Legal and policy information
Axivelo Privacy Policy
Effective date / Last updated: 27 May 2026
App name: Axivelo
Android package: uk.axivelo.app
Website: https://axivelo.app
Contact:
Security contact:
This Privacy Policy explains how Axivelo collects, uses, stores and shares data when you use the Axivelo Android app.
Axivelo is controlled by Marcin Mierzwa trading as Axivelo.
In this policy, “Axivelo”, “we”, “us” and “our” mean Axivelo.
Related pages
Terms of Use: https://axivelo.app/terms
Subscription Terms:
https://axivelo.app/subscription-terms
Delete Your Axivelo Account:
https://axivelo.app/account-deletion
1. Who we are
Axivelo is an Android app for UK Amazon resellers and product sourcers.
For UK GDPR and EU GDPR purposes, the controller of personal data is:
Marcin Mierzwa trading as Axivelo
Website: https://axivelo.app
Support/privacy email:
Security email:
2. What Axivelo does
Axivelo helps users scan or enter product identifiers, view Amazon and Keepa-style product data, compare marketplace pricing signals, estimate profit, save scan history, manage watchlists and buy lists, and access Axivelo Pro features.
Axivelo may include:
- barcode and manual product scanning;
- Amazon and Keepa-style product analysis;
- RapidAPI eBay sold/completed pricing data;
- AI text deal summaries for Pro users;
- scan history;
- watchlist;
- buy list;
- calculator;
- business dashboard;
- referral feature;
- Amazon affiliate product links;
- account login;
- account deletion;
- Axivelo Pro subscription access.
Axivelo provides informational sourcing intelligence only. It does not guarantee profit, Amazon eligibility, ungating, intellectual property safety, product availability, resale approval, sales performance or business results. It is not financial, legal, tax or accounting advice.
3. Account requirement
You need an account to use Axivelo.
Axivelo supports:
- email/password login;
- Google sign-in.
We use Firebase Authentication and Google Sign-In to create and manage accounts.
4. Data we collect
We only aim to collect data needed to provide, secure, improve and support Axivelo.
4.1 Account data
We may collect:
- email address;
- Firebase UID;
- sign-in provider, such as email/password or Google sign-in;
- account creation date;
- login and authentication status;
- account deletion status.
We use this data to create your account, let you sign in, protect your account and link app data to your user profile.
4.2 Subscription and purchase data
If you use Axivelo Pro, we may process:
- RevenueCat customer ID;
- Google Play purchase or subscription identifiers;
- subscription status;
- entitlement status;
- Axivelo Pro entitlement ID:
pro; - billing period;
- renewal, expiry or cancellation status;
- restore purchase status.
Payments are handled by Google Play Billing. Subscription access is managed using RevenueCat.
We do not receive or store your full payment card number.
4.3 Scan and product lookup data
When you scan or search for a product, we may collect and process:
- barcode, EAN, UPC, ASIN or other product identifier;
- product title;
- product category;
- prices;
- Buy Box and seller/offer signals;
- BSR and estimated sales signals;
- fees;
- Amazon and Keepa-style product data;
- RapidAPI eBay sold/completed pricing facts;
- risk or traffic-light indicators;
- lookup timestamps;
- scan history.
Barcode scanning is local/on-device. Normal camera frames are not uploaded for barcode scanning. Only the decoded barcode, ASIN or product identifier is sent to the backend for lookup.
Keepa and RapidAPI requests are made server-side through Firebase Cloud Functions. The Android app does not hold Keepa or RapidAPI API keys.
The RapidAPI eBay provider currently used is:
ebay-average-selling-price.p.rapidapi.com
4.4 User-entered data
You may enter or save data in Axivelo, including:
- cost price;
- notes;
- VAT mode;
- seller type;
- calculator inputs;
- watchlist entries;
- buy list entries;
- referral-related data;
- feature or bug reports.
We use this data to provide app features, calculate estimates, save your preferences and support your account.
