Sealed first
Message content is encrypted on the sender’s device before transport. A nearby intermediary carries a sealed Capsule, not readable message text.
PRIVACY BY PRODUCT DESIGN
The message stays inside the Capsule.
Axon is being built to minimize readable content at every handoff while staying honest that transport metadata and device permissions can still exist.
Safe to share
Gift preview metadata must not contain plaintext messages, precise location, contact names, stable identity, or secret keys.
Permission each time it matters
Location is optional, permission-gated, and time-sensitive. Axon must not present an old coordinate as current.
No invisibility claim
Devices and relays may process the minimum protocol and route information needed to move, expire, reject, or receipt a Capsule. Axon does not claim to eliminate every trace.
No private payload analytics
The public site is designed without message text, invite capabilities, contact names, or precise coordinates in analytics, logs, URLs, or social metadata.
Retention must be published
Final category-by-category retention and deletion terms remain a release gate. Public accounts and paid plans will not launch under an invented or incomplete legal policy.
Privacy includes saying what is still unknown.
The technical design and the final legal privacy notice are separate. The legal draft is visible for review and is not presented as final.
Read the policy draft