Legal document

Privacy Policy

This Privacy Policy explains what information THEAX INC (“THEAX”, “we”, “us”) collects, how we use it, who we share it with, and the rights and choices you have. It applies to the THEAX website, mobile application, and related services.

Last updated: July 11, 2026

1. Who we are

1.1. THEAX INC is the controller responsible for the personal information described in this Policy. Our registered address is 95 Gordon Ln, Apt 305, Morrisville, Vermont 05661, United States.

1.2. You can reach us at any time at SupportTeam@theaxapp.com with any question, request, or complaint about privacy or about your data.

1.3. This Policy covers the THEAX platform across all of its interfaces: the website at theaxapp.com, the mobile application, conversational and voice experiences, planning tools, notifications, and connected integrations.

2. Information we collect

2.1. Account information. Your name, email address, sign-in credentials or social sign-in identifiers, preferred language, country, and plan or subscription tier.

2.2. Mobile phone number. If, and only if, you choose to enable text message notifications, we collect the mobile phone number you enter. Providing a phone number is optional and is never required to create an account or to use THEAX.

2.3. Content you provide. The objectives, answers, preferences, restrictions, availability, chat messages, voice recordings, documents, and files you submit so that the Service can generate and adapt your blueprints and recommendations.

2.4. Generated content. The blueprints, plans, activities, habits, tasks, summaries, and feedback that the Service produces for you.

2.5. Integration data. When you explicitly connect an external account (for example Google Calendar, Google Fit, or Notion), we access only the data covered by the permissions you grant, and only to provide the feature you requested.

2.6. Payment information. Payments are processed by Stripe. We do not store your full card number. We retain your subscription status, plan, billing history, and the identifiers Stripe returns to us.

2.7. Technical and usage data. Device identifiers, push notification tokens, application version, operating system, IP address, log data, error reports, and aggregate feature usage.

3. How we use your information

3.1. To create and operate your account, authenticate you, and provide the Service you requested.

3.2. To generate, personalize, and adapt your blueprints, activities, recommendations, and feedback, including through the automated and artificial intelligence processing described in section 5.

3.3. To send you the notifications you enabled, including transactional email, push notifications, and, only if you opted in, text messages as described in section 4.

3.4. To process payments, manage subscriptions, apply refunds, and prevent fraud or abuse.

3.5. To provide customer support, respond to your requests, and investigate incidents.

3.6. To maintain the security, integrity, and reliability of the Service, and to comply with our legal obligations.

3.7. To measure and improve the quality, performance, and safety of the Service in aggregate. We do not sell your personal information.

4. Text message (SMS) program

4.1. Program description. THEAX operates a transactional text message program that notifies you when a blueprint you requested has finished generating, together with a link to open it. This is the only category of text message we send. We do not send marketing or promotional text messages.

4.2. Consent and opt-in. We send text messages only to users who expressly opt in. Inside the THEAX application, after you start generating a blueprint, you may choose to be notified by text message and manually enter your mobile phone number. Entering your number in that field constitutes your express consent to receive the text message described above. Consent to receive text messages is never a condition of purchasing any product or service from THEAX.

4.3. Message frequency. Message frequency varies and depends on your own activity: you receive at most one text message per blueprint you request. THEAX does not send recurring or scheduled text messages.

4.4. Cost. Message and data rates may apply. THEAX does not charge you for these messages; your mobile carrier may.

4.5. Opting out. You may cancel at any time by replying STOP to any THEAX text message. After you reply STOP, we will send one final confirmation message and will not send you further text messages. You may also remove your phone number at any time from the application settings.

4.6. Help. Reply HELP to any THEAX text message, or contact us at SupportTeam@theaxapp.com, for assistance with the text message program.

4.7. Carriers. Mobile carriers are not liable for delayed or undelivered messages.

4.8. Use of your mobile information. Your mobile phone number and your text message consent are used solely to deliver the notification you requested. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Artificial intelligence processing

5.1. THEAX uses artificial intelligence models to generate and adapt your blueprints, recommendations, summaries, and conversational responses. To do this, the content you provide is transmitted to the model providers we use as processors, including Amazon Web Services (Amazon Bedrock), Anthropic, and Google.

