Legal

Privacy Policy

Last updated: Jan 21, 2026

Effective: Jan 21, 2026

Axi (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application.

Information We Collect

1.1 Health Data (Apple Health)

With your explicit permission, we may access the following data from Apple Health:

We only access health data that is strictly necessary to provide sleep analysis and wellness insights.

1.2 Health Data (Axi)

1.3 Account Information

Some information is required to create an account on our Services, such as your email address and a password. This is the only information you have to provide to create an account with us. You may also choose to provide other types of information, such as your name, date of birth, height, sex, and weight. Your account information helps secure and provide you with access to our Services.

1.4 Additional Information

To help increase the value of the Services for you, help improve your experience and help advance research regarding the Services, you may choose to provide us with additional information, like logs of or information pertaining to your food & drink consumption, drug consumption, mindfulness activity, workout details, activity details, health details, location details, medical device usage, mood, feeling, stress level, water consumption, third party product usage, sleep disturbances, discomforts, alarm times, bed and mattress information, medical diagnoses, air temperature, humidity, ambient light level, ambient noise level, sleep environment characteristics, and discussion board messages. If you contact us or participate in a survey, contest, or promotion, we collect the information you submit such as your name, contact information, and message.

1.5 Information from Third-Party Services

If you choose to connect your account on our Services to your account on another service, for example, for the purpose of sharing your information from our Services or for the purpose of account creation on our Services, we may receive information from that other service. For example, if you connect to Facebook or Google, we may receive information that you agree to provide such as your name, email, profile information, profile picture, and preferences. You may choose to grant us access to your health, exercise, or activity data from another service. You can stop sharing the information from the other service with us by removing our access to that other service.

1.6 Information We Receive From Your Use of Our Services

Axi may collect or infer health information which may include physiological information such as heart rate and blood pressure, comparative information such as sleep scores, activity information such as calorie expenditure, body profile information such as height and weight, as well as other indicators and indices.

1.7 Usage Information

When you access or use our Services, we receive certain usage data. This includes information about your interaction with the Services, for example, when you view content, install applications or software, create or log into your account, or open or interact with an application on your device. We also collect data about the devices and computers you use to access the Services, including IP addresses, browser type, language, operating system, mobile device information (including device and application identifiers), the referring web page, pages visited, location (depending on the permissions you have granted us), and cookie information.

How We Use Your Information

2.1 Provide and Maintain the Services

We use the information we collect and receive to deliver the Services to you, as otherwise described in this Privacy Policy, and to honor our Terms of Service contract with you. For example, we use your information to provide you with data analyses, notifications, trends, insights, and visualizations associated with your data; to enable community benchmarking features of the Services; and to give you customer support.

2.2 Personalize, Improve, and Develop the Services

We use the information we collect to personalize and improve the Services and to develop new ones. For example, we use the information to protect against and troubleshoot errors; conduct data analysis and testing; promote and market the Services; perform surveys and research; and develop new Services and features. When you allow us to collect precise location information, we use that information to provide and improve features of the Services such as providing you community benchmarks in your local area, and verifying your eligibility for Services that require you be within a particular government territory. We may also use your information to show you more relevant content, make inferences, and provide you with personalized insights to help you improve. For example, information such as your height and weight allows us to derive estimates of your resting metabolic rate which helps us to improve the confidence we have in the quality of your sleep results like your estimated total sleep time. As an additional example, information such as your activity, exercise, and sleep data allows us to approximate the effect of changes in your activity or exercise on your ability to improve your sleep.

2.3 Communicate with You

We use your information when necessary to send you important notices about the Services, provide you notifications that are part of the Services, and respond to you when you contact us. We also use your information to promote features or products that we think you would be interested in. You can control marketing communications via the “Update Preferences” and “Unsubscribe” links in an email.

2.4 Promote Security and Safety

We use the information we collect to advance and promote the security and safety of our users, the Services, and other parties. For example, we may use the information to facilitate secure payments, authenticate users, respond to a legal request or claim, protect against fraud and abuse, enforce our terms and policies, and conduct audits.

