Your account and your keys

Lexi stores account information, linked public addresses, settings, and verified activity on its server. Wallet secrets are protected on your device. If you choose Save account backup, Lexi receives the selected wallet’s recovery phrase or private key, any BIP-39 passphrase and account index over HTTPS. Each account backup is encrypted in the database with a separate encryption key, wrapped by a server key kept outside the database. This is service-managed encryption, not end-to-end encryption: Lexi’s service can decrypt these backups. After a fresh sign-in to the same verified account, backed-up wallets restore into protected storage on Android or iOS. Anyone who can take over your account or reset it through your email may recover those wallets. Keep your email and providers secure and retain an independent written backup. Wallets without an account backup cannot be restored just by signing in. Account backups are separate from legacy recovery and are never sent to a legacy contact or exposed in the admin recovery dashboard.

Custodial recovery backups from earlier test builds: Earlier test builds let you upload the recovery phrases or private keys (and any BIP-39 passphrase) of selected wallets after verifying a contact and confirming your account email. The current app does not offer new uploads. Existing backups stay encrypted in Lexi's database, and Lexi controls the decryption key. Authorized administrators can reveal an enrolled backup after an email approval code; requests and views are recorded in internal audit logs without an individual email or push notification to you. A recovery phrase can control additional accounts beyond those displayed.

Legacy plans never send wallet keys or recovery phrases to your contact. After your chosen inactivity period, Lexi sends you daily warnings during the grace period; when it completes, your accepted contact receives a notice only. A legacy plan does not establish death or legal entitlement. Administrator disclosure cannot be undone. Cancelling your legacy plan or deleting your account removes the current server backup, but host/database backups may retain encrypted copies under their retention settings. Keep an independent offline backup.

If you choose Google or Apple sign-in, Lexi uses your provider identifier and verified email address to create or access your account. Lexi does not request access to your mailbox, contacts, or cloud files.

Account emails use Resend. Optional push alerts use Apple Push Notification service on iOS, or Firebase Cloud Messaging on Android when enabled. Notification previews omit wallet addresses and amounts. Notification providers receive the destination and message content necessary for delivery. Security push messages omit wallet addresses and amounts.

Networks and swaps: Lexi reads balances and sends signed transactions through blockchain network providers (Alchemy and public nodes), and reads Bitcoin balances and broadcasts Bitcoin transactions through mempool.space, with Blockstream as a fallback. These providers see your public addresses and IP address. When you ask for a swap quote, Lexi sends the two tokens, the amount and your wallet address to LI.FI (li.quest), which routes the swap through decentralised exchanges such as Uniswap, PancakeSwap and Jupiter. Provider fees vary and are shown on the swap quote before approval. Lexi checks and simulates each swap before you sign it. Market prices come from Alchemy.

Lightning: Lightning is not enabled in the current release. When enabled in a future release, it uses Spark through the Breez SDK. Its keys come from your wallet’s recovery phrase, which is protected on your phone and included if you choose an account backup. To send and receive, the SDK talks to Spark operators and Breez’s Lightning services, which see the payment amounts, invoices and your Lightning public key, but cannot move your funds. Lexi’s own server is not involved in Lightning payments.

Browser: Sites you open in Lexi’s browser load directly from those sites. A site sees your wallet address only after you approve its connection, and it can only ask for transactions or signatures, which Lexi shows you before anything is signed. Connections, recent sites and bookmarks are stored only on your phone, and you can disconnect sites at any time.

Camera: Lexi uses the camera only to scan QR codes on your phone. Images are not stored or uploaded.

You can change optional alerts in Security Center. Account verification and password-recovery emails are still sent when you request them. Logging out removes the current session's registered notification device.

Deleting your account: In the app, open Settings → Security Center → Delete account, or use lexiwallet.com/delete-account. Deletion permanently removes your login, sessions, linked addresses, verified activity, Lexi Points, referrals, notification devices, legacy plan and all account and custodial recovery backups. Lexi keeps a pseudonymous security log entry (account ID and time, without your email) for abuse investigations; encrypted database backups expire under the host's retention schedule. Deletion does not affect device wallets on your phone or funds on-chain.

Lexi works with real assets on mainnet networks. Transfers you sign are final and Lexi cannot reverse them.

Privacy and support questions: agrometacoin12@gmail.com. Support information.