Privacy Policy

Swift Axis
Effective date: 25 October 2026
Last updated: 25 October 2026

This Privacy Policy explains how Swift Axis, operated by Jai Reddy (EquosNine) ("Swift Axis", "we", "us" or "our"), collects, uses, shares, protects, keeps and deletes personal information. It covers the Swift Axis website, the Swift Axis Studio (where writers and editors work), the Swift Axis API, and the Swift Axis mobile app once it is released (together, the "Service").

Privacy contact: Jai Reddy, jai.reddy@equosnine.com

1. Summary

You can read Swift Axis without an account.
We do not sell your personal information.
We use anonymous analytics for internal use only. Our analytics tools are ones we run or control (today, Umami, hosted on our own server and using no cookies). They don't track you across other websites, and we don't sell or share the results.
The website and the future app will show ads. Ads may be provided by third-party ad networks that can use cookies or device identifiers to show and measure ads (section 2.8). We will name our ad partners here before ads go live, and you can opt out of personalised ads.
We collect personal information mainly when you contact us, sign in (writers, editors and, where offered, readers) or, in future, pay for a writer subscription.
Our servers are in Malaysia (Kuala Lumpur), rented from Hostinger.
You can ask us to access, correct or delete your information, or delete your account, by emailing jai.reddy@equosnine.com. We respond within 30 days.

2. Information we collect and how we use it

2.1 When you visit the website or use the app to read

Information	How we get it	Why we use it
Technical request data: your IP address, the date and time, the page or API address requested (including any query string), the response status, and timing	Recorded automatically by our web server and reverse proxy for every request	To run the Service, fix errors, and protect against abuse and attacks
Anonymous analytics: pages viewed, referring website, browser, operating system, device type, screen size, language and approximate country	Collected by analytics tools we run or control. Today this is Umami, self-hosted on our server and cookie-free	For internal use only: to understand which stories are read and to improve the Service. Our analytics don't identify you, don't store your IP address, don't track you across other websites, and are never sold or shared
Reading preferences on your device: light/dark theme, which stories you've read, how far you scrolled, and whether you dismissed the "pick up where you left off" card	Saved by our pages in your browser's local storage (or the app's storage)	To remember your settings and show your reading progress. This stays on your device and is not sent to us unless you sign in to a reader account (section 2.4)

Images from Unsplash. Some story images are shown directly from Unsplash's servers (images.unsplash.com), as Unsplash's terms require. When your browser or the app loads one, Unsplash receives your IP address and basic browser or device information. Unsplash handles this under its own privacy policy. All other images are stored on and served from our own server.

2.2 When you contact us

If you use the contact form, we collect your name, email address, an optional subject, and your message, along with the time it was sent and whether we have read or archived it. The technical request data in section 2.1 is also recorded.

We use this only to read, answer and keep track of your enquiry. Messages are stored in our database and read by the site owner in the Swift Axis Studio. We don't add you to any mailing list. We do not run a newsletter.

2.3 When you sign in as a writer or editor (Swift Axis Studio)

Sign-in. We use Pocket ID, a sign-in service we host ourselves, with passkeys. There are no passwords. Pocket ID stores your account details (name, email address, a unique account ID) and the public key of your passkey. Your passkey's private key never leaves your device. Pocket ID also keeps a security log of sign-in events, including IP address and device/browser details.
Studio account. When you sign in, we receive and store your name, email address and account ID, your role (owner or writer), and which writer personas (bylines) you can write as.
Your content. We store the stories, drafts, images, persona names and bios you create, so they can be edited and published. Published stories are public under the persona or byline chosen.
Draft backup on your device. The Studio keeps a temporary copy of the story you're editing in your browser's local storage until you save, so you don't lose work.
Image search. If you search for stock images in the Studio, your search terms are sent from our server (not your browser) to Unsplash, Pexels, Pixabay or Openverse. When you choose an Unsplash photo, Unsplash is told it was used, as its terms require.