We may de-identify or aggregate the information you make available in connection with the Services, in ways that do not personally identify you. Examples of such aggregated information or statistical data include the average total sleep time and average sleeping heart rate of the Axi community. We may use, sell, license, and share this de-identified or aggregated information with third parties for research, business or other purposes such as to help advance scientific understanding of sleep and help advance scientific understanding of ways to improve sleep. Please visit your account settings if you object to Axi using your information for these purposes.

We use your information solely for the following purposes:

We do not use your health data for advertising, marketing, or data resale.

3. AI-Based Sleep Insights

Axi uses artificial intelligence models to generate personalized sleep insights based on your authorized data.

Important:

The information provided by the app is for educational and wellness purposes only and does not constitute medical advice, diagnosis, or treatment.

Data Storage and Security

4.1 How We Retain Data

We retain information as long as it is needed to provide the Services to you and others, subject to any legal obligations to further retain such information. We keep your account information, like your email address and password, for as long as your account is in existence because we need it to operate your account. We keep other information, like your heart rate, exercise or activity data, until you use your account settings or tools to delete the data or your account because we use this data to provide you with your personal statistics and other aspects of the Services. We also keep information about you and your use of the Services for as long as necessary for our legitimate business interests, for legal reasons, and to prevent harm, including as described in the sections How We Share Information and How We Use Information.

Account Deletion and 30-Day Grace Period

When you submit a request to delete your account, your account will immediately be deactivated and enter a 30-day grace period. During this 30-day period, your data will not be processed for any active Services, but it is retained to allow you to easily restore your account if you change your mind. After the 30-day grace period expires, we will formally initiate the deletion process. While most of your personal information will be deleted promptly after this period, it may take up to an additional 90 days to fully purge your personal information from our backup systems due to their complexity.

Data Anonymization and De-identification

We understand the sensitive nature of your health data. Upon the expiration of the 30-day grace period, we will permanently delete all personal identifiers associated with your account (such as your name, email address, password, and device identifiers).

However, we may retain your sleep records, health metrics, and related usage data strictly in a de-identified and aggregated format. This means the data is permanently stripped of any information that could be used to tie it back to you as an individual. We retain this anonymized data to conduct scientific research, optimize our AI models, and improve our Services.

Public Commitment Against Re-identification

In compliance with applicable privacy laws, including the California Consumer Privacy Act (CCPA), we publicly commit that we will maintain and use this information solely in a de-identified or aggregated form, and we will not attempt to re-identify the data or associate it with any specific individual. Additionally, we may retain certain personal information from deleted accounts only as reasonably necessary to comply with the law, prevent fraud, resolve disputes, or enforce our Terms of Service.

4.2 How We Protect Your Information

We are very concerned with safeguarding your information and we work hard to keep your data safe. We use a combination of physical, technological, and administrative measures to protect the information that we collect from or about you from unauthorized access, use or disclosure. These measures include the use of Secure Sockets Layer (“SSL”) technology to allow for the encryption of many of our Services. Please be aware, however, that no method of transmitting or storing information is completely secure. Accordingly, we cannot guarantee the absolute security of any information.

4.3 Data Transfers and International Operations

The Services are operated from the United States. If you are located outside of the United States and choose to use the Services or provide information to us, you acknowledge and understand that your information will be transferred, processed and stored in the United States, as it is necessary to provide the Services and perform the Terms of Service. United States privacy laws may not be as protective as those in your jurisdiction.

Data Sharing

We do not share your personal information except as described in the limited circumstances below:

5.1 When you Direct Us or Agree to Share

You may direct us to disclose your information to others, such as when you direct us to share your information using the sharing functionalities of our Services and when you direct us to share your information with a third party sleep professional or sleep professional service for them to provide your requested service to you. You may also authorize us to share your information with others, for example, with a third-party application when you give it access to your account, or with your employer when you choose to participate in an employee wellness program. Remember that their use of your information will be governed by their privacy policies and terms. You can revoke your consent to share with third-party applications or employee wellness programs using your account settings.