5.2. These providers process your content solely to return a result to THEAX, under contractual terms that prohibit using your content to train their foundation models.

5.3. Automated outputs are informational and organizational support. They are not medical, psychological, legal, or financial advice. See our Terms and Conditions for the full statement of limits.

6. How we share information

6.1. We do not sell your personal information, and we do not share it with third parties or affiliates for their own marketing or promotional purposes.

6.2. We share information with service providers that operate the Service on our behalf, and only to the extent needed to perform their function: Amazon Web Services (hosting, storage, artificial intelligence, and text message delivery), Anthropic and Google (artificial intelligence model processing), Stripe (payment processing), Resend (transactional email delivery), and Sentry (error monitoring).

6.3. We may disclose information when required by law, court order, or a valid request from a public authority, or when necessary to protect the rights, safety, or property of THEAX, our users, or the public.

6.4. If THEAX is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before it becomes subject to a different privacy policy.

6.5. As stated in section 4.8, mobile phone numbers and text message opt-in consent are excluded from any sharing beyond the delivery subcontractor strictly necessary to send the message you requested.

7. Third-party integrations

7.1. THEAX can connect, only at your explicit request and through the provider’s own authorization flow, to external services such as Google Calendar, Google Fit, and Notion.

7.2. We request the minimum scope needed for the feature and use the data only to provide it. We do not use data obtained from these integrations for advertising, and we do not transfer it to third parties.

7.3. You may revoke access at any time from the THEAX settings or directly from the provider’s account security page. Revoking access stops any further data collection from that integration.

8. Data retention

8.1. We retain your account information and content while your account is active, so that the Service can maintain the continuity of your blueprints, history, and personalization.

8.2. Notification history is retained on a tiered schedule of 30 to 180 days depending on your plan.

8.3. If you delete your account, we delete or irreversibly anonymize your personal information within a reasonable period, except where we must keep specific records to comply with legal, accounting, tax, security, or fraud-prevention obligations.

8.4. If you opt out of text messages, we retain the record of that opt-out for as long as necessary to ensure we do not message you again.

9. Your rights and choices

9.1. You may access, correct, export, or delete your personal information, and you may object to or restrict certain processing. Many of these actions are available directly in the application settings.

9.2. You can control notifications by channel and by category at any time from the notification settings, including disabling email, push, and text messages independently.

9.3. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) or the European General Data Protection Regulation (GDPR), including the right not to receive discriminatory treatment for exercising them. THEAX does not sell or share personal information as those laws define those terms.

9.4. To exercise any right, write to SupportTeam@theaxapp.com. We respond within the period required by applicable law. We may need to verify your identity before acting on a request.

10. Security

10.1. We apply technical and organizational measures appropriate to the risk, including encryption in transit, access controls, credential isolation through a managed secrets service, and monitoring.

10.2. No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the competent authorities as required by applicable law.

11. International transfers

11.1. THEAX operates from the United States and our infrastructure is hosted in the United States. If you access the Service from another country, your information will be transferred to and processed in the United States.

11.2. Where the law requires it, we rely on appropriate transfer mechanisms with our providers, such as the European Commission Standard Contractual Clauses.

12. Children

12.1. THEAX is intended for persons eighteen (18) years of age or older. We do not knowingly collect personal information from children. If we learn that we have collected information from a minor without valid consent, we will delete it.

13. Changes to this Policy

13.1. We may update this Policy. When we do, we will change the “Last updated” date at the top of the page, and if the change is material we will notify you through the Service or by email before it takes effect.

13.2. Any material change to the text message program that would expand its scope will require your new express consent. We will not repurpose an existing text message opt-in.

14. Contact

THEAX INC

95 Gordon Ln, Apt 305, Morrisville, Vermont 05661, United States

Privacy and data requests: SupportTeam@theaxapp.com

Text message program support: SupportTeam@theaxapp.com, or reply HELP to any THEAX message.

Privacy Policy — THEAX