LEGAL SURFACE · REVIEW DRAFT
The policy must match the product.
This route records the categories that require final answers. It is deliberately not presented as a completed privacy notice.

Categories to document
- Local identity keys, paired-device records, and recovery state.
- Encrypted Capsule envelopes, receipts, expiry, and abuse-prevention metadata.
- Optional contacts, location, notifications, and nearby-radio permissions.
- Optional Axon Assist requests and the redaction applied before processing.
- Minimal website, service-health, and security telemetry if enabled.
Product commitments
Private message text, precise coordinates, contact names, secret Invite capabilities, and stable identity must not be placed into public previews or marketing analytics.
Still required before launch
Every category needs a purpose, processor, access boundary, retention period, deletion behavior, and user control that has been verified against the deployed system.