Privacy Policy
Last updated: August 22, 2026
Webix Inc. is a consultancy based in Ottawa, Ontario, Canada, that sets up AI tools such as Claude and ChatGPT on client teams' own computers and trains their staff. We operate the website at https://webix.ca and we publish mobile and desktop applications under our own name. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and what rights and choices you have.
One policy covers everything we operate: the Webix website, the services we provide to our clients, and every application we publish, on every platform. It is written by category of information rather than by product, so that it stays accurate as we release new applications. No single application collects everything described here, and the data disclosures on an application's App Store or Google Play listing state exactly which of these categories that application collects.
1. Who is responsible for your information
Webix Inc. is the organisation responsible for the personal information described in this policy. We are located in Ottawa, Ontario, Canada, and we handle personal information in accordance with Canadian federal privacy law, including PIPEDA, and with the EU and UK GDPR where those apply to you.
You can reach us about any privacy matter at [email protected].
2. Information we collect on the Webix website
Information you give us. When you submit a quote request or a contact form, we collect the name, email address, telephone number, company name and message content that you choose to provide.
Usage information. Our hosting infrastructure records technical data automatically, including your IP address, browser type and version, device type, operating system, referring page, the pages you view, and the date, time and duration of your visit.
Cookies and similar technologies. These are described in section 9.
Please do not send us payment card numbers, government identification numbers, banking credentials or health information through the website. We do not ask for them and we do not need them.
3. Information we collect in our applications
This section describes every category our applications may collect. No application collects all of them, and where an application does not offer a feature, the related category does not apply to it.
Account identifiers. If an application offers sign-in, we collect your email address and an internal user identifier. If you sign in with Google, Apple or Facebook, that provider gives us your email address and a provider account identifier. We never receive your password.
Purchase information. If an application sells a subscription or a one-time purchase, the payment is processed by the Apple App Store or Google Play and never by us. We receive a purchase and entitlement history, meaning what was bought, when, whether it renewed, lapsed or was refunded, and the store transaction identifiers, so that we can unlock the features you paid for. We do not receive your payment card details.
Device and diagnostic information. Device model, operating system version, application version, language and region, a device or installation identifier, crash reports and performance traces.
Product interaction information. Which screens and features you open, and when, so that we can understand which parts of an application are useful.
Content you create. Notes, entries, records, transactions, measurements, images or documents that you enter into an application. Section 4 explains where this content is stored.
Sensors and files you choose to share. An application may ask for access to your camera, microphone, photo library, files, contacts, notifications or location. We ask only at the moment a feature needs it, we ask only for what that feature needs, and you can refuse and keep using the rest of the application. Anything captured this way is treated as content you create.
4. Content you create, and on-device processing
Many of our applications are built so that the content you create never leaves your device. Where that is the case, the application tells you so. It means that your entries are written to storage on your own device rather than to our servers, that they are included in your device backup only if you have device backup switched on, and that they are removed when you delete the application or clear its data.
On-device artificial intelligence. Some of our applications include assistant or analysis features that run entirely on your device, using a model file downloaded to the device. When a feature runs on-device, the text, figures or images you give it are processed locally and are not transmitted to us or to any AI provider. Downloading the model file itself contacts the model host, which sees your IP address and which file was requested, but never your content.
Cloud artificial intelligence. Where an application offers a feature that must call a cloud service, including a cloud AI service, the application tells you before you use it and states what is sent. We do not permit those providers to use your content to train their models.
5. How we use information
We use personal information to operate the website and our applications; to create and authenticate your account; to deliver the features and subscription entitlements you have purchased; to answer your enquiries and provide support; to diagnose crashes, fix defects and improve stability and performance; to understand which features are used so that we can decide what to build next; to send you service messages such as receipts, security notices and material changes to this policy; to protect against fraud, abuse and security incidents; and to comply with our legal obligations.
We do not sell your personal information. We do not use the content you create inside an application to train AI models.
6. Our legal bases
Where the GDPR applies, we rely on performance of a contract for account, purchase and core application functionality; on our legitimate interests for security, fraud prevention, crash diagnostics and product improvement; on your consent for optional analytics, marketing email and app tracking, which you may withdraw at any time; and on legal obligation where we are required to retain or disclose information.
Where Canadian law applies, we rely on your consent, express or implied according to the sensitivity of the information, together with the exceptions permitted by PIPEDA.
7. Who we share information with
We share personal information only with service providers that process it on our behalf under contract, and only to the extent needed. Only the providers that a given application actually uses receive anything from it. The categories, with the providers we currently use, are the following.
