
10. Cookies and Website Tracking
When you visit our website, we may use cookies and similar technologies to enhance functionality, remember your preferences, and gather usage statistics.
Types of Cookies We Use
• Essential Cookies: Required for basic website functionality (e.g., session management, security)
• Analytics Cookies: Help us understand how visitors use our website (e.g., pages visited, time on site)
• Advertising Cookies: Used to deliver relevant advertisements and track ad campaign performance
Your Cookie Choices
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may affect website functionality. You can also opt out of interest-based advertising through industry opt-out tools such as the Digital Advertising Alliance (DAA) at aboutads.info or Network Advertising Initiative (NAI) at optout.networkadvertising.org.11. Communications and Email
We may send you the following types of communications:
Transactional Communications
These are essential messages related to your account and use of the Services, including account verification, password resets, security alerts, and subscription confirmations. You cannot opt out of transactional communications while maintaining an active account.
Learning Communications
These messages support your learning experience, including practice reminders, streak alerts, progress updates, and personalized learning tips. You can manage your preferences for these communications in your app settings or by visiting unsubscribe.loxie.app.
Marketing Communications
These messages include new content announcements, product updates, feature releases, promotional offers, and newsletters. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link included in each email or by visiting unsubscribe.loxie.app.
Your Communication Preferences
Each non-transactional email we send includes an unsubscribe link. You can also manage all your email preferences at unsubscribe.loxie.app. Please note that even if you unsubscribe from marketing emails, we may still send you transactional communications related to your account.12. Do Not Track Signals
Some web browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no common industry standard for interpreting DNT signals, the Services do not currently respond to DNT signals. However, we honor user-enabled global privacy controls, such as the Global Privacy Control (GPC) signal. When we detect a GPC signal from your browser or device, we will treat it as a valid opt-out request for the sale or sharing of your personal information.13. Local Data Caching
Loxie may temporarily cache non-sensitive data (e.g., your current session or streak progress) locally on your device to improve performance. Sensitive or account-level data is always encrypted and stored securely on our servers.14. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time
To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before fulfilling your request.
To delete your account, you may use the in-app settings. Deleted accounts and associated personal data are purged from our systems within 90 days, unless retention is required by law.15. Additional Rights for California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
Right to Know
You have the right to request that we disclose what personal information we have collected about you in the past 12 months, including the categories of personal information, the sources, the business purposes for collection, and the categories of third parties with whom we share it.
Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct
You have the right to request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing
You have the right to opt out of the "sale" or "sharing" of your personal information. We do not sell personal information in the traditional sense. If our use of advertising partners constitutes "sharing" under California law, you may opt out by adjusting your device privacy settings, enabling Global Privacy Control, or contacting us.
Right to Limit Use of Sensitive Personal Information
You have the right to limit our use of sensitive personal information to what is necessary to perform the Services. As described in Section 3, we already limit our use of sensitive personal information in this way.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights.
How to Exercise Your Rights
To exercise these rights, contact us at [email protected]. We may need to verify your identity before fulfilling your request. You may also designate an authorized agent to make requests on your behalf.16. Additional State Privacy Rights
Residents of certain U.S. states have additional privacy rights under state law:
Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and Nevada
If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, or Nevada, you may have rights similar to those described for California residents, including the right to access, correct, delete, and obtain a copy of your personal data, as well as the right to opt out of targeted advertising, the sale of personal data (Nevada specifically requires an opt-out mechanism for sales), and profiling in furtherance of decisions that produce legal or similarly significant effects.
How to Exercise Your Rights
To exercise these rights, contact us at [email protected]. If we decline your request, you may have the right to appeal our decision by contacting us at the same address.17. Children's Privacy
Loxie is not intended for children under the age of 13. During account registration, users are required to confirm that they are at least 13 years old. We do not knowingly collect personal information from children under 13.
If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will delete that information promptly. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at [email protected] so we can take appropriate action.
Users between 13 and 17 years of age must have permission from a parent or legal guardian to use the Services.18. Data Security
We implement industry-standard safeguards to protect your data, including encryption in transit and at rest, access controls, secure authentication, and regular security assessments.
While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.
Data Breach Notification
In the event of a data breach that compromises your personal information, we will notify affected users and relevant regulatory authorities as required by applicable law. Where required, we will provide notification within 72 hours of becoming aware of the breach, or as otherwise specified by applicable law. Notification will include a description of the breach, the types of information involved, and steps you can take to protect yourself.
19. Data Retention
We retain your personal information according to the following schedule:
• Account data: Retained until you delete your account, then purged within 90 days
• Learning progress data: Retained until account deletion; may be deleted after 60 days of account inactivity
• Payment records: Retained as required by applicable tax and financial regulations (typically 7 years)
• Analytics and crash data: Retained in anonymized form for service improvement
• Support communications: Retained for 3 years after resolution
• IP addresses: Retained for no more than 30 days unless required for security purposes
Account Inactivity
Loxie is a spaced repetition learning platform, and consistent engagement is essential for effective knowledge retention. If your account is inactive for an extended period, we reserve the right to delete your learning history, progress data, and personalized content after 60 days of inactivity. We may terminate accounts that have been inactive for 24 months or more after providing notice to the email address on file.20. International Data Transfers
Loxie is based in the United States. Your data may be stored or processed in the U.S. or other countries where our service providers operate. If you access the Services from outside the U.S., you acknowledge that your data may be transferred to countries that may not provide the same level of data protection as your home jurisdiction.
For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by the European Commission.
By using the Services, you consent to the transfer of your information to the United States and other countries as described in this Policy.
Your Rights (EEA/UK/Switzerland)
If you are located in the EEA, UK, or Switzerland, you have additional rights including the right to access, correct, delete, restrict, or port your personal data, object to certain processing, and lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.21. Links to Third-Party Websites
The Services may contain links to other websites and services. Loxie is not responsible for the content or privacy practices of other websites, including any personal or financial information collected by third-party payment processors or retailers. We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies only to information collected by Loxie.22. Changes to This Policy
We may update this Privacy Policy to reflect changes to our information practices. When we make changes, we will post the updated version in the app and on our website, update the "Last Updated" date, and notify users of material changes through email or in-app notification where required by law.
We will post notice of material changes for at least seven (7) days before the changes take effect. Continued use of Loxie after changes are posted constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should stop using the Services.23. Contact Us
If you have any questions, concerns, or requests regarding your data or this Privacy Policy, contact us at:
Email: [email protected]
Emandin Holdings LLC
800 N King Street, Suite 304 #2257
Wilmington, DE 19801
Emandin Holdings LLC is the data controller of your data for the purposes of the General Data Protection Regulation ("GDPR") and any relevant local legislation.
Thank you for trusting Loxie with your learning journey.