Privacy Policy
Last updated 21 September 2026
Who we are
Lex Academy is operated by SoftKarrot. This policy covers the Lex Academy Android app and the website at lexacademy.app. When this page says “we”, it means SoftKarrot; when it says “you”, it means the person using Lex Academy.
If you want anything on this page explained, or you want a copy of what we hold about you, email support@lexacademy.app.
What we collect, and why
Everything below starts only once you sign in with your phone number.
| Data | Needed? | What it is for |
|---|---|---|
| Phone number | Required | It is your sign-in identity: we text a one-time code to it. Other members only ever see its last five digits, masked, so they can tell two people with the same name apart. |
| Name, username and Lex ID | Required | Your name and profile photo are shown to other members when they search for you or you connect. Your username and Lex ID let people find you exactly. The username and Lex ID are generated by us. |
| User ID | Required | The internal account number that ties your profile, connections, notifications and credits together. |
| Email address | Optional | Only if you add one. We confirm it with a code, and may use it to send you account notifications. |
| Profile photo | Optional | Only if you upload one. Stored in our Amazon S3 storage and shown to other members next to your name. |
| Division, district and upazila | Optional | The area you choose from a list on your profile. We never read your device location. |
| Street address | Optional | Only if you enter one on your profile. |
| Date of birth | Optional | Only if you enter one on your profile. |
| WhatsApp number | Optional | Only if you add one to your profile. |
| Bio, occupation and interests | Optional | What you choose to say about yourself, and the occupations and learning interests you pick from our lists. |
| Connections and connection requests | Optional | Who you have connected with, and requests you have sent or received — so your network works. |
| Blocks and reports | Optional | People you block, so they stay hidden from you; and any report you file about another member, so our team can review it. |
| Notifications | Required | The in-app notification history, such as a new connection request. |
| Push notification token | Optional | Only if you allow notifications. It identifies your device so a notification can reach it. |
| Credit balance and purchase records | Optional | Only if you buy or use credits: your balance, a ledger of credits added and spent, and an invoice for each purchase (with your name, Lex ID, phone and email as billed-to details). |
What we do not collect
- Your device location, precise or approximate
- Your contacts, calendar, SMS messages or call logs
- Audio or video recordings — the app does not use your microphone
- Health or fitness data
- Your browsing history outside Lex Academy
- Card numbers, bank details or mobile-wallet PINs — we never see them
- The list of other apps installed on your device
- Advertising identifiers, analytics or crash-reporting data (the app ships no analytics, advertising or crash-reporting SDK)
Who else sees it
We do not sell your data, and we do not share it with anyone for their own purposes.
- Other Lex Academy members — your name, profile photo and the masked last five digits of your phone number, when they search for you or see a request from you. Anyone who knows your username or Lex ID can find you by it. Your other profile details are visible to you and to our team.
- Our team — to run the service, support you, and review reports.
- The companies that run our infrastructure — Amazon Web Services stores the data and sends our emails; an SMS gateway delivers your sign-in codes; Google Firebase Cloud Messaging delivers push notifications to your phone. They process it on our instructions and for no purpose of their own.
- A payment provider — only if you buy credits, to process that payment.
How it is protected
Everything travelling between your device and our servers is encrypted in transit (HTTPS and WSS). Data is stored on Amazon Web Services in the Asia Pacific (Singapore) region. Profile photos sit in private storage and are served through short-lived links. Access to the admin tools is restricted to our staff accounts.
We sign you in with a one-time code sent by SMS, so there is no password of yours for anyone to steal or reuse.
Blocking and reporting
You can block any member from the app. While a block is in place, neither of you appears in the other’s search results, and neither of you can send the other a connection request; any existing connection or pending request between you is removed. You can also report a member, with a reason, and our team will review it.
Deleting your account
You can delete your account yourself, at any time, from inside the app: open Profile, scroll to the bottom and tap Delete account. If you no longer have the app, use our account deletion page.
Deleting removes your profile and everything on it, your profile photo, your connections and connection requests, your blocks, reports you filed or that were filed about you, your notifications, your push tokens and your sign-in sessions. This happens immediately and cannot be undone. Any unused credit balance is lost.
One thing is kept: the record of credit purchases and credit use — the credit ledger, invoices and payment records — because we are required to keep accurate financial records for accounting and tax purposes. We remove the personal details from them first: the name, Lex ID, phone number and email on each invoice are erased and replaced with a placeholder. What remains is amounts, dates and an internal account number that no longer leads back to you.
How long we keep things
While your account is open, we keep your data for as long as you keep using Lex Academy. When you delete your account, everything listed above goes at once, apart from the anonymised financial records. Notification device tokens expire on their own after 180 days of not being refreshed, and sign-in sessions expire on their own.
Children
Lex Academy is intended for people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, email us and we will delete it.
Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the date at the top. Significant changes will also be announced in the app.
Questions about this page? Email support@lexacademy.app.