Privacy Policy
Last updated: October 20, 2026
This policy explains what personal information Lexn.ca collects, why we collect it, who we share it with, and the choices you have.
Lexn.ca is operated by Iscarus Industries, a business registered in Ontario, Canada ("Lexn", "we", "us"). We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Privacy contact: Our Privacy Officer is responsible for this policy and can be reached at support@lexn.ca (subject line "Privacy").
The short version
- We collect what we need to run your account, your exams, your purchases and the community.
- Your exam answers are sent to an AI provider to generate feedback. They are not published, and our providers may not use them to train their AI models.
- Study Circles posts are public and can appear in search engines.
- We use limited analytics, including session recordings with everything you type hidden, to improve the site. You can turn this off at any time. We also use error monitoring to keep the site working.
- We never sell your personal information.
- Our main database is in Canada. Some of our service providers store or process data outside Canada, mainly in the United States.
- You can access, correct, download or delete your information. Just ask.
1. What we collect
Information you give us
- Account details: name, email address and password. If you sign in with Google, we receive your name, email address and, if Google provides it, your profile picture.
- Exam activity: your answers, drafts saved by auto-save, time spent, writing pace (Pace Tracker data), feedback bands and the feedback generated for you.
- Study Circles: your display name, posts, replies and flairs, and any reports you submit.
- Purchases: the plan you bought, dates, amounts and billing country or province for tax purposes. Card details go directly to Stripe; we never receive or store your full card number.
- Support messages: anything you send to support@lexn.ca.
- Referrals: who referred you, and who you referred.
Information collected automatically
- Technical data: IP address, browser and device type, pages visited, and the dates and times of your activity.
- Usage records: for example, when you downloaded a study guide. We use these records for refund eligibility and to protect our content.
- Analytics data: pages visited, page speed, the website or campaign link that brought you here (website name and campaign tags only), a few actions (such as sign-ups; practice exams, with the subject and whether the attempt was free or paid; checkout and completed purchases, with the product, the subject for guide purchases and, for purchases, the list price only; and some actions in the Library and referral program), and your approximate location (city, province or region, and country), and session recordings of how you use most pages (with typing, personal details and exam content hidden). See Section 7.
- Error reports: technical details about errors you run into. See Section 7.
- Cookies and similar technologies: see Section 7.
2. Why we use it
| Purpose | Information used |
|---|---|
| Create and secure your account | Account details, technical data |
| Run the Exam Simulator and save your work | Exam activity |
| Generate AI feedback on your answers | Your answers and the question they respond to |
| Process payments, taxes and refunds | Purchase data (through Stripe) |
| Deliver and watermark study guides | Email address, download records |
| Host Study Circles and moderate it | Posts, display name, reports |
| Run the referral program and prevent abuse | Referral records, technical data |
| Answer support requests | Support messages, account details |
| Fix errors and improve the Service | Usage and technical data, error reports; exam answers used to improve our questions, rubrics and feedback |
| Understand how the site is used, so we can improve it | Analytics data (you can turn this off — see Section 7) |
| Send service emails (receipts, security, important changes) | Email address |
| Send tips, updates and offers in the future | Email address, only after you consent; we do not currently send marketing emails |
We do not use your information for purposes other than these without asking you first, unless the law requires or permits it.
3. Consent
When you create an account, you consent to the collection and use described in this policy. We do not currently send marketing emails. If we send them in the future, we will ask for your consent first, and every marketing email will have an unsubscribe link.
You can withdraw consent at any time, subject to legal or contractual limits. If you withdraw consent to something the Service needs in order to work, we may not be able to provide the Service. For example, we cannot generate AI feedback without processing your answers.
4. AI feedback
When you submit an exam, including an exam submitted automatically when time runs out, we send each of your answers to a third-party AI provider, which generates feedback and returns it to us. With each answer we send the question, its rubric and model answer, and a summary of your writing pace.
- Before sending, we remove your name, email address, phone number and account identifiers. We cannot detect every personal detail you might type, so please do not include personal or confidential information in your answers.
- We use the provider's commercial API. The provider does not use this data to train its models.
- The provider normally deletes this data within 30 days. It may keep it longer only in limited cases, such as when the law requires it or to investigate misuse of its service.
- AI feedback is part of every exam you submit. If you do not want an answer sent, do not submit it.
5. Who we share it with
We share personal information only with service providers who help us run Lexn. They may use it only to provide services to us and must protect it. They include:
- Supabase: database, authentication and file storage
- Vercel: website hosting
- Stripe: payments and tax calculation
- Anthropic: AI feedback generation
- Resend: sending account and service emails
- PostHog: website and product analytics, unless you turn it off (see Section 7)
- Sentry: error monitoring (see Section 7)
- Google: sign-in, if you choose "Sign in with Google"
We may also disclose information when the law requires it, to protect our rights or users' safety, or to a successor if the business is transferred or incorporated. In any such transfer, the successor must continue to protect your information under this policy.
