Your requests stay on your machine.
Axon is a local app. There's no account, no cloud workspace, no analytics and no crash reporter, so there is very little for us to collect. Here's the short version, then the full policy.
Your requests and responses
Collections, environments, history and secrets live only on your devices.
Nothing to sign up for
Your identity is a key generated on your device, not an email address.
Team sync skips our servers
Devices talk directly over your network or VPN. We are never in the path.
AI assistant
Messages you send, and the context you attach, go to the model provider you chose.
What we collect
Nothing about how you use Axon. The app contains no analytics, no telemetry, no advertising identifiers, no tracking pixels and no crash reporter. We do not run a server that receives your workspace data, so we never see your requests, responses, collections, environments, history or secrets.
The only data we may hold is what you send us yourself — for example an email to our support or privacy address — and, if you buy a plan, the order details our payment provider shares with us (see Purchases & licenses).
| Data | Where it goes |
|---|---|
| Requests, responses, history | Your device only |
| Vault secrets | Your device only, never synced |
| Collections and environments, with team sync on | Paired devices, directly, over TLS |
| Collections and environments, with Git linked | The folder you chose, and any remote you push to |
| AI assistant messages | The model provider you selected, only when you send |
| Update check | GitHub, when Axon starts (can be turned off) |
| License key, if you bought a plan | Our payment provider, about once a day |
Network calls Axon makes on its own
Your requests only go where you send them. Apart from those, Axon makes exactly two kinds of network call by itself:
- Update check. When Axon starts, it downloads a small release manifest from GitHub to see whether a newer signed release exists, and installs it if so. Like any web request, this reveals your IP address and standard request headers to GitHub, under GitHub's privacy statement. Turn it off in Settings → Update; Axon then makes no update requests unless you check by hand.
- License check. Only if you have activated a paid license key. Axon revalidates the key with our payment provider about once a day. A free install never contacts the store.
Data on your device
Everything you create in Axon is stored in one SQLite database in your operating system's user-data directory, with each workspace kept apart inside it. Exports you write go wherever you save them.
- Secrets are stored in your operating system's keyring, with an encrypted file as a fallback when no keyring is available.
- Vault entries are encrypted at rest with a key derived from a passphrase you set. The derived key is held in memory while the vault is unlocked and is never written to disk.
- AI conversations are kept in memory for the life of the tab and are not written to disk.
Uninstalling Axon and deleting its user-data directory removes all of it.
Team sync
Team sync is off until you host or join a team. While discovery or hosting is on, your device announces itself on the local network over mDNS so nearby teammates can find it.
Paired devices exchange a workspace directly with each other over an encrypted TLS connection; there is no server in the middle. Pairing is confirmed with a short code both people compare, which stops a man-in-the-middle and keeps unknown devices on the same network from joining.
Auth settings and environment variables travel inside the synced data encrypted with a shared team key (ChaCha20-Poly1305), and are decrypted locally by each member. Vault entries never sync.
Revoking a member stops future syncs but cannot remove data that already reached their device. Rotating the team key protects only future secrets, so after someone leaves, also rotate the credentials themselves with the service that issued them.
Git
If you link a folder with Work with Git, Axon writes your collections and environments to that folder as YAML. Secrets are never written to these files. Commits, pulls and pushes run through the git on your system, to whatever remote you have configured; we are not involved.
AI assistant
The assistant is optional and only acts when you send it a message. Axon never stores API keys: it runs through an AI CLI already installed on your machine (the Claude Code CLI), through Ollama for fully local models, or through a direct connection you configure.
When you send a message, your prompt and the context it includes — such as your workspace's collection tree, the active request or environment, and the conversation so far — go to the provider you selected. With Ollama, nothing leaves your machine. With a hosted model, that provider's own terms and privacy policy govern how the data is handled and retained; we do not receive or store it.
The assistant can only propose actions inside Axon, and every change waits for you to press Apply.
Purchases & licenses
Paid plans are sold through Lemon Squeezy, which acts as merchant of record and processes payment in your browser. Axon never sees your card details. Lemon Squeezy shares order details with us — such as your name, email address, plan and license status — so we can provide support, and handles tax and payments under its own privacy policy.
When you activate a key, Axon sends the key and a device name to Lemon Squeezy, then revalidates it about once a day. If the check can't reach the store, your plan keeps working offline for 14 days.
Your choices
- Turn off automatic update checks in Settings → Update.
- Leave team sync, Git and the AI assistant off, and Axon sends nothing beyond the requests you make.
- Use Ollama to keep AI conversations entirely on your machine.
- Back up, export or delete your workspace at any time from the app.
Because we don't hold your workspace data, there is nothing for us to export or delete. If you have emailed us, or bought a plan, ask and we will delete or export what we hold about you.
Changes to this policy
If this policy changes, we will update the date at the top of this page and note the change in the changelog.
Contact
Questions about this policy: privacy@axon.app.