2.4 Reader accounts (optional)

Where reader accounts are offered, readers can sign in through Pocket ID to sync reading progress across devices. We then store your name, email address, account ID, the stories you've read, and your reading trail. Reader accounts are optional, and you can read everything without one.

2.5 API tokens and the audit log (site owners)

Site owners can create API tokens so that tools, including AI assistants, can help manage the site.

We store only a one-way hashed (SHA-256) copy of each token, plus its name, permissions ("scopes"), creator, creation, expiry, last-used and revocation times.
Every change made with a token is recorded in an audit log: which token was used, the action, the address it was sent to (without the query string), the result and the time. The audit log does not record IP addresses or browser details.

2.6 Paid writer subscriptions (when offered)

We plan to offer paid writer subscriptions (monthly or annual). When this launches:

Payments are processed by Stripe. You enter your card details on Stripe's secure payment page. Swift Axis never receives or stores your full card number or security code.
Stripe collects the payment details it needs (such as name, email, card details and billing country or address) and handles them under the Stripe Privacy Policy.
We store your subscription details: your Swift Axis account, plan, status, start/renewal/cancellation dates, Stripe customer and subscription IDs, and records of invoices, payments and refunds.
We use this to give you writer access while your subscription is active, manage renewals and cancellations, provide receipts, handle refunds and meet tax and accounting obligations.

2.7 The Swift Axis mobile app (when released)

We plan to release a Swift Axis app for Android on Google Play. The app follows the same data practices as this policy:

It reads stories from our servers, and requests to our servers record the technical data in section 2.1.
Sign-in, where offered, uses Pocket ID passkeys as in sections 2.3 and 2.4.
Reading preferences and progress are stored on your device as in section 2.1.
Ads in the app: the app will show ads (section 2.8). Our ad partners' software in the app may collect your device's advertising ID (the Android advertising ID), along with basic device and app-usage information, to show and measure ads. You can reset or delete your advertising ID, or opt out of personalised ads, in your Android settings.
Device permissions: the app needs internet access, and access to the advertising ID once ads are added. If we add notifications, the app will ask for notification permission first, and we would store a notification token for your device only to send the notifications you turned on. The app does not access your location, contacts, camera, microphone, photos or files.
Crash reporting: if the app uses a crash-reporting tool, it would collect crash details, device model and operating system version only to fix bugs, and we will name that tool here.
Account deletion in the app: the app will include an option to delete your account and its data from inside the app, in addition to the email method in section 6.

We will update this policy before the app is released to describe any app-specific details, including the ad and analytics tools used in the app. The app's Google Play Data safety section will match this policy, including any collection of the advertising ID.

2.8 Advertising

Swift Axis is free to read, and ads help pay for it. The website and the mobile app will show ads.

Who serves the ads. Ads may be served by third-party advertising networks. We haven't chosen an ad partner yet. Before ads go live, we will name each ad partner in this policy and link to its privacy policy.
What ad partners may collect. To show ads, limit how often you see them, measure their performance and prevent ad fraud, ad partners may collect information such as your IP address, browser and device type, the pages or screens you view, cookies or similar identifiers on the website, and your device's advertising ID in the app.
Personalised ads. Ads may be personalised based on your interests, as inferred by the ad partner. Where the law requires consent, for example for visitors in the EU and UK, we will ask for it before personalised ads or ad cookies are used, and you can change your choice at any time.
Opting out. On the website, you can block or delete cookies in your browser settings and use the opt-out tools our ad partners provide. In the app, you can opt out of personalised ads or delete your advertising ID in your Android settings (Settings > Privacy > Ads). You may still see ads after opting out, but they won't be personalised.
Their policies apply. Information collected directly by ad partners is handled under their own privacy policies.
What we don't do. We don't sell your personal information to ad partners or anyone else. We don't give ad partners your name, email address, contact messages or account details. We don't link your advertising ID to your name, email or other personal identifiers, or to any persistent device identifier.