4.5 AI text deal summaries
Axivelo Pro includes AI text deal summaries.
Axivelo uses the Google Gemini API for text-based deal summaries. The models used are:
gemini-2.5-flash;gemini-2.0-flashas fallback.
Data sent for AI text summaries may include:
- ASIN;
- product title;
- category;
- BSR;
- estimated monthly sales;
- prices;
- fees;
- Amazon and eBay pricing facts;
- traffic-light or risk indicators;
- seller and offer data;
- user-entered cost price.
We do not send Firebase UID, email address or payment details to Gemini for deal summaries.
Axivelo v1 does not send clothing photos or product images to AI for clothing analysis.
4.6 Analytics data
Axivelo uses PostHog analytics to understand feature use, app behaviour and errors.
PostHog is hosted on the EU host:
eu.i.posthog.com
We use:
- custom events only;
- no session replay;
- no heatmaps;
- no autocapture;
- no Firebase Analytics.
We do not send your email address or Firebase UID to PostHog.
Analytics events may include:
- app screens or features used;
- scan-related usage counts;
- subscription screen interactions;
- error context;
- app version;
- general technical information.
4.7 Logs, diagnostics and security data
Axivelo does not use Firebase Crashlytics in v1.
Firebase Cloud Functions may write logs to Google Cloud Logging. Backend logs may include:
- Firebase UID;
- ASIN, barcode or product lookup context;
- error messages;
- error stack traces;
- request timestamps;
- technical metadata.
Logs do not include passwords or payment card details.
We also use Firebase App Check, Play Integrity and Talsec/freerasp-style app protection to help detect abuse, tampering, automation or misuse. These tools help improve app security, but no app or online service can be guaranteed to be completely secure.
4.8 Device token for notifications
Axivelo may collect and store a Firebase Cloud Messaging token.
Push notification delivery is not confirmed as active in v1. If enabled and if you grant notification permission, Axivelo may send watchlist or price-alert notifications.
You can control notification permission through your Android device settings.
4.9 Support contact data
If you contact us, we may collect:
- your email address;
- your message;
- any information you choose to include;
- support history;
- account deletion request details.
Please do not send unnecessary sensitive information.
4.10 Amazon affiliate links
Axivelo uses Amazon Associates UK affiliate links.
As an Amazon Associate I earn from qualifying purchases.
When you open Amazon product links from Axivelo, the link may include the Axivelo affiliate tag:
axivelo-21
Axivelo may earn a commission at no extra cost to you. This does not influence product data, Keepa signals, pricing facts or the app’s analysis.
The affiliate tag itself is not treated as personal data collected by Axivelo.
4.11 Website waitlist (early access)
When you submit your email address on the Axivelo website (axivelo.app) to join the early-access waitlist, we collect and store:
- your email address;
- the date and source of your sign-up.
We use this only to email you about the Axivelo launch and early access. You can unsubscribe at any time using the link in any email, or by emailing support@axivelo.app. This list is managed by Brevo (see section 9). The legal basis is your consent, given when you submit the form.
5. Data we do not collect or use in v1
Axivelo v1 does not collect or use:
- precise location;
- Bluetooth permission;
- microphone permission;
- photos/media permission;
- Firebase Crashlytics;
- Firebase Analytics;
- Firebase Storage;
- Firebase Remote Config;
- Google Sheets export;
- Vinted pricing;
- SP-API;
- IP-Alert;
- clothing scanner;
- clothing photo upload;
- clothing image AI;
- clothing embeddings.
6. Android permissions
Axivelo may request the following Android permissions:
- Camera — used for barcode scanning.
- Internet — used to connect to Axivelo backend, Firebase, product data services, RevenueCat, Google Play, analytics and related services.
- Notifications — only if notifications are enabled and you grant permission.
- Biometric/Fingerprint — used where biometric app access or device-supported authentication is enabled.
