AxisLegal
Privacy Policy
The short version
- Axis stores the data you put into it (tasks, notes, calendar blocks, habits, finances, fitness, voice notes) so it can show it back to you across your devices. If you track a run or walk, it records your location for that activity.
- Every record is isolated to your account with database-level policies. Another person sees something of yours only where you share it on purpose: a task domain you share, habits you share with a partner, lifts on a PR leaderboard, and posts you make on the feedback board.
- Your password vault is encrypted on your device before it is stored. We cannot read it and cannot reset it.
- Bank connections go through Plaid. Axis never sees your bank login. Google Calendar access is read-only.
- Orbit, the built-in assistant, and Axis’s other AI features send the parts of your data a request needs to a model provider — OpenAI by default, or Anthropic if you switch it in Settings. Axis asks your permission before any AI feature sends your data, and you can withdraw it in Settings. Voice features use OpenAI. Your data is not used to train their models under the terms we use.
- We do not sell your data or run ads. We use one privacy-limited analytics provider (PostHog) to count how Axis is used — which screens are opened and whether features work. It is configured so that it never records your screen, never captures the text you tap on, and never receives the content of your tasks, notes, finances or vault. There are no advertising trackers.
- You can export your data as JSON and delete your account at any time from Settings → Account.
- If you connect a third-party AI agent, the public Axis connector can use the parts of your account you approve on the consent screen, and only at that connector. You can revoke that connection in Settings → Agent access. Axis does not use your data to train models.
1. Who we are
Axis (axisproductivityapp.com) is operated by Jonathan Finkbeiner ("Axis", "we", "us"). Contact: jonathanf.2258@gmail.com.
2. What we collect
Account information
Your email address. If you sign in with Google, the name and profile picture Google shares with us. If you use Sign in with Apple, the name Apple shares the first time you sign in (if you choose to share it) and either your email address or an Apple private relay address. Passwords for email sign-in are handled by our authentication provider (Supabase) and stored hashed; we never see them.
Content you create
Tasks, projects, goals, habits and completion history, calendar blocks and events, notes, journal entries, voice notes (the recording and its transcript), brainstorm maps, people you add (names, contact details, notes), places you log (with addresses, ratings, and photos you upload), books, movies, inventory items, subscriptions, posts you make on the feedback board, and settings such as your time zone, theme, and layout.
Financial data (only if you connect it)
If you connect a bank or card through Plaid: account names and types, balances, transactions (date, amount, merchant, category), and investment holdings. Manual accounts and budgets you type in. Credit-card details you enter (statement day, due day, limit, rewards). We never receive your bank username or password; those go directly to Plaid.
Fitness data (only if you use it)
Workouts, sets, body metrics, nutrition entries and runs you log.
Location (only when you use a feature that needs it)
Run and walk tracking. When you start tracking in Routes, Axis records your device's precise GPS position for the duration of that activity and saves the resulting route to your account. In the iOS app, recording continues while your screen is locked or you switch apps, until you finish, and iOS shows its location indicator the whole time; in a web browser, tracking pauses when the screen locks. Routes you draw by tapping a map are stored the same way, as a list of coordinates.
A one-time position. Opening Routes reads your position once to center the map, and “Use my location” on Today reads it once to show local sunrise and sunset. Neither is stored.
Your device asks permission the first time, and you can withdraw it at any time in iOS Settings › Privacy & Security › Location Services (or your browser's site settings) — the rest of Axis works normally without it. Saved routes are yours to delete individually, and they are removed with your account.
Voice
Voice notes are recorded, uploaded to your account's private storage, and sent to OpenAI to be transcribed; the recording and its transcript stay in your Library until you delete them. Dictation sends a short recording to OpenAI to turn into text and keeps no copy. Live voice calls with Orbit stream your microphone audio to OpenAI for the length of the call; Axis records and stores none of it. The microphone is used only while one of these is active.
Password vault
Entries you save in the vault are encrypted on your device with AES-GCM before they are sent to us. The encryption key is protected by your PIN and a one-time recovery phrase that only you hold. We store ciphertext only. If you lose both the PIN and the recovery phrase, the vault cannot be recovered by anyone, including us.
