Lexture Privacy Policy

1. Scope and controller

This policy covers Lexture reading, dictionaries, share extensions and support on iPhone, iPad and Mac. Hangzhou Clearflux Information Technology Co., Ltd. (Clearflux, “we”) provides the service. Contact us at support@clearflux.net about privacy.

2. Reading content and local processing

Imported books, articles, covers and images, library organization, reading positions, time and completion records, notes, highlights, vocabulary states, saved cards and preferences are primarily stored on your device to support reading, search and library management. After dictionary installation, ordinary lookups run locally; looking up a word does not send your book text or reading history to our dictionary servers.

Some definitions include AI translations or editorial revisions. Providing those definitions does not require sending your books, notes or lookup context to a generative AI service.

3. iCloud and nearby sync

When system settings permit and iCloud is available, supported book files, reading data and preferences automatically sync between your devices through Apple iCloud, private CloudKit databases or key-value storage. We do not store this private reading content in our own reading cloud or directly browse your private CloudKit database. Apple processes it under its privacy policy and the service rules for your account region.

Nearby Device Sync discovers devices on your local network and encrypts synchronization of reading positions, notes, marks and related data between verified devices using the same iCloud account. You can disable it in Lexture and revoke Local Network access in system settings. Disabling nearby sync does not disable iCloud sync; manage iCloud through your system account and iCloud settings.

Font, size, margins, colour mode and other device-layout choices are saved locally and are not synchronized to other devices. Following another device’s page position is optional and initially off. Local Network permission and Nearby Device Sync must be enabled to use that option.

4. Import, websites, sharing and notifications

File import reads files you choose or open. The share extension temporarily stores selected website addresses, text, images and import status in a local container shared with the app. Importing a page or downloading its images may send your IP address, requested URLs and necessary request information to the selected website or image server under its own policies. This does not upload the article to us.

When you export, share or open content in another app, the recipient you choose processes that content. If you allow notifications, the share extension can notify you about article-save status; disable notifications in system settings. These functions do not require access to contacts, precise location, your microphone or your entire photo library.

5. Dictionary verification, purchases and delivery

At startup, during update checks, entitlement verification or downloads, online dictionary services may process Apple-signed app and purchase proofs, transaction and original transaction identifiers, product identifiers, expiry and revocation status, a service-side identity associated with these proofs, device public keys or App Attest verification data, session and request identifiers, selected dictionary languages, components and versions, download progress or byte ranges, IP addresses and necessary security logs. We use this to verify authentic apps and purchase entitlements, deliver dictionary keys and content, rate-limit requests and prevent abuse, not for advertising profiles. Device private keys stay in secure device storage and are not sent with download requests.

App Store and Apple StoreKit handle payment, subscriptions, renewals, cancellations and refunds. Clearflux does not receive card numbers, Apple account passwords or complete billing details. Necessary dictionary infrastructure and providers are described in section 8.

For free trials, we process Apple-verified trial transactions and retain the earliest verified claim date, an Apple-derived service account identifier, the verified app installation identity, dictionary pair, installation request identifiers, download count and completion status. One trial account may download one dictionary pair once on one device; an interrupted transfer resumes under the same request. Paid downloads are limited per account, device installation and dictionary pair to three downloads of the same content in any rolling 30-day period. Removing a pair starts a 24-hour cooldown when its deletion is acknowledged by the service. Official content updates are accounted separately. Active installation and usage records are retained through their full quota window, normally for up to 60 days; trial consumption records remain associated with the service account to prevent repeat trials. The account identifier is derived from Apple-signed app transactions, not an Apple account email address or password; installation identities are not permanent hardware serial numbers.

6. Apple verification and service identifiers

We do not register your Apple Account email, password or hardware serial number. The dictionary server derives a pseudonymous service identifier from an Apple-signed app transaction identifier using a keyed hash, and links it to verified purchase/original transaction identifiers, entitlement status, device verification keys and installation identifiers, language pairs, download/deletion times and quota records. They support entitlement verification, purchase restoration, one-time trial enforcement, download delivery and abuse prevention. Apple and network providers also process the technical request data described above.

7. Support

Contact support@clearflux.net for product, purchase or privacy questions. Send only information relevant to the issue; do not include account passwords, full payment details or unrelated private content.

