Privacy Policy

lemmaro is a browser extension that helps you learn vocabulary while you read. This policy explains what stays on your device, what is sent to our servers, who helps us operate the service, and how you can exercise your privacy rights. The controller is Andrii Moskaliuk, individual entrepreneur (ФОП) based in Ukraine. See the Legal Notice for operator details, or contact us at hello@lemmaro.com.

What stays on your device

Most of lemmaro runs locally. The text of the pages you read is parsed in your browser to decide which words to highlight; that page text is not sent to us. The on-device language models used for parsing and meaning detection are downloaded to your browser once and then run offline. Your reading position, highlight states, app settings, and a local cache of previously looked-up dictionary entries live in your browser's own storage on your device. lemmaro also keeps a local reading log — which pages and sentences each word appeared in, powering “seen N times” and word suggestions. That log stays on your device and is never sent to us — with one exception you trigger yourself: the single sentence you were reading when you chose to learn a word is saved with that word (see “Learning data” below), so your review cards show the same example on every device.

What we send to our servers

Some features can't run fully on-device. When you look a word up or ask us to disambiguate a meaning, the selected word and the surrounding sentence are sent to our backend so it can return the right sense, definition, and examples. While highlighting, the extension may also score word meanings in the background; for that it sends compact numeric representations (embeddings) of a sentence — not the sentence text itself. We send only what each feature needs, not your whole page and not your browsing history.

The data we hold on our servers is:

• Account data — your email address and authentication details when you create an account or sign in.
• Learning data — the words you save, the words you encounter while reading (as per-word encounter counts and last-seen times — never the pages themselves), your review history (including the page address where you saved a word), the one sentence and page address you were reading when you chose to learn a word (deleted together with the word), and your learning settings, such as your language and level, so your progress and suggestions sync across devices.
• Lookup requests — the term and its sentence context, used to answer the lookup and to improve sense accuracy over time.
• Support messages — the content of messages you send us, plus contact details needed to reply.

Launch wishlist on this website

Before launch, this website has an “Add to wishlist” button. Clicking it stores a random identifier in your browser and on our server so we can count wishlist joins; the counter is anonymous and the identifier is not linked to your name, account, or browsing. If you also choose to leave your email address, we store it — together with the site language you were using — solely to send you one email when lemmaro launches. This is based on your consent. Removing the wishlist heart deletes your wishlist entry, including the email, from our server; you can also ask us to delete it at hello@lemmaro.com. Once the launch email is sent, the wishlist list is deleted.

Performance diagnostics (off unless you turn it on)

lemmaro runs language models on your own device, and how fast they run depends heavily on the hardware. If you switch on “Share anonymous performance data” in Settings — it is off by default — the extension sends us one summary per day describing how your device performed. That summary contains the graphics adapter family (for example “nvidia / ada”, never the exact card model), the operating system family and processor architecture, a range for the number of processor cores (for example “8–15”, never the exact count), a rounded graphics memory limit, a coarse graphics speed score measured on your device, and timings for the on-device models — including how long they took to download, load, and warm up.

The summary carries no identifier — no account, no device id, no cookie — and it is sent without your login session attached, so we cannot connect it to you, and we cannot connect two summaries to each other. It contains nothing about what you read: no page address, no page content, no words. We deliberately collect only coarse hardware categories rather than exact hardware, because an exact hardware profile can single out a device. You can switch it off at any time in Settings; switching it off also deletes the pending summary from your device. We keep these summaries for 12 months and use them only to decide which model quality tier to run on which class of hardware.

Why we process data

We process account, learning, and lookup data to provide the service you asked for, keep your progress synced, prevent abuse, debug problems, and improve vocabulary disambiguation. Where EU or UK data-protection law applies, our legal bases are contract, legitimate interests, consent where a feature asks for it, and legal obligation for billing, tax, and compliance records.

Who we share data with

We use a small set of processors, strictly to operate the service. We do not sell your data or use it for advertising.

• Authentication (Google) — if you choose “Sign in with Google”, Google handles that sign-in and shares your basic profile, such as email and name, with us. Email/password sign-in does not involve Google.
• Payments (Paddle) — when you subscribe, our merchant of record, Paddle, processes the payment and related billing data. We never see or store your full card details.
• AI language processing (DeepSeek) — when you use sentence translation or AI-generated examples and exercises, the relevant word and its sentence context are sent to DeepSeek to produce the result. Reading and word highlighting do not use this. Dictionary entries, examples, and translations shown in lemmaro are AI-generated, may contain errors or omissions, and are provided for reference only.
• Hosting & backups — the service runs on a server provided by AlphaVPS, located in the European Union, with encrypted database backups retained on the same server infrastructure.
• Model & asset delivery — the on-device models and language files are downloaded from public content-delivery networks, such as Hugging Face and our own storage. These downloads carry only your IP address, inherent to any web request; no account or learning data is sent.

International transfers

We are based in Ukraine, and some processors may be located in other countries, including the EU/EEA, the United States, and China. Where transfer rules apply, we rely on available safeguards such as provider data-processing terms, standard contractual clauses, and limiting the data sent to each processor. If you would rather not have sentence context processed by DeepSeek, do not use sentence translation or AI-example features; the rest of lemmaro works without them.

Cookies and local storage

lemmaro uses browser storage to remember your settings, theme, reading state, saved words, the local reading log, and local dictionary cache. We do not use advertising cookies and we do not track your browsing. The only optional measurement we collect is the performance diagnostics described above, which you switch on yourself.

Retention

We keep account and learning data for as long as your account is active. When you ask us to delete your account (email hello@lemmaro.com), we delete your live account and learning data within 30 days and purge it from encrypted backups within 90 days after that. Billing, tax, security, and abuse records may be kept longer where required by law or needed to protect the service. Anonymous, aggregated data used to improve sense accuracy may be retained longer because it can no longer be linked to you.

Security

Traffic between the extension and our servers is encrypted in transit (HTTPS). Access to production data is restricted, and database backups are encrypted. No system is perfectly secure, but we take reasonable measures to protect your data.

Children

lemmaro is not directed at children under 13. You must be at least 13, or the minimum digital consent age in your country if higher, to use it. If you believe a child has given us personal data without the required consent, contact us and we will delete it where required.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, and to object to certain processing. Ukrainian users can also exercise rights under Ukraine's Law on Protection of Personal Data. EU/EEA and UK users may have additional GDPR or UK GDPR rights. To exercise your rights, email hello@lemmaro.com. You may also complain to your local data-protection authority.

EU and UK representative

We have not appointed a representative in the EU or UK. If we become required to appoint one, the representative's contact details will be listed here. In the meantime you can reach us for any privacy matter at hello@lemmaro.com.

Changes to this policy

We may update this policy as the product evolves; we'll post the new version here and update the date above. Material changes will be communicated where appropriate.

Contact

Questions about this policy or your data? Reach us at hello@lemmaro.com.