3. Cookies and similar technologies

Our own cookies. Swift Axis itself sets no cookies for readers, and our analytics are cookie-free. We use our own cookies only to keep you signed in and keep sign-in secure:

Cookie	Purpose	Lasts
`session_token`	Keeps a writer or editor signed in to the Studio	7 days, or until you sign out
`oauth_state`	Protects the sign-in process against forgery	10 minutes
`sa_not_editor_email`	Shows your email on the "not an editor" page if your account doesn't have Studio access	5 minutes
`sa_reader`, `sa_reader_state`	Reader sign-in, where reader accounts are offered	7 days / 10 minutes

These cookies are strictly necessary for signing in, are marked HttpOnly where possible, and are never used for advertising. Information kept in local storage is described in sections 2.1 and 2.3, and you can clear it at any time by clearing your browser's site data.

Ad partners' cookies. Once ads go live, our ad partners may set their own cookies or use similar technologies on the website to show and measure ads (section 2.8). Where the law requires, for example in the EU and UK, we will ask for your consent first. You can block or delete these cookies in your browser settings.

4. How we share information

We do not sell or rent your personal information. We share it only as described here:

With service providers that help us run the Service, and only as needed:

Provider	What they do	Information involved	Location
Hostinger	Hosts our virtual private server (managed with Coolify), which runs the website, Studio, API, database, uploaded images, Pocket ID and Umami	All information stored on our server	Kuala Lumpur, Malaysia
Unsplash	Serves some story images directly to readers	IP address and browser/device details of readers who load those images	United States / global
Unsplash, Pexels, Pixabay, Openverse	Stock image search in the Studio	Search terms, sent from our server	Various
Stripe (when subscriptions launch)	Payment processing	Payment and billing details; subscription records	Global
Advertising partners (when ads go live; named here before then)	Showing, limiting, measuring and personalising ads, and preventing ad fraud	Information their tags or app software collect directly: IP address, browser/device details, pages or screens viewed, cookies or similar identifiers, and the advertising ID in the app (section 2.8)	May include the United States and other countries

When the law requires it, for example to comply with a valid legal request, or to protect the rights, safety and security of our users, the public or Swift Axis.
In a business transfer, if Swift Axis is sold or transferred. We would notify you before your information becomes subject to a different privacy policy.
With your instruction, for example when you publish a story, which then becomes public.

Pocket ID and Umami are self-hosted on our own server, so no outside analytics or sign-in company receives your information. We don't share our internal analytics with anyone.

5. How long we keep information

We keep personal information only as long as we need it for the purposes above, then delete it or make it anonymous.

Information	How long we keep it
Server and reverse-proxy request logs (including IP addresses)	30 days
Pocket ID sign-in security logs	90 days
Contact form messages	12 months after we receive them, or sooner if you ask us to delete them
Studio sign-in sessions and reader sessions	7 days, or until you sign out. Expired sessions are removed automatically
Writer/editor and reader accounts	While the account is active. Deleted within 30 days of your deletion request or of your Studio access being removed
Reading progress (reader accounts)	Until you delete it or your reader account is deleted
Stories and other content you create	Until it is deleted in the Studio, or as set out in section 6 when your account is deleted
API tokens	Until the site owner deletes them or the owner's account is deleted. Revoked or expired tokens no longer work
API audit log	90 days, then deleted automatically
Anonymous internal analytics (Umami)	Up to 24 months. It contains no names, email addresses or IP addresses
Information collected by advertising partners	Under each partner's own retention policy, which we will link when ads go live
Backups (when introduced)	Up to 30 days, then overwritten
Subscription, billing and tax records (when subscriptions launch)	7 years after the transaction, as Australian tax and accounting laws require

6. Deleting your account and data

You can ask us to delete your account and your personal information at any time. Deletion is free and will not be refused because you have not given a reason.

How to request deletion

Email jai.reddy@equosnine.com from the email address linked to your account (or tell us which address it is), with the subject "Delete my Swift Axis account" or "Delete my data".
If needed, we will confirm the request comes from you, usually by replying to that email address.
We will delete your data and confirm by email within 30 days of your request.

When the mobile app is released, you will also be able to delete your account from inside the app. This page remains the web method for account deletion.

