Brightfold

Privacy Policy: Axiota

Axiota, by Brightfold. Last updated 11 October 2026

This Privacy Policy explains how Axiota ("we," "our," "the app") collects, uses, and protects your information.

1. Information we collect

Account information. When you sign up, we collect your email address and, if you use Google or Apple Sign-In, the basic profile information those providers share with us (name and email). The profile photo those providers offer is not used or stored: the app draws its own avatars.

Content you capture. Anything you submit to generate flashcards or fact-checks — pasted URLs, text, images, PDFs, and voice recordings — along with the notes, flashcards, and claim verifications generated from it.

Study data. Your review history (grades, timestamps, how long each answer took), flashcard schedule (via the FSRS spaced-repetition algorithm), study streaks, and the results of free-recall and quiz sessions (how many cards, how many right). Nothing you say or type during a session is stored beyond the grade.

App usage events. The app records which steps you take — for example opening the app, finishing a setup step, completing a session, making a deck, or viewing the subscription screen — with the time, your device platform and the app version. They are stored in our server logs under your account id for 400 days, then deleted automatically. They are never sold or shared with third parties or advertisers, and are used only to understand which parts of the app work and where people get stuck. They contain nothing you captured or studied.

Profile preferences. Your stated background/expertise level, subject interests, preferred languages, and target retention setting — used to calibrate what gets generated for you.

Your display name. The name you choose during setup is unique across all Axiota accounts and is public in three places: it is the author byline on any deck you publish, it is what your friends see beside your progress, and it is the exact string someone types to send you a friend request. Your account's real name — the one on your Google or Apple sign-in — is never published. There is no name search or user directory: someone can only reach you if you have told them your name.

Community content. If you publish a deck to Community Decks, its title, summary, and cards become visible to all other signed-in users, with your display name shown as the author.

Friends and progress sharing. If you add a friend, that person can see a summary of your activity: your display name, level and rank, your weekly XP, your current and longest study streak, and which public decks (Axiota Originals and community decks) you hold. They cannot see your captures, your notes, the cards you made, or your review history — those stay private to your account, and no other user has any access to them. You can withdraw this at any time by removing the friend or turning the shared profile off, and declining or blocking a request stops it in both directions.

Duels. A duel is a set of multiple-choice questions built from a public deck you and a friend both hold. Your friend sees the deck, the questions and your final score. Privately captured material is never used in a duel. A duel may carry a stake in weekly XP, which moves points between the two players' weekly standings and involves no money and nothing purchasable.

Exam cohorts. If you choose to join a cohort, you are placed with other people who own the same course pack and are sitting the exam in the same month. This is the one place where people who are not your friends can see you. They see your display name, level, worn cosmetic items, current streak and weekly XP — the same summary a friend sees — plus how much of that course's syllabus you have covered and how well you are recalling it. They cannot see your captures, notes, cards or review history. Joining is always an explicit choice, never a default, and leaving removes your row from everyone else's board.

Published-deck statistics. If you publish decks, we keep a public summary of your authorship — your display name, level, how many decks you have published, how many times they have been imported and their average rating — visible to any signed-in user who reaches one of your decks. It contains nothing about what you study.

Reports. If you report a deck or a person, we keep your report (what you reported, the reason, any note you wrote and your account id) so a moderator can act on it, in our database and in a private moderation spreadsheet only moderators can open. Both are deleted when you delete your account.

Notification tokens. If you allow notifications, we store the push token your device's operating system issues, so we can tell you when a friend accepts a request or a duel is waiting on you. It identifies a device, not a person. It is deleted when you sign out or delete your account, and discarded when your phone stops accepting notifications. Turning individual notification types off in the app keeps the token and stops the sends.

Purchase and entitlement data. If you subscribe, our billing provider (RevenueCat) processes your purchase and shares your subscription status with us so we can unlock paid features. We do not receive or store your payment card details.

2. How we use your information

3. Third parties we share data with

We do not sell your personal data.

3a. Advertising

There are no banners and no ads inside a study session. The only advertising in Axiota is a rewarded video you choose to watch in the shop, in exchange for gems. Nothing is shown unless you tap it.

Whether an ad was watched is confirmed by Google directly to our server, not by your device, which is what stops the reward being claimed without watching. Subscribers never see an ad at all.

4. Data retention and deletion

Data retention periods

We retain different categories of data for specific periods based on their operational need:

How to delete your account and data

You have the right to request permanent deletion of your account and all associated personal data at any time:

What stays after deletion. Database backups drop the deleted data within 7 days. Server logs (30 days) and app usage events (400 days) expire on their own schedule; they can't be edited, and once your account is gone the account id in them no longer leads to anyone.

Community Decks Exception. If you published a deck to Community Decks and another student previously imported a copy into their library, their personal copy remains in their library to preserve their study progress. However, the deck is removed from the public community catalog and your name and handle are permanently removed from it.

5. Your rights

Depending on your location (including under GDPR in Europe and CCPA/CPRA in California), you have legal rights regarding your personal data, including the right to:

You can exercise these rights directly within the app (e.g. updating profile settings, toggling notifications, or deleting your account), via our deletion page at https://brightfoldapps.com/axiota/delete-data, or by contacting us at axiota@brightfoldapps.com.

6. Children's privacy

Axiota is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

7. Security

Data is encrypted in transit and at rest via Firebase's infrastructure.

8. International data transfers

Your data is processed on Google Cloud infrastructure: the database is stored in Europe, and our servers and file storage are in the United States. This may be outside your country of residence.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy or your data can be sent to axiota@brightfoldapps.com.