Paxio

Effective: 2026-05-05 — Last updated: 2026-10-01 — App: Paxio for iPhone (OOTSSU)

No sign-in required

Paxio opens without an account. When you first save your setup, Paxio creates a private guest account on your device: a random identifier with no email address or name. You can optionally connect an account later (Settings → Connect Account: email, Apple or Google) to keep your records if you change phones.

What we collect

• Account: the random guest identifier. If you connect an account, also your email address (email sign-in), an Apple user identifier and relay or real email (Sign in with Apple), or a Google account identifier. These are stored in Supabase Auth and used only to identify your account.
• Setup answers: how you mostly feel about money, what worries you and your goals.
• Daily check-in data: your anxiety score (1–10), the emotional triggers you select, and any optional note you add. This data is stored under your account with row-level security — only your account can read these rows.
• AI coaching conversations: the messages you send to Paxio and the replies you receive. They are saved to your account so your session history continues, and they are processed by Anthropic when you chat (see “AI processing” below).
• Exercise reflections: text you write during CBT exercises and which exercises you completed. Stored under your account.
• Subscription state: managed by RevenueCat and Apple. RevenueCat links your subscription to your pseudonymous Paxio account identifier (the same random identifier, never your name or email). We never receive card numbers or payment details.
• AI usage records: to enforce the free plan and fair-use limits we keep, per account identifier, the date and number of AI requests and a random identifier for each coaching session — no message text — plus daily counts keyed by a salted one-way hash of your network address (the address itself is not stored). Usage records are deleted automatically after 35 days and network-hash counts after 7 days.

What we don't collect

• We do not use advertising identifiers (IDFA/IDFV for ads).
• We do not track you across other apps or websites.
• We do not access your contacts, photos, camera, microphone, or location.
• We do not embed analytics SDKs or third-party ad networks.
• We do not sell your data or share it with advertisers.

AI processing

The first time you use AI features, Paxio asks for your permission. When you send a coaching message, our server forwards the recent messages of that session (up to the last 30) to Anthropic's Claude API to write the reply. For the Pro weekly insight, our server sends only summary figures from your last 7 days of check-ins (number of days, average anxiety score, most frequent trigger) — not your notes. Under Anthropic's commercial API terms, this data is not used to train Anthropic's models and API inputs and outputs are deleted within 30 days. The conversation text is also stored in your Paxio account (see above) until you delete it.

Data storage and security

User data is stored in Supabase, hosted in the US East (N. Virginia) region. Data is encrypted in transit (TLS) and at rest by the hosting platform. Row-level security policies ensure that no user can read another user's check-ins, conversations or reflections.

Third-party services we use

How long we keep your data

Your data is kept for as long as you use Paxio. When you delete your Paxio data, your check-ins, coaching conversations, exercise reflections, setup answers and profile are removed immediately. Your sign-in record is removed too, unless the same login is still used by another OOTSSU app — in that case only the Paxio data is removed. The small AI usage records described above are kept for up to 35 days for abuse prevention; they contain no message text. Deleting your data and starting a new guest account gives that new account its own free allowance — overall use is limited by daily per-network limits and an overall daily cap. Purchase records held by Apple and RevenueCat are kept as required for billing and tax.

Your rights and deleting your data

You can delete your data at any time in the app: Paxio → Settings → Delete My Data (guest) or Delete Account (connected account). Deletion happens immediately and the app continues with a new, empty guest account. If the deletion cannot be completed (for example, you are offline), nothing is deleted and the app shows the reason. See also the data deletion page. If you cannot open the app, email ootssu@ootssu.com from the address on your connected account. Deleting your data does not cancel a subscription — cancel it in your Apple ID subscription settings.

Children

Paxio is intended for users aged 17 and older. We do not knowingly collect personal data from anyone under 17.

Contact

Privacy questions: ootssu@ootssu.com.