Authentication and application backend. Google Firebase, including Firebase Authentication and Cloud Functions.
Sign-in providers. Google Sign-In, Sign in with Apple and Facebook Login, in applications that offer them.
Subscription and purchase management. RevenueCat, together with the Apple App Store and Google Play.
Crash reporting and product analytics. Google Firebase.
AI model hosting. The model host from which an on-device model file is downloaded, such as Hugging Face.
Website hosting, email and form delivery. Our hosting and email providers.
We may also disclose information where the law requires it, where it is necessary to enforce our terms, where it is necessary to protect the rights or safety of any person, or in connection with a merger, acquisition or sale of assets. In that last case we will tell you before your information becomes subject to a different policy.
8. Tracking and advertising
On Apple platforms, an application that would link your activity with data collected by other companies for advertising or measurement must ask your permission first. Where one of our applications does this, iOS shows you the App Tracking Transparency prompt and you can refuse. If you refuse, the application keeps working normally and we do not track you across other companies' apps and websites.
Some of our applications include an advertising or attribution software development kit, such as the Meta software development kit, so that app installs and purchases can be attributed to our own advertising. In those applications, automatic event logging is restricted and the application tells you what is collected. You can also switch tracking off at the operating system level, on iOS under Settings, Privacy and Security, Tracking, and on Android under Settings, Privacy, Ads.
9. Cookies on the website
We use strictly necessary cookies to make the website work and to keep it secure, and preference cookies to remember choices such as your dark mode setting. Where we enable measurement, we also use analytics cookies to count visits and to see which pages are read. You can refuse or delete cookies in your browser settings, although strictly necessary cookies cannot be switched off without breaking parts of the site.
10. How long we keep information
We keep website enquiries for as long as we need them to respond, and for a reasonable period afterwards as a business record. We keep account information for as long as your account exists. We keep purchase and entitlement records for as long as tax, accounting and dispute resolution require. Crash and analytics data is kept for the limited retention window set by the provider. When information is no longer needed we delete it or irreversibly anonymise it.
11. Security
We use encryption in transit, access controls and least-privilege administration, managed and patched infrastructure, and encrypted secret stores for signing keys and API credentials, which are never committed to source control. No system is perfectly secure, so we cannot guarantee absolute security, and we ask you to protect your own device and sign-in credentials.
12. Your rights and choices
Subject to the law that applies to you, you may ask us to confirm whether we hold information about you and give you a copy, to correct information that is wrong or incomplete, to delete information we no longer need to keep, to restrict or stop a particular use, to transfer your information to another provider, and to withdraw a consent you previously gave.
Deleting your account. Where an application has accounts, you can delete your account and its server-side data from inside the application, normally from the Settings screen. Deletion is permanent. Content stored only on your device is removed when you delete the application.
To make a request, email [email protected]. We will answer within the time limit that applies, which is thirty days under PIPEDA and one month under the GDPR. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada, or to your local supervisory authority in the EU or the UK.
13. Children
Our website and applications are not directed to children. We do not knowingly collect personal information from anyone under 13, or under the higher minimum age that applies where you live. If you believe a child has given us personal information, write to [email protected] and we will delete it.
14. International transfers
We are based in Canada, and our service providers may store or process information in Canada, the United States, the European Union and other countries. Where information leaves your country we rely on contractual protections with those providers, including the European Commission standard contractual clauses where they apply, and we remain accountable for that information under Canadian law.
15. Links to other services
Our website and applications may link to services that we do not operate. This policy does not cover those services and we are not responsible for their practices. Please read their own policies.
16. How this policy applies to the application you are using
Because one policy covers every application we publish, three sources work together. This policy tells you the full set of categories we may collect, why we collect them, who receives them and how long we keep them. The store listing for the application, on the App Store or Google Play, tells you which of those categories that particular application collects. The application itself asks you at the point of use for anything that needs your permission, such as camera, microphone, photo library, location, notifications or app tracking.
If we release an application that collects a category of personal information not already described in section 3, we update section 3 and the date at the top of this policy before that application is released.
17. Changes to this policy
We may update this policy. When we do, we change the date at the top, and if the change is material we tell you inside the application or by email before it takes effect. Continuing to use the website or an application after a change takes effect means that you accept the updated policy.
18. Contact us
Webix Inc., Ottawa, Ontario, Canada. Email [email protected]. Website https://webix.ca.