Axivelo does not request location, Bluetooth, microphone or photos/media permissions in v1.
Most Bluetooth scanners that act like keyboards can work through manual entry and do not require Bluetooth permission. Direct Bluetooth scanner support may require permission in the future, but this is not active in v1.
7. Why we use your data
We use data to:
- create and manage your account;
- let you sign in securely;
- process barcode and manual product lookups;
- provide Amazon, Keepa and eBay-style pricing analysis;
- calculate profit, fees, margin and ROI estimates;
- generate AI text deal summaries for Pro users;
- save scan history;
- save watchlist and buy list entries;
- run calculator and dashboard features;
- manage free tier and Pro scan access;
- check subscription entitlement;
- restore purchases;
- operate referral features;
- provide support;
- handle account deletion;
- detect abuse, fraud, misuse or technical problems;
- secure the app and backend;
- understand feature use;
- improve Axivelo;
- comply with legal, tax, accounting, platform and security obligations.
8. Legal bases under UK GDPR
Where UK GDPR or EU GDPR applies, we rely on the following legal bases.
Contract
We process data where needed to provide Axivelo and Axivelo Pro.
This includes account login, product scans, scan history, watchlists, buy lists, AI summaries, subscription access and account deletion.
Legitimate interests
We process limited data where necessary for our legitimate interests, including:
- app security;
- fraud and abuse prevention;
- debugging;
- service improvement;
- analytics;
- backend logging;
- support handling;
- protecting Axivelo’s systems and users.
We balance these interests against your rights and freedoms.
Legal obligation
We may process or retain some data where needed for legal, tax, accounting, consumer protection, platform compliance, dispute handling or regulatory reasons.
Consent
Where legally required, we ask for consent or permission. This may include Android permissions such as camera, notifications or biometric/fingerprint features, depending on your device and app settings.
9. Third-party services
Axivelo uses third-party services to provide the app.
Google / Firebase / Google Cloud
Used for:
- Firebase Authentication;
- Firebase Firestore;
- Firebase Cloud Functions hosted in
europe-west2; - Firebase App Check;
- Play Integrity;
- Firebase Cloud Messaging token collection;
- Google Cloud Logging;
- Google Sign-In.
Google Play Billing
Used to manage in-app subscriptions and payments for Axivelo Pro.
RevenueCat
Used to manage subscription status, RevenueCat customer ID, purchase state and the pro entitlement.
Keepa
Used server-side through Firebase Cloud Functions to provide Amazon and Keepa-style product, seller, offer and price data.
RapidAPI / eBay pricing provider
Used server-side to access eBay sold/completed pricing data.
Current provider:
ebay-average-selling-price.p.rapidapi.com
Google Gemini API
Used for AI text deal summaries for Pro users.
PostHog
Used for EU-hosted analytics, custom events, feature usage and error context.
Host:
eu.i.posthog.com
Talsec / freerasp
Used for app protection, tamper detection and security-related checks.
Amazon Associates / Amazon links
Used for Amazon product affiliate links. Axivelo may earn commission from qualifying purchases at no extra cost to you.
Google Sign-In
Used where you choose to sign in with Google.
Brevo (website waitlist email)
Used to collect and store the email address you submit on the Axivelo website when you join the early-access waitlist, and to send you launch and early-access updates. Brevo (Sendinblue SAS), an EU-based email service provider, acts as our processor for these emails. We do not send the website waitlist any marketing unrelated to Axivelo.
Provider:
Brevo (Sendinblue SAS), France / EU
10. Sharing your data
We do not sell your personal data.
We may share data with service providers where needed to:
- provide app functionality;
- process product lookups;
- manage accounts;
- manage subscriptions;
- provide AI summaries;
- operate analytics;
- maintain security;
- handle logs and diagnostics;
- respond to support requests;
- comply with legal or platform requirements.
We may also disclose data if required by law, court order, regulator, platform policy, fraud prevention need, security incident or to protect our legal rights.
