Axel Privacy Policy

Effective date: October 4, 2026

This Privacy Policy explains how Axel ("we", "us"), based in the Philippines, collects, uses, shares and protects personal information when you use the Axel mobile app and related services (the "Service"). We process personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC).

We do not sell your personal information, and we do not use it for advertising.

1. Who this policy covers

• Users — family members and caregivers who create an account or join a family.
• Care recipients — the aging parent or loved one whose care is organized in the app. Care recipients usually do not have their own account; a family member enters their information. If you add information about another person, you confirm you have their consent, or the legal authority to act for them (e.g. as their guardian, representative or next of kin where they cannot consent).

2. Information we collect

Account information (from you)

• Name, email address, phone number (optional), profile photo (optional)
• Sign-in data (password is stored hashed by our authentication provider; we never see it)
• Family membership, role, and invite / join codes

Care recipient information — sensitive personal information (from you or your family)

• Name, date of birth, photo, conditions, allergies, blood type and other medical facts
• Medications, dosages, schedules, and dose logs (taken, missed, refused, held)
• Appointments, doctors and facilities
• Health journal readings (e.g. blood pressure, heart rate, blood sugar)
• Wellness checklists and routine completion records
• Documents and photos you upload (e.g. PhilHealth/HMO cards, prescriptions, lab results)
• Emergency contacts (names and phone numbers of third parties)

Automatically collected

• Device push-notification token, device type and OS version (to send reminders)
• A one-way hash of your email address and of your device's app identifier (Android ID or iOS identifier for vendor), used only to give each person and device one free trial
• Activity and audit records (who viewed or changed care information and when), kept for security and accountability
• Crash and error diagnostics, if error reporting is enabled (device model, OS, app version, error stack trace — not your health records)
• Server logs (IP address, request time) kept by our hosting providers for security

Device permissions (only with your permission)

• Camera / Photos — to attach documents and profile photos
• Notifications — to deliver medication, appointment and wellness reminders
• Face ID / fingerprint — to lock the app. Biometric data stays on your device; we never receive it.

We do not collect precise location, contacts from your address book, or advertising identifiers, and we do not track you across other apps or websites.

3. How we use information

We use sensitive personal information only to provide the features you use.

4. Who can see your information

• Your family group. Information is shared with the members of the family you create or join, according to their role. Family owners control who is invited and can remove members.
• Partner care facilities — only when you ask. If a family owner taps Request facility care, we send a referral to the selected assisted-living facility containing: the requester's name, contact number and email, the care recipient's name, and any notes you enter. The facility becomes responsible for that information under its own privacy policy. Nothing is sent without this action.
• Service providers (processors) who host and operate the Service for us, under contracts requiring confidentiality and security:
  • Supabase — database, authentication, file storage
  • Vercel — website hosting (axelapp.online)
  • Expo, Apple Push Notification service, Google Firebase Cloud Messaging — push delivery
  • Resend — sign-in, confirmation and invite emails
  • Sentry — crash and error reporting (if enabled)
  • Apple App Store / Google Play — app distribution and, if applicable, payments
• Authorities, when required by law, court order, or to protect someone's life or safety.
• A successor organization in a merger or acquisition, under this same policy.

5. International transfers

Our providers store or process data outside the Philippines: the database, sign-in and file storage are hosted in Singapore (Supabase), emails are sent from Japan (Resend), and push notifications and the website pass through servers in the United States and other countries (Expo, Apple, Google, Vercel). We use providers with appropriate safeguards and remain accountable for your information under RA 10173.

6. How long we keep information

• Account and care information: while your account or family is active.
• When you delete your account: your profile and sign-in are removed. If you are the only member of a family, that family and all its care information, documents and logs are permanently deleted. If other members remain, the shared family information stays available to them and ownership passes to another member.
• Free-trial records: the one-way hashes above are kept after you delete your account, so the free trial can't be claimed again. They can't be turned back into your email or device ID and aren't used for anything else.
• Backups are overwritten within 30 days. Audit and security logs are kept for up to 2 years where needed for legal or security reasons, then deleted or anonymized.

7. Security

We encrypt data in transit (HTTPS/TLS) and at rest through our hosting providers, isolate each family's data with database access rules, keep an audit trail of access to health information, and offer an in-app biometric lock. No system is 100% secure; if a breach affecting your personal information occurs, we will notify you and the NPC as required by law.

8. Your rights

Under RA 10173 you have the right to be informed, to access, to object, to correct, to erasure or blocking, to data portability, to withdraw consent, and to file a complaint with the NPC. In the app you can:

• Export your family's data: More → Privacy & Data → Export my family’s data
• Correct information by editing it directly
• Delete your account: More → Privacy & Data → Delete my account (or see our account deletion page)
• Turn off notifications in your phone's settings

For other requests contact our Data Protection Officer. We respond within 15 business days.

9. Children

Axel is for adults 18 and over. We do not knowingly collect information from children except where a parent or guardian adds it as care information.

10. Changes

We will post updates here and change the effective date. For material changes we will notify you in the app or by email before they take effect.

11. Contact

Data Protection Officer: Axel Privacy Team Email: privacy@axelapp.online Address: Philippines

You may also contact the National Privacy Commission: www.privacy.gov.ph · complaints@privacy.gov.ph