5.2 For External Processing

We may transfer information to our service providers, corporate affiliates, and other partners who process it for us, based on our instructions, and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures. These partners may provide us with services, including for customer support, payments, information technology, server infrastructure, sales, fulfillment, marketing, research, communications, data analysis and surveys.

5.3 To Prevent Harm or for Legal Reasons

We may preserve and share your information with third parties, including law enforcement, public or governmental agencies, or private litigants, within or outside your country of residence, if we determine that such disclosure is reasonably necessary to comply with the law, including to respond to court orders, warrants, subpoenas, or other legal or regulatory process. For example, we may need to preserve the information you share with us via customer support and share that information with governmental agencies in accordance with legal requirements. We may also retain, preserve or disclose your information if we determine that disclosure is reasonably necessary or appropriate to prevent any person from death or serious bodily injury, to address issues of national security or other issues of public importance, to prevent or detect violations of our Terms of Service or fraud or abuse of Axi or its members, or to protect our operations or our property or other legal rights, including by disclosure to our legal counsel and other consultants and third parties in connection with actual or potential litigation.

We may share non-personal information that is de-identified or aggregated so that it cannot reasonably be used to identify an individual. We may disclose such information publicly and to third parties, for example, in public reports about sleep, lifestyle, habits, heart rate, exercise, and activity to partners under agreement with us, or as part of the community benchmarking information we provide to our users.

If we are involved in a business transaction such as a merger, acquisition, or sale of assets, your personal information may be transferred or disclosed in connection with such a transaction. In such a transaction, we will continue to take measures to protect the confidentiality of personal information.

Your Rights and Choices

6.1 Accessing and Porting Data

You can access much of your information by logging into your account, including your dashboard with your daily sleep results.

6.2 Editing and Deleting Data

You can edit and delete much of your information by logging into your account. For instance, you can edit the data you provide and delete your account if you wish. If you are unable to do this, please contact us at [email protected]. We will generally respond to your request within 10-14 business days. If you choose to delete your account, please note that your account will enter a 30-day grace period, during which you may cancel the deletion request. After 30 days, we will delete your personally identifiable information and permanently de-identify your remaining health and sleep data. Please be aware that while your personal identifiers are removed, it may take up to 90 days to completely purge your deleted information from our secure backup systems due to the complexity and size of the systems we use to store data.

6.3 Objecting to Data Use

We give you account settings and tools to control our data use. For example, using your account settings, you can limit the notifications you receive from us and revoke the access of third-party applications that you previously connected to your account. In certain circumstances you can object to our processing of your information based on our legitimate interests, including as described in the How We Use Information section. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons. You have a general right to object to the use of your information for direct marketing purposes.

6.4 Limiting or Restricting Data Use

You may withdraw your consent for data processing at any time. Since our core sleep analysis and research validation require data processing to function, withdrawing your consent is exercised by deleting your account via the App settings. In addition to the various controls that we offer, in certain circumstances, you can seek to restrict our processing of your data. Please note that you can always delete your account at any time.

If you need further assistance regarding your rights, please contact us at [email protected], and we will consider your request in accordance with applicable laws. Should you wish to raise a concern or file a complaint about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.

7. Children’s Privacy

We believe in the importance of taking additional measures to protect children’s privacy. Our Services are not directed to children under 16 and we do not knowingly collect personal data from children under 16. If we learn that we have collected the personal information of a child under 16, we will take steps to delete such information as soon as possible. Parents who believe that their child has submitted personal information to us and would like to have it deleted may contact us at [email protected].

8. Changes to This Policy

We may modify and revise this Privacy Policy from time to time. Please review it occasionally. If we make any material changes to this Privacy Policy, we’ll provide a prominent notice, post the updated Privacy Policy on the Services, and we’ll indicate when such changes will become effective.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Axilab, Inc.

1209 Orange Street

Wilmington, Delaware 19801

United States

Email: [email protected]