11. International transfers
Some service providers may process data outside the United Kingdom or European Economic Area.
Where required, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses or equivalent transfer mechanisms used by our service providers.
12. How long we keep data
We keep personal data only for as long as reasonably needed.
| Data type | Retention |
|---|---|
| Account data | Kept while your account is active |
| Scan history | Kept until you delete items or delete your account |
| Watchlist and buy list | Kept until you delete items or delete your account |
| Offline queue | Kept locally until synced, cleared, sign-out or account deletion |
| Product lookup cache | Short-term cache only |
| Server logs | Normally retained for a limited period for security and debugging |
| Analytics | Retained for a limited period to understand feature usage and improve the app |
| Support emails | Up to 2 years |
| Payment/subscription records | Retained by Google Play and RevenueCat as required for subscription, accounting, fraud prevention, tax, legal and platform reasons |
13. Account deletion
You can delete your Axivelo account in the app:
Settings → Delete Account
The deletion flow includes confirmation and a grace period.
You can also contact us if you cannot access the app:
When your account is deleted, Axivelo’s backend deletes your Firebase Auth account, Firestore user profile and related user data.
Deleted data includes, where applicable:
- scan history;
- watchlist;
- buy list;
- referral/reward records;
- feature reports;
- bug reports;
- email subscriber documents;
- local app data on sign-out/account deletion;
- offline queue rows cleared through the local cleanup path.
RevenueCat is logged out, but RevenueCat and Google Play may retain purchase records where required for subscription management, accounting, tax, fraud prevention, legal obligations and platform compliance.
We aim to handle deletion requests within 30 days, unless legal, security or technical reasons require longer.
Deleting your Axivelo account does not automatically cancel your Google Play subscription. To stop future billing, you must cancel Axivelo Pro through Google Play.
Delete Your Axivelo Account: https://axivelo.app/account-deletion
14. Subscriptions and payments
Axivelo Pro is available as an auto-renewing subscription through Google Play.
Prices are shown in the app before purchase and may vary by region, tax and Google Play settings. Planned UK prices are:
- Monthly: £9.99/month
- Annual: £79.99/year
Free users receive 10 scans per day.
Axivelo Pro includes unlimited scans, subject to fair use, technical availability and abuse-prevention limits.
Cached scans may be free because cache hits do not require a new backend lookup.
Users manage and cancel subscriptions through Google Play.
Refunds are handled by Google Play policies unless otherwise required by law.
There is no trial or introductory offer for v1.
Subscription Terms: https://axivelo.app/subscription-terms
15. Children
Axivelo is intended for users aged 18+.
It is not aimed at children.
Axivelo is intended for business, reseller and product-sourcing use.
16. Your privacy rights
Depending on where you live, you may have rights under UK GDPR, EU GDPR or other privacy laws.
These may include the right to:
- access your personal data;
- correct inaccurate data;
- request deletion;
- object to processing;
- restrict processing;
- request data portability;
- withdraw consent where processing is based on consent;
- complain to a data protection authority.
To make a request, contact:
We may need to verify your identity before responding.
You can also complain to the UK Information Commissioner’s Office:
17. Security
We use reasonable technical and organisational measures to protect Axivelo and user data.
These may include:
- Firebase Authentication;
- Google Sign-In;
- Firebase App Check;
- Play Integrity;
- server-side API calls;
- backend logging;
- restricted API key handling;
- app protection checks using Talsec/freerasp;
- secure network connections where supported;
- account deletion controls.
No app, API, backend or online service can be guaranteed to be completely secure.
18. Changes to this policy
We may update this Privacy Policy from time to time.
If we make important changes, we may notify you in the app, by email or through another suitable method.
The latest version will be available on our public Privacy Policy page.
The latest version is available on the canonical Axivelo website.
19. Contact us
For privacy questions, account deletion requests or support:
For security issues:
Controller:
Marcin Mierzwa trading as Axivelo