Privacy Policy

Effective date: 19 June 2026

1. Overview

Axis is a personal operating system for individual use. This Privacy Policy explains what data we collect, how we use it, and your rights. We follow Google's Limited Use requirements for all data obtained via Google APIs.

2. Data We Collect

  • Account data: email address, name, authentication credentials (managed via Supabase Auth).
  • Google Calendar & Gmail data: event metadata, email headers and content, as authorized by you during OAuth consent.
  • Microsoft Outlook data: calendar events and email content, as authorized.
  • Spotify data: currently playing track, playback state, playlists.
  • Strava data: activity records, routes, performance metrics.
  • Financial data (Plaid): bank account balances, transactions, institution names — never raw account numbers or passwords.
  • Usage data: error logs via Sentry (anonymized stack traces, no PII in payloads).

3. How We Use Your Data

  • To provide and improve the Axis service.
  • To display your calendar, email, health, and financial data within the app.
  • To generate AI-powered insights using Anthropic Claude and Google Gemini APIs (prompts include only the data you explicitly surface; no data is used to train third-party models).
  • Google user data is used only to provide the features you explicitly enable and is not shared with third parties for advertising purposes.

4. Data Storage

Your data is stored in a Supabase (PostgreSQL) database protected by Row Level Security policies — only your account can access your rows. OAuth tokens are encrypted at rest. Axis does not sell your data.

5. Third-Party Services

Axis integrates with: Google (Calendar, Gmail, People APIs), Microsoft (Outlook), Spotify, Strava, Plaid, Anthropic (Claude AI), Google Gemini, and Sentry. Each is subject to its own privacy policy. We only request scopes necessary for the features you enable.

6. Google API Limited Use Disclosure

Axis's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used solely to provide Axis features and is not shared with or transferred to any third party for purposes unrelated to the core functionality.

7. Data Retention

Your data is retained for as long as your account is active. Completed tasks are automatically purged after 6 months. You can export or delete your data at any time from Control Room → Data & Privacy.

8. Your Rights

You may: access your data, correct inaccuracies, request deletion of your account and all associated data, and withdraw consent for third-party integrations (by disconnecting them in Control Room → Integrations). To delete your account, contact us at the email below.

9. Security

We use HTTPS, encrypted storage, Row Level Security, and Supabase Auth (with MFA support) to protect your data. Passkeys / WebAuthn are available for passwordless authentication.

10. Changes to This Policy

We may update this Privacy Policy. We will notify you of significant changes via email or in-app notice. Continued use of Axis constitutes acceptance.

11. Contact

Privacy questions or data deletion requests: c.k.ogonuwe@gmail.com.