Privacy Policy

Last updated: November 7, 2026

This policy explains what personal data Atox collects, why, and what choices you have. In short: your projects, files and chats stay on your computer. We collect only what we need to run paid plans, and we never sell your data.

Who is responsible

Atox is operated by Abdumalik Fattaev, an individual based in Uzbekistan ("we", "us"), who is the controller of the data described here. Contact: malikfattaevx@gmail.com.

Data that stays on your computer

Your projects, files, chats, drafts and settings are stored locally on your computer. We do not receive them. When you use an agent with your own subscription or API key, it talks to its provider (for example Anthropic or OpenAI) directly, under that provider's privacy policy.

What we collect

Anonymous usage statistics (the app)

The app sends anonymous statistics to Aptabase so we know how many people use Atox: an install event once, then one event per day, week and month the app is open. Each event carries only the app version, operating system name and version, and locale. Aptabase does not store identifiers or IP addresses. You can turn this off in Settings → Privacy.

Update checks (the app)

The app checks GitHub for new versions. GitHub receives a normal web request, including your IP address, under its own privacy policy.

Account and subscription (paid plans)

Your email address, account ID, plan, subscription status and billing period, to sign you in and give you access to what you paid for.

Usage records (paid plans)

For each request to an Atox model: the time, the model, the number of tokens and the cost. We use them to apply your plan's allowance, to prevent abuse and to answer billing questions. We do not store the content of your prompts or of model responses.

Requests to models (paid plans)

When you use an Atox model, your request, which may contain code and files that you or your agent include, passes through our server to AI/ML API and on to the model provider, only to get the response back to you. AI/ML API and model providers process it under their own policies and may keep it for a limited time, for example for abuse monitoring. Do not include data you are not allowed to share with them.

Payments

Dodo Payments, our Merchant of Record, collects your payment details, billing address and tax information. We do not see or store your card details. We receive the order, subscription status and the country of purchase.

Server logs and email

Our servers and hosting provider keep standard technical logs, including IP addresses, for security and troubleshooting, for up to 30 days. If you email us, we keep the conversation to answer you.

Why we use it

• To provide the service you asked for: your account, plan, usage and payments.
• To meet legal duties, such as tax and accounting records.
• For our legitimate interests: security, preventing fraud and abuse, and understanding how many people use Atox.

We do not use your data for advertising, do not sell it and do not share it for cross-context behavioral advertising. We do not train AI models on it.

Who we share it with

Only with services that help us run Atox, and only as needed:

• Dodo Payments — payments, taxes and refunds;
• AI/ML API (aimlapi.com) and the model providers it routes to — answering requests to Atox models;
• Railway — hosting of our website and servers;
• Aptabase — anonymous usage statistics;
• GitHub — app downloads and updates.

We may also disclose data when the law requires it, or to protect our rights and the safety of others. If Atox is transferred to another owner, your data moves with it under this policy, and we will tell you.

International transfers

These services may process data in the United States, the European Union and other countries. Where the law requires it, transfers rely on appropriate safeguards, such as the standard contractual clauses of those services.

How long we keep it

• account data: while your account exists, and up to 30 days after you delete it;
• usage records: up to 24 months, to handle billing questions and disputes;
• payment and tax records: as long as accounting and tax laws require;
• server logs: up to 30 days.

Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, to object to or restrict its use, and to withdraw consent. Write to us from your account email and we will answer within 30 days. We may need to keep some data to meet legal duties. You can also complain to the data protection authority in your country.

Security

Data is encrypted in transit, and access is limited to what is needed to run Atox. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Children

Atox is not meant for children. Paid plans are for people aged 18 or older, and we do not knowingly collect data from children.

This website

atox.dev uses no cookies, no analytics and no trackers. Our hosting provider keeps standard server logs as described above.

Changes to this policy

We may update this policy. The date at the top shows the current version. If a change matters, we will tell you in the app or by email before it takes effect.

Contact

Privacy questions and requests: malikfattaevx@gmail.com.