What we delete: your Studio or reader account (name, email, account ID, role, persona memberships), your Pocket ID account and passkey record, your sessions, your reading progress, and any contact messages you sent us.

Content you published:

Stories you published under your own byline are deleted.
Stories published under a shared persona are deleted too, unless you agree that they can stay on the site without your personal details.

What we may keep, and why:

Information we must keep by law, such as subscription billing and tax records (7 years, section 5).
Information we need to keep briefly for security or fraud prevention, such as server logs, until they expire (30 days).
Copies in backups, which are overwritten within 30 days.

Deleting your account is permanent. We do not "freeze" accounts instead of deleting them.

7. Your rights

Depending on where you live, privacy laws such as the Australian Privacy Act 1988 (including the Australian Privacy Principles), Malaysia's Personal Data Protection Act 2010, and the EU/UK General Data Protection Regulation (GDPR) give you rights over your personal information. We offer these rights to everyone:

Access: ask for a copy of the personal information we hold about you.
Correction: ask us to fix information that is wrong or out of date.
Deletion: ask us to delete your information or your account (section 6).
Objection and restriction: ask us to stop or limit certain uses of your information.
Portability: ask for your information in a common, machine-readable format.
Withdraw consent: where we rely on your consent, withdraw it at any time.
Complain: contact us first so we can try to fix the problem. You may also complain to your privacy regulator: in Australia, the Office of the Australian Information Commissioner (oaic.gov.au); in Malaysia, the Personal Data Protection Department; in the EU or UK, your local data protection authority.

To use any of these rights, email jai.reddy@equosnine.com. We respond within 30 days.

Legal bases (for GDPR purposes):

We use your information to provide the Service you asked for (contract): accounts, sign-in and subscriptions.
We use it for our legitimate interests in running, securing and improving the Service: server logs and anonymous, cookie-free analytics. Where required by law, we use it with your consent for ad cookies and personalised ads, and you can withdraw that consent at any time.
We use it with your consent: when you send us a message or turn on optional features such as notifications.
We use it to meet legal obligations: tax records.

8. Where your information is stored (international transfers)

Our server, database, uploaded files, Pocket ID and Umami are all hosted in Kuala Lumpur, Malaysia. If you use Swift Axis from outside Malaysia, including from Australia, the EU or the UK, your information is transferred to and stored in Malaysia.

Some service providers (Unsplash, our advertising partners once ads go live, and Stripe once subscriptions launch) may process information in other countries, including the United States.

We take reasonable steps to make sure your information is protected to the standard described in this policy wherever it is processed.

9. How we protect your information

All connections to the Service use HTTPS encryption.
Sign-in uses passkeys, so there are no passwords to steal or reuse.
Sign-in cookies are HttpOnly where possible and use SameSite protection.
API tokens are stored only as one-way hashes, can be limited to specific permissions, can expire, and can be revoked at once. Changes made with tokens are recorded in an audit log, and each token is rate-limited.
Access to the Studio is limited by role. Only the site owner can see contact messages, reader accounts, settings and API tokens.
Uploaded files are checked to make sure they are genuine images.
Access to the server and database is restricted to the site administrator.

No method of transmission or storage is completely secure. If a data breach is likely to cause you serious harm, we will notify you and the relevant regulator as the law requires.

10. Children

Swift Axis is a general-audience publication and is not directed at children under 13. We do not knowingly collect personal information from children under 13, and we will set up our ads so they are suitable for a general audience. We don't knowingly show personalised ads to children. If you believe a child under 13 has given us personal information, contact us at jai.reddy@equosnine.com and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time, for example when ads go live (to name our ad partners) or when the mobile app or paid subscriptions launch. We will post the new version on this page and change the "Last updated" date. If a change is significant, we will also show a notice on the website (and in the app, once released) before the change takes effect. Where the law requires your consent to a change, we will ask for it.

12. Contact us

For any questions about this policy or your personal information, or to make a request:

Swift Axis, operated by Jai Reddy (EquosNine)
Email: jai.reddy@equosnine.com