We use the support email and material you choose to send only to respond, investigate problems and handle necessary disputes. You may remove any prefilled app, version, device model, OS or region fields before sending. Your books, notes and reading history are not automatically attached.

8. Providers, disclosure and international processing

Lexture’s online dictionary infrastructure uses Cloudflare, Inc. (United States) and hosted delivery servers to verify credentials and deliver dictionaries, not to host your reading library. Necessary authentication, request and security information may be processed through Cloudflare’s global infrastructure: https://www.cloudflare.com/privacypolicy/ . Relevant providers process information for their actual service roles; we do not sell personal information or provide private app content to advertisers. Where our disclosures to third parties or cross-border processing require notices, consent or other safeguards by law, we will meet the applicable requirements before the relevant transfer. Contact support@clearflux.net for the applicable recipient, processing region and rights procedure.

9. Advertising, analytics and security

The current app has no third-party advertising, behavioral analytics or cross-app tracking SDKs and does not target advertising using reading content. System diagnostics and operational or security logs are not advertising tracking. We use encrypted transport, device proofs, access controls and dictionary key protection, but no system can guarantee absolute security.

10. Retention and deletion

Local reading content remains until you delete it or storage management removes it. Optimize Device Storage may remove local book files that can be downloaded again from iCloud; it does not delete the cloud copy. Deleting a book removes the book and related notes, but the current implementation preserves historical reading time and completion records. Independent vocabulary states are not automatically cleared by deleting one book. Deleting downloaded dictionaries does not delete books, notes or vocabulary states.

Device and purchase records support ongoing verification, purchase restoration and security. Sessions and download authorizations expire, but expiry does not mean every backend record is immediately physically deleted. Reports and support records support investigation, fix verification and necessary dispute handling. We retain personal information only as needed for these purposes or legal obligations; contact support to request deletion of unnecessary records. Lawful retention requirements and backup cycles may affect deletion.

iCloud deletion propagates when networking and sync work normally. Uninstalling the app does not automatically cancel a subscription, remove all iCloud copies or delete server-side entitlement and report records. You and Apple manage system backups through system settings.

Support emails and attachments are retained only as long as needed to handle support requests, related disputes or legal retention requirements. Deleting data in the app does not delete emails already sent to support.

11. Choices and rights

Manage or delete content in the app, disable nearby sync or automatic dictionary updates, and manage iCloud, notifications and Local Network access in system settings. Turning off automatic updates does not stop all dictionary entitlement requests. Reading does not require a separate email account with us; Apple manages Apple and App Store accounts.

For personal information held by Clearflux, email support@clearflux.net to request access, a copy, correction, erasure, withdrawal of consent or an explanation. We verify only the identity and scope necessary for the request, respond within the applicable legal period and explain any lawful refusal or retention. Applicable portability, restriction, objection and complaint rights are also available. Withdrawal does not invalidate earlier lawful processing.

12. Legal grounds and regional rights

In mainland China, necessary service delivery, purchase verification and requested support rely on the grounds available under Article 13 of the Personal Information Protection Law, including contract necessity or legal duties where applicable. Where EU/EEA rules apply, contract performance, legal duties and proportionate security interests may apply to their respective activities. Optional processing that needs consent is presented when enabled, with separate consent where required. Contact support@clearflux.net using the rights procedure in this policy; applicable access, correction, erasure, portability, restriction, objection and complaint rights remain available.

13. Children

Lexture is not specifically directed at children. Minors should use it with guardian guidance. Where we need to process personal information of a child under fourteen, we will obtain guardian consent and provide protections as required by applicable law. Guardians can contact us with concerns.

14. Updates and contact

We update this policy and its date when functions, services or processing change. Material changes will be communicated through the app, website or another reasonable channel; any required renewed consent will be handled separately. Contact: Hangzhou Clearflux Information Technology Co., Ltd., support@clearflux.net.

浙江省杭州市余杭区仓前街道良睦路1399号4幢301-66室，中国 / Room 301-66, Building 4, No. 1399 Liangmu Road, Cangqian Subdistrict, Yuhang District, Hangzhou, Zhejiang, China.