Privacy Policy
Effective 2026-11-10
AXIQUILL is designed to collect as little personal information as possible.
Documents are stored only on the user's device
Files added by the user, summary notes, analysis results and written drafts are stored only on the user's device. On Device AI processes data on the device and does not transmit it externally. In secret mode, no information is stored.
Information stored on the server
| Item | Purpose | Handling |
|---|---|---|
| User ID from the sign-in provider | User identification | Stored only as an irreversible hash; deleted immediately upon account deletion |
| Email (if provided by the sign-in provider) | Receipts and important notices | Stored encrypted; deleted immediately upon account deletion |
| Plan, credits and usage (time, token counts, cost) | Credit calculation and billing | Numbers only (no text content) |
| Payment records (provider reference, item, amount) | Payment and refund processing; legal retention | Card numbers not collected; retained for 5 years as required by law |
Text sent to paid AI and the AI's responses are not stored. No tracking tools are used for analytics or advertising.
Processors (including transfers abroad)
- Cloudflare (United States): operation of the server and database
- Anthropic (United States): generation of paid AI responses from text sent by the user (not used for model training under its commercial terms)
- Google, Apple, Microsoft, Naver, Kakao: sign-in, when selected by the user
- Paddle, Apple, Google: payments
- OpenAlex: processing of the user's paper search queries (no account information is sent)
User rights
Users may delete their accounts in the app under Settings → Account. Sign-in information and email addresses are deleted immediately, and payment records are kept only for the period required by law. Requests to access or correct personal information may be sent to support@axiquill.app.
Security measures
All communications are encrypted with HTTPS. Sign-in information is kept only in the device's secure storage (Keychain or Android Keystore), email addresses are stored encrypted on the server, and administrator access requires a password and two-factor authentication.