Technical data
Standard server logs from our hosting provider (IP address, browser type, timestamps) used to keep the service running and secure. If you turn on reminders in a web browser, a push-notification subscription (a browser-issued endpoint and keys); the iOS app schedules reminders on your device instead. Your device time zone, if you allow it, so reminders arrive at the right local time.
Product analytics
We use PostHog to understand how Axis is used so we know what to build and what is broken. What it receives is deliberately narrow:
- Your Axis user ID (a random identifier). Not your email address or your name.
- The name of the screen you opened, from a fixed list (for example
tasks,finance). Web addresses are never sent, because ours contain the IDs of your records. - Named events such as opening the app, viewing the upgrade screen, or starting a purchase.
- Error messages when something breaks, truncated, with the screen it happened on.
What it does not receive, by configuration and not merely by policy: session recording is disabled (PostHog never records your screen), autocapture is disabled (it never reads the text of what you tap, which in Axis would be note titles and merchant names), and no content of your tasks, notes, journal, finances, health data or vault is ever sent. We do not use advertising SDKs or tracking pixels.
Analytics loads separately from the app and only after Axis has started, so blocking it in your browser has no effect on Axis working.
Sharing you choose
Nothing you store is visible to another Axis user unless you share it on purpose:
- Task sharing: someone you invite by email can view — never edit, complete or delete — the tasks in the one domain you share with them.
- Habit partners: a partner you pair with by code sees the habits you mark as shared (their name, schedule, today's check-off and streak) and can send you nudges.
- PR leaderboard: a friend you invite sees your best estimated one-rep max for each exercise, and nothing else about your training.
- Feedback board: posts you make, shown with your first name, are visible to every Axis user. You can delete your own posts.
You can stop sharing from the same place you started it, and all sharing ends with your account.
3. How we use it
- To run Axis: store your data, sync it across your devices, send the reminders you turned on, and show your calendar next to your plan.
- To power Orbit and the AI features you use, with your permission (see section 5).
- To secure the service, prevent abuse, and debug problems.
- To contact you about your account (for example, sign-in confirmations, password resets, or important changes to Axis). We do not send marketing email unless you ask for it.
4. Who processes your data on our behalf
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Database, authentication, file storage | All account data, at rest in their cloud (US region unless configured otherwise) |
| Vercel | Hosting and server functions | Requests to Axis, including the data those requests carry; server logs |
| Optional sign-in; optional read-only Google Calendar | Your Google account identity; Axis reads your calendar events and stores an encrypted refresh token to keep syncing | |
| Apple | Optional Sign in with Apple | Your Apple sign-in, and the name and email (or private relay address) you choose to share |
| Plaid | Optional bank and card connections | Your bank login (entered directly with Plaid, never seen by Axis); Plaid returns account and transaction data to Axis |
| OpenAI | The default model behind Orbit, briefs, digests and AI helpers; transcription for dictation and voice notes; live voice calls | See section 5. For voice: the recordings you ask to transcribe, and a live two-way audio stream during a call |
| Anthropic | The alternative model behind Orbit, briefs, digests and AI helpers, when you select it in Settings | See section 5 |
| PostHog | Product analytics — how Axis is used and what breaks | Your Axis user ID, screen names from a fixed list, named events, and truncated error messages. No screen recordings, no tapped text, and none of your content. |
| Resend | Transactional email (reminders you enable) | Your email address and the reminder text |
| Your browser's push service (Apple, Google, Mozilla) | Delivering web push notifications | Reminder title and body, encrypted to your device |
| Google Maps Platform | Address autocomplete and map display for places you log in Dates, and route maps | The address text you type as you type it, plus your IP address and approximate location |
We share data only with providers whose contracts or published terms require them to protect it at least as well as this policy describes and to use it only to provide their service to Axis. Integration tokens (Google, Plaid) are stored encrypted at rest and only decrypted on our servers when syncing.
5. AI features
Orbit is the assistant built into Axis. When you use Orbit or another AI feature, Axis sends the relevant parts of your data to a model provider. Axis asks for your permission before any AI feature sends your data for the first time, and sends nothing if you decline. You can withdraw that permission at any time in Settings › Orbit AI model, after which Axis asks again before sending anything.
Two providers are offered, and you choose between them in Settings: OpenAI, which is the default, or Anthropic. Whichever you pick handles every text AI feature listed below. Specifically:
- Orbit chat can see a snapshot of your current tasks, projects, goals, habits, calendar, people, note titles, fitness log, and the figures you entered in Where I'm At, and can look up your notes, journal, schedule, and transactions (merchant, amount, category, date) when you ask about them. It never sees bank account numbers, integration tokens, or your password vault.
