Lekto Privacy Policy
Last updated: 21 October 2026
This policy explains how Lekto (School Timetable Widget: Lekto on the App Store and Lekto: School Timetable on Google Play) for iPhone, iPad and Android handles information about you.
Who is responsible
The controller of personal data for Lekto is Flexisoft, based in Gdynia, Poland, the developer listed as the seller of Lekto. Contact: info@flexisoft.pl.
In short
- What you create in Lekto stays on your device. We never receive it.
- Lekto has no account, no sign-in, no ads and no analytics.
- Purchases are handled by Apple or Google Play; we use RevenueCat only to confirm what you have bought.
- We do not sell your information or use it to track you.
What the app stores
Lekto stores the following only on your device:
- your timetable: lessons, times and the details you enter, including odd and even weeks
- homework pinned to lessons, and reminders
- your settings
On iPhone, Home Screen and Lock Screen widgets and Live Activities, and on Android, home screen widgets, show the current and next lesson using data from the app on your own devices; nothing is sent to us.
Permissions
Lekto asks for a permission only when you use the feature that needs it, and works without the ones you decline. You can change them at any time in Settings.
- Camera (optional) - to scan a printed timetable. Recognition runs on your device and photos never leave it.
- Photos (optional) - to choose an existing photo of a timetable; the app only receives the photo you pick.
- Notifications - for quiet lesson and homework reminders.
Sharing a timetable
You can share your timetable with classmates as a file through the iOS share sheet, for example in Messages or with AirDrop. The file goes directly to the people you choose and does not pass through our servers. When you open a timetable file someone shared with you, Lekto imports it on your device.
Lekto for Android
Lekto for Android (package pl.flexisoft.lekto, distributed through Google Play) follows the same principles as the iPhone app. What differs on Android:
- Storage and backup - your timetable, homework, lesson notes and settings are stored only on your device. If you turned on Android backup, the system may include them in the backup kept in your own Google Account; that backup is managed by Google and is not accessible to us. Temporary files, such as a timetable photo being read or a file being shared, are excluded from backup.
- Timetable from a photo - photos are read on the device with Google ML Kit text recognition and, if you choose to scan, the Google document scanner. The image and the recognised text are never uploaded. When you use this feature, ML Kit may send Google diagnostic information (device model, Android and app version, a per-installation identifier, performance data and error codes) under Google's terms. These are Google's own diagnostics for ML Kit; Lekto itself adds no analytics. Lekto does not request the camera permission: the system camera or scanner takes the photo, and the Android photo picker gives the app only the image you choose.
- Permissions - notifications, asked for when you turn reminders on; optionally the alarms and reminders permission in system settings, for reminders on the exact minute; starting after a restart, to set your reminders again; and internet access, for purchases. Lekto has no location, contacts or advertising ID permission.
- Reminders and widgets - reminders are scheduled on the device; no push server is involved. Home screen widgets and the countdown notification read the timetable stored on the device.
- Sharing - timetable files are shared through the Android share sheet, for example in a messenger, by email or with Quick Share, directly to the people you choose.
- Purchases - payments are handled by Google Play under Google's terms and privacy policy; we never receive your name, email address, Google Account or payment details. RevenueCat receives the same kind of information as described in Purchases and subscriptions below, with Google Play order and purchase identifiers instead of Apple ones. Purchases made on iPhone do not carry over to Android, because Lekto has no account that could link them.
- Ratings - Lekto may occasionally show the Google Play rating card. Google handles it; we do not learn whether you rated the app or what you wrote.
To have your purchase records deleted, see Deleting your data below.
Deleting your data
This applies to Lekto on iPhone, iPad and Android.
- Your timetable, homework, notes and settings are only on your device. Delete them in the app (delete lessons or tasks) or uninstall Lekto, which removes everything at once. We hold no copy, so there is nothing for us to delete.
- Purchase records held by RevenueCat (the random app identifier and the purchase history linked to it): email info@flexisoft.pl with the subject "Delete my Lekto data" and include the order number from your receipt - from Google Play it starts with GPA., from Apple it is the order ID. The random identifier alone does not tell us who you are, so we need it to find your records. We delete them within 30 days and confirm by email.
- What is kept: after deletion, the app can no longer restore that purchase from RevenueCat's records; Google Play or Apple keeps its own order record under its own policy, and you can still restore the purchase from the store account used to buy it. We keep your email only as long as needed to handle the request.
- Diagnostics sent by ML Kit on Android are held by Google and are not linked to you or accessible to us; Google keeps them under its own retention policy.
Purchases and subscriptions
Some features are available through optional in-app purchases or subscriptions. Payments are handled entirely by Apple through your Apple Account, under Apple's own terms and privacy policy. We never receive your name, email address, Apple Account details or payment information from Apple.
To check which purchases are active, restore them on another device and unlock the right features, Lekto uses RevenueCat (RevenueCat, Inc., USA), which processes purchase data on our behalf. When the app starts, and when you view, buy or restore a purchase, RevenueCat receives:
- a random identifier created by the app, which is not linked to your name, email address or Apple Account;
- your purchase and subscription history for this app: product, dates, price, currency, store country and Apple transaction identifiers;
- basic technical information: app version, operating system version, device model, language and the IP address of the connection.
We use this only to provide the purchases you have made (Article 6(1)(b) GDPR, performance of a contract), never for advertising or tracking. RevenueCat keeps it for as long as needed to provide and verify your purchases and to meet our accounting obligations. RevenueCat is based in the United States; the transfer is covered by the safeguards in RevenueCat's data processing terms, such as the European Commission's Standard Contractual Clauses. See RevenueCat's privacy policy.
What we don't do
- No advertising and no ad networks.
- No analytics, telemetry or crash-reporting services.
- No tracking across other companies' apps or websites, and no request for tracking permission.
- No account or sign-in.
- We do not sell or share your information.
Keeping and deleting your data
What you create in Lekto stays on your device until you delete it in the app or delete the app. It is also included in your device backups, such as iCloud Backup, if you have them turned on; those are managed by Apple under your Apple Account.
Children
Lekto is made for students, including children and teenagers. It works without an account and does not send timetables, homework or photos to us or to anyone else. The only information that leaves the device is the purchase information described above, which does not identify the student. Purchases go through the Apple Account used on the device, which a parent can manage with Family Sharing and Ask to Buy, or on Android through the Google Account on the device, where a parent can require approval for purchases in Google Play or Family Link.
Your rights
Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to its processing, and to data portability. Email us and we will respond within one month.
Because the content you create in Lekto stays on your device, you control it directly and we hold no copy of it to access or delete. For the purchase data processed by RevenueCat, the identifier is random, so we may ask for the transaction details from your Apple purchase receipt to find your records.
You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or with the data protection authority in your own country.
If you contact us
If you email us, we use your email address and message only to reply and provide support (Article 6(1)(f) GDPR, our legitimate interest in answering you), and keep the correspondence for as long as needed to handle your request and any follow-up.
Changes to this policy
If Lekto starts handling data differently, we will update this page and the date at the top before the change reaches the App Store or Google Play.
Contact
Questions about privacy in Lekto: info@flexisoft.pl.