Study Circles is public by design. Your display name and posts can be seen by anyone and may be indexed by search engines.
We never sell your personal information.
6. Storage outside Canada
Our main database and file storage (Supabase) are hosted in Canada. Some of our other service providers store or process information outside Canada, mainly in the United States. This includes PostHog and Sentry, which process analytics and error data in the United States. While your information is there, it is subject to the laws of that country, and its authorities may be able to access it. We choose providers with strong security practices and contractual protections.
7. Cookies, analytics and error monitoring
We use essential cookies to keep you signed in and secure your session. The Service cannot work without them.
Analytics. We use PostHog to understand how the site is used, so we can improve it. It records the pages you visit (the page address only, without search terms or other details), when you leave a page, and page-speed measurements. If you arrived from another website or a campaign link, it also records the name of that website (not the full address) and the campaign tags in the link (such as source, medium and campaign name). It also records a few actions: sign-ups; practice-exam starts and submissions and viewing feedback, with the subject and, for starts and submissions, whether the attempt was free or paid; viewing pricing; starting checkout and completed purchases, with the product, the subject for guide purchases and, for purchases, the list price only; and some actions in the Library and referral program. If you are signed in, this is linked to an internal account ID, never your name or email address. It never records your exam questions or answers, essays or payment details. PostHog stores its settings in your browser's local storage, not in cookies.
Session recordings. On most pages, PostHog also records how you use the page: the layout, the text on the page, mouse movement, clicks, scrolling and the pages you move between. This shows us where the site is confusing or broken. Everything you type is hidden in recordings (posts you publish in Study Circles are public anyway), and so are your name, email address, your exam answers and the written feedback on them. We never record the exam room, your account and billing pages, or our admin pages. Recordings are linked only to an internal account ID, are kept for 30 days and then deleted, and stop whenever analytics is off, including when your browser sends a Do Not Track or Global Privacy Control signal. Heatmaps and automatic click tracking stay switched off.
We do not store your IP address for analytics. PostHog uses it briefly to estimate your approximate location (city, province or region, and country) and then discards it.
Analytics is on by default. You can turn it off at any time with Analytics preferences in the site footer or in your account settings. Your choice is saved in your browser on that device, so set it on each device you use. If your browser sends a Do Not Track or Global Privacy Control signal, analytics is turned off automatically. Turning analytics off stops future collection but does not erase what was already collected; to ask about that, contact our Privacy Officer.
Error monitoring. We use Sentry to find and fix technical errors. When something breaks, Sentry receives the type of error, a shortened and cleaned-up error message, where in our code it happened, the app version, and our internal account ID if you are signed in. We remove email addresses, exam text and payment details before anything is sent, and Sentry is set not to store IP addresses. We cannot guarantee every unexpected error is free of personal details, so we treat these reports as personal information. Error monitoring keeps the Service working, so it stays on even if you turn analytics off.
Blog videos make no third-party request before you click to play. After you click, the video iframe loads from www.youtube-nocookie.com.
We do not sell data to advertisers.
8. How long we keep it
- Account and exam data: for as long as your account is open. When you delete your account, we delete or anonymize your personal information promptly. Some copies may remain for a limited time in backups and in our service providers' systems until they expire.
- Purchase and tax records: kept as long as tax law requires, generally seven years.
- Study Circles posts: deleting your account removes your posts or anonymizes them as "Deleted user". Replies from other people may remain so that threads still make sense.
- Analytics and error records: kept for a limited time under our providers' retention settings. Session recordings are deleted after 30 days. Deleting your account does not automatically erase them, but they are linked only to an internal account ID, not your name or email address.
- Backups: deleted data may remain in backups for a limited time until those backups expire.
9. Security
We protect your information with reasonable safeguards, including encrypted connections (HTTPS), encryption of stored data by our providers, access controls, and limiting access to people who need it.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.
10. Your rights
You can ask us to:
- give you access to the personal information we hold about you, or a copy of it;
- correct information that is inaccurate;
- delete your account and information. You can also do this yourself in account settings;
- stop marketing emails at any time;
- turn off analytics at any time (see Section 7).
Email support@lexn.ca with the subject line "Privacy". We respond within 30 days and may need to verify your identity first.
If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Quebec residents have additional rights under Quebec law, and users outside Canada may have rights under their local laws. We will honour these requests as the applicable law requires.
11. Age
The Service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it.
12. Changes to this policy
We may update this policy. If a change materially affects how we use your information, we will notify you by email or in the app before it takes effect. The "Last updated" date above always shows the current version.
13. Contact
Privacy Officer, Iscarus Industries (operating Lexn.ca)
support@lexn.ca (subject: "Privacy")