- Custom agents you create work the same way, limited to the areas you grant each one. If you schedule an agent to write a briefing, each run sends the same kind of snapshot.
- The nightly digest and long-term memory use your day's tasks, notes, workouts, and finances summarized at category level only (totals by category, no merchant names, account numbers, or holdings). Like scheduled agent briefings, they run only while you have allowed AI features.
- AI helpers (summarize, rewrite, extract to-dos, categorize transactions, generate a workout, brainstorm, suggest groceries, turn a sentence into an event) send the specific text or records you asked to act on.
Voice. Voice features always use OpenAI, whichever provider you picked for text, because the voice models are OpenAI's. A live call streams your microphone audio to OpenAI for as long as the call runs and plays back its spoken replies; the same snapshot as Orbit chat is available during the call. Axis records and stores nothing from a call. Dictation and voice notes send a recording to OpenAI to transcribe, and voice notes also keep the recording in your account (see section 2). The microphone is used only while you are recording or on a call, and iOS shows its own indicator the whole time.
Requests are made through the providers' APIs under their business terms, which do not use API inputs to train their models.
What Orbit can change. When you ask, Orbit can create and update tasks, calendar events, notes, projects, goals, habits, people and log entries straight away. It cannot delete anything without your explicit approval in the app, and time blocks it proposes for your tasks are added only when you accept them.
5a. Third-party AI agents and connectors
You can connect Axis to an outside AI agent, such as a coding assistant or another app that supports connectors. Connecting is optional. The agent signs in with OAuth as you, and you choose what it may do on a consent screen before it receives a token.
What the connector can access. The public Axis connector can use the same per-user tools as the Axis agent: tasks, projects, notes, calendar, habits, goals, journal, health, finances, and the other records in your account. On the consent screen you choose which of those it may read or change. The token works only at the public connector and is rejected on the rest of the agent API. It cannot open your password vault, message a habit partner, or reach another person's account. It does not run Axis's private operational jobs. A webhook you explicitly allow can be sent the changes you approved; you can revoke that along with the connection.
The public connector's tools, scopes, and sign-in steps are documented at axisproductivityapp.com/docs.
Revoking access. Each connection appears in Settings → Agent access. Revoking it stops that agent immediately, including the refresh token it would use to stay connected. You can do this at any time, and you do not need to go to the other product first.
Training. Axis does not use the contents of your account to train models. A connected agent receives only what the tools you approved return while you are using that agent. What the third party does with text you type into its own product is covered by that product's terms.
6. How long we keep it
For as long as your account exists. When you delete your account, your data, uploads (including voice notes), and integration tokens are deleted from our database and storage, and the copy cached on the device you delete from is cleared; backups held by our hosting provider expire on their normal schedule (typically within 30 days). Server logs are retained by our hosting provider for a limited period.
7. Your choices and rights
- Export: download all your data as JSON from Settings → Account.
- Delete: delete your account and data from Settings → Account, or email us and we will do it for you.
- Disconnect: remove Google Calendar or Plaid accounts at any time from inside Axis; you can also revoke Axis in your Google account settings.
- Sharing: stop task sharing, unpair a habit partner, or delete a feedback post at any time.
- Reminders: turn push and email reminders on or off in Settings.
- AI: withdraw permission for AI features in Settings › Orbit AI model, and clear Orbit’s long-term memory of you from the Journal screen. Voice is optional — type instead and no audio leaves your device.
Depending on where you live (for example the EU/UK or California), you may have additional rights to access, correct, delete, or port your data, or to object to certain processing. Email us and we will honor them.
8. Security
Row-level security policies isolate every table to the signed-in account, apart from the sharing you choose (section 2). Integration tokens are encrypted at rest. The vault is end-to-end encrypted. Traffic is encrypted in transit (HTTPS). No system is perfectly secure; if we learn of a breach affecting your data we will tell you promptly.
9. Children
Axis is not directed at children under 13 (or the age of digital consent where you live), and we do not knowingly collect their data.
10. Changes
If we change this policy in a way that matters, we will update the date above and notify you in the app or by email before the change takes effect.