last used, and a device description taken from your browser or app (for example “Chrome on Windows” or “Lexis app on Pixel 7, Android 14”). These keep you signed in and appear in the Devices list on your Profile. |
| Account dates | When the account was created and when you last signed in. |
The account database does not store your IP address, location, contacts or any other information from your device.
3. Information collected automatically
Like any website, the Lexis server receives some technical information with each request: your IP address, the date and time, the page or file requested, and your browser’s or app’s user-agent string (which names the browser or app and the operating system). It receives this when you load the web app. The Android app also contacts the server when it starts, to check whether you are signed in, and whenever it backs up or syncs your decks.
- The web server writes this information to access logs. They are used only to keep the service secure and working and to fix problems, and they are deleted automatically after about two weeks.
- To stop password guessing, the server counts recent sign-in attempts per IP address and per email address. These counters are kept only in memory, never written to disk, and cleared within 15 minutes.
Lexis does not use analytics services, advertising networks, crash-reporting services or any other tracking tools.
4. Cookies and device storage
The web app sets one cookie, lexis_sid, and only when you sign in. It keeps you signed in. It is marked HttpOnly and Secure, it is not used for tracking, and it is removed when you sign out. The Android app stores the same session identifier in its private storage instead of a cookie.
The web app also uses your browser’s storage (IndexedDB, local storage and the service-worker cache) to keep the Bible texts, your decks and your settings on your device so Lexis works offline. You can clear this storage in your browser settings. Doing so removes any decks that are not backed up to an account.
5. How we use information
Information is used only to:
- create and run your account and sign you in;
- back up your study data, sync it between your devices, and restore earlier copies when you ask;
- keep the service secure, prevent abuse and fix problems;
- answer messages you send us.
We do not use your information for advertising or profiling, and we do not use it to train machine-learning models.
6. Sharing
We do not sell, rent or trade your information, and we do not share it with anyone for their own purposes. It is handled by others only in these cases:
- Hosting. The Lexis server runs on a rented server. The hosting company operates the hardware the data is stored on, but it does not use the data.
- Legal requirements. We would disclose information only if the law requires it, for example under a valid court order.
- Donations. The “Support Lexis” button opens Venmo. Any donation is handled by Venmo under its own privacy policy, and Lexis does not receive your payment details.
- Android device backup. If backup is turned on for your Android device, Android may include the Lexis app’s data in your device backup to your Google account, under Google’s privacy policy. You control this in your device settings.
7. Security
All communication with the Lexis server is encrypted with HTTPS. Passwords and session identifiers are stored only as hashes. Sign-in attempts are rate-limited, and the server rejects requests from other websites. No system is perfectly secure. If we learn of a breach that affects your information, we will notify affected users as the law requires.
8. How long information is kept
- Account information and study data are kept until you delete your account.
- Backup history keeps only the latest 30 copies; older copies are deleted automatically.
- A sign-in session ends when you sign out, when you sign out other devices, or after 60 days without use.
- Server access logs are deleted after about two weeks.
- When you delete your account, its information is removed from the Lexis database immediately. If a copy exists in a server backup file, it is removed when that backup is replaced, within 30 days.
9. Your choices and rights
Wherever you live, you can do the following:
- See your data. Your Profile shows your account details, devices and study statistics.
- Get a copy. Use “Export backup” to download your decks and review history as a file.
- Correct it. You can change your name and password on your Profile. Email us to change your email address.
- Delete it. You can delete your account yourself (see section 10), or ask us to.
- Ask questions or object. Email us about any use of your information.
We answer requests within 30 days. For requests made by email, we may ask you to write from the address on your account so we know the request is yours. If you live in the European Economic Area or the United Kingdom, you can also complain to your local data-protection authority. We process account data because it is needed to provide the account you asked for, and access logs because we have a legitimate interest in keeping the service secure.
10. Deleting your account
You can delete your Lexis account and all of its data at any time. You do not need to install the app to do it.
In the web app
- Go to www.lexis-bible.com and sign in.
- Open the Profile tab.
- Choose Delete account and enter your password to confirm.
In the Android app
- Open the Profile tab.
- Choose Delete account and enter your password to confirm.
By email
Write to [email protected] from the email address on your account, with the subject “Delete my Lexis account”. We will delete the account within 30 days and reply to confirm.
What is deleted: your email address, name, password hash, study data, backup history and all sign-in sessions. Deleting the account also removes the copy of your decks from the device you delete it from. Use “Export backup” first if you want to keep a file of your decks.
11. Children
Lexis is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email us and we will delete it.
12. Where information is processed
Lexis is run from the United States. If you use Lexis from another country, your account information is processed in the United States or wherever the Lexis server is hosted.
13. Changes to this policy
If this policy changes, the new version will be posted on this page with a new effective date. If a change significantly affects how your information is used, we will also announce it in the app before it takes effect.
14. Contact
For questions about this policy or your information, email [email protected].