Privacy notice

Last updated 24 October 2026

Axiom keeps your data on your own computer. You don't need an account to use it. This notice covers what happens when you do create one, when you write to support, and the few outside services the app talks to.

For anything about your data, email support@axiomterminal.app.

Without an account

Everything stays in a database on your computer. Nothing is sent to the Axiom server, unless you write to support.

What the Axiom server keeps if you have an account

• Your account: your email address, and a one-way hash of a key your computer makes from your password. Your password itself never reaches the server. Also the name and picture you choose (if any), and when you signed up and confirmed your email.
• Your devices: each computer's name (for example “DESKTOP-4F2 (Windows)” or “Ada's MacBook (macOS)”) and when it was last active, so you can sign devices out.
• Synced data: a copy of what you sync, so your other computers can catch up.
  • End-to-end encrypted: Finance, Journal, Notes, Birthdays and Goals are encrypted on your computer before they're sent. The server stores them but can't read them. It only sees which kind of record it is, its ID, and when it changed.
  • Not end-to-end encrypted: Project Board, Daily Plan, Reading, University, Learning and your settings are stored as they are. They're protected in transit and by access controls, and could be read by whoever runs the server.
• Shared boards: boards you share are visible to the people on them. Invitations keep the invited email address until they're accepted, declined or withdrawn.
• Notification emails: if you switch on emails, the server keeps each planned email's contents until it's sent. Emails aren't end-to-end encrypted. Finance amounts are never emailed.
• Codes: codes for confirming your email, resetting your password or turning off the PIN lock are stored only as hashes, and expire after 30 minutes.
• Support messages: what you write to support, the email address to reply to, and your Axiom version. Each one is kept so we can follow it up, and emailed to our support inbox. You can send one without an account.
• Axiom on the web list: if you ask to hear when Axiom on the web opens, your email address and when you asked. We'll use it for that one email, then delete the list. Write to us to be taken off it sooner; deleting your account does it too.

Your IP address is used briefly, in memory, to limit repeated sign-in attempts. It isn't saved with your account, though our hosting provider may keep standard request logs.

Axiom has no ads and no analytics or tracking, and your data is never sold. This website only uses cookies when you sign in: two essential cookies that keep you signed in on this browser, which signing out removes.

Why we use it (our lawful bases)

• To provide the service you asked for (performance of a contract): your account, syncing, shared boards, and the codes for confirming your email or resetting your password.
• Because you chose it (consent): notification emails, and the Axiom on the web list. Switch emails off at any time, in the app or with the link in each email.
• Legitimate interests: keeping the service secure (rate limits and backups), answering support messages, and keeping a short record of them.

Who processes it

• Render hosts the server, in the United States (Ohio).
• Neon hosts the database, in the United States (Ohio).
• Resend delivers emails: confirmation and reset codes, board invitations, support messages and replies, and notifications you've switched on.
• GitHub keeps encrypted nightly backups of the database for 30 days, and hosts the downloads.
• Vercel hosts this website.

This means your account data is stored in the United States. Each of these providers processes it only on our instructions, under data processing terms. Transfers out of the UK are protected by the safeguards in those terms: the UK's International Data Transfer Addendum, or the UK–US data bridge where the provider is certified.

Services the app contacts directly

These go straight from your computer, never through the Axiom server, and only when you use the feature:

• Open Library (openlibrary.org), to search for books and show covers in Reading and Learning.
• YouTube (Google), to read a playlist's videos when you import one into Learning. Only the playlist link is sent.
• Frankfurter (frankfurter.dev), for currency exchange rates in Finance. Only currency codes and dates are sent.
• Google, Microsoft, iCloud or Fastmail, if you connect a calendar to Daily Plan. Your calendar events stay on your computer: they aren't synced or sent to the Axiom server. Sign-in tokens are kept in your computer's credential store. Axiom's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• GitHub, to check for and download Axiom updates.

How long it's kept

• Your account and everything synced to it: until you delete your account. Copies in backups are gone within 30 days after that.
• Sign-ups that never confirmed their email: 7 days.
• A device's record: 30 days after it's signed out.
• Codes: a day after they expire.
• Sent notification emails: about a week, to keep to a daily limit.
• Support messages: until 12 months after they're solved, even if you delete your account, in case you write again about the same thing.

Your rights

You can ask for a copy of your data, have it corrected or deleted, ask us to limit or stop using it, object to how we use it, and take it elsewhere.

• Account → Your data → Export my data saves everything on your computer as a file.
• Account → Danger zone → Delete account deletes your account and everything synced to it, including boards you own. The copy on your computer stays.
• For anything else, email support@axiomterminal.app. We'll answer within a month.

If you're unhappy with how your data is handled, you can complain to the Information Commissioner's Office (ico.org.uk), or your local data protection authority.

Age

You need to be 13 or older to create an account.

Changes

If this notice changes, the date at the top changes too. For significant changes, we'll let account holders know by email.