Privacy
Privacy principles (draft)
Draft privacy principles for Aqli: minimal collection, purpose limitation and child-safe defaults.
What Aqli collects today
An account email and password (handled by the authentication service), an optional display name, and for each player profile a display name, birth year, preferred language and optional avatar choice. Child play access uses a PIN, which is stored only as a one-way hash.
What Aqli does not collect
No advertising trackers, no precise location, no unnecessary device fingerprinting, and no cognitive results, cognitive measurement capabilities are not active in this release.
Children
Child profiles are created and administered by a parent account. A child PIN grants play access only. Administrative areas require the parent to confirm their password again, and that confirmation expires automatically.
Record keeping
Sensitive actions, creating a child, updating a profile, creating or resetting a PIN, confirming a parent password, ending a play session, are recorded in a private activity log visible to the account owner. Passwords and PINs are never written to that log.