Data we collect
This is the same disclosure you would see in the App Store privacy card: what we collect, why, and whether it is linked to your identity.
| Category | What | Purpose | Linked to you |
|---|---|---|---|
| Contact info | Name, email address | App functionality, account recovery | Yes |
| Identifiers | User ID, cookie/session ID | Auth, rate limiting | Yes |
| Usage data | Utterances, product interactions, timing | App functionality, product improvement | Yes |
| Diagnostics | Crash logs, latency, error traces | App functionality | No |
| Purchases | Purchase history, Stripe customer ID | Billing | Yes |
| Location | Coarse geo (country/region) via IP | Fraud/geo compliance | No |
| Camera/Photos | Vision frames when 'let Axis see' is on | App functionality (in-memory only) | No |
| Audio | Voice input via microphone | App functionality (streamed, not stored) | No |
Sub-processors
These are the third-party services we hand your data to in order to run the product. Each is contracted under a data-processing agreement that limits how they can use it. None of them train models on your conversations.
| Sub-processor | Role | Region |
|---|---|---|
| MongoDB Atlas | Encrypted primary datastore | US-East / EU-West |
| Stripe | Payments + promotion codes | US / EEA |
| Cloudflare | DDoS + CDN + edge routing | Global |
| OpenAI (via Emergent Universal Key) | LLM inference | US |
| Anthropic (via Emergent Universal Key) | LLM inference (Claude) | US |
| Google (via Emergent Universal Key) | LLM inference (Gemini) + image gen (Nano Banana) | US / EEA |
| ElevenLabs | Voice synthesis for Axis TTS | US / EEA |
| Resend | Transactional email (resets, receipts) | US / EEA |
| Emergent Platform | Hosting, deployment, observability | US |
International transfers
For EEA / UK residents, transfers of your data outside the EEA rely on the European Commission's Standard Contractual Clauses with our US-based sub-processors, plus supplementary technical measures (encryption in transit + at rest, tokenised sub-processor calls).
Exercising your rights
- Export:
GET /api/privacy/export— signed-in, returns JSON. - Delete:
POST /api/privacy/delete— signed-in, wipes conversation history + memory + family docs + audit; revokes all sessions; blanks the user row. - Correct / restrict / object: email quikygram@gmail.com. We respond within 30 days.