Privacy
Privacy principles (draft)
Draft privacy principles for Aqli: minimal collection, purpose limitation and child-safe defaults.
What Aqli collects today
An account email and password (handled by the authentication service), an optional display name, and for each player profile a display name, birth year, preferred language and optional avatar choice. Child play access uses a PIN, which is stored only as a one-way hash.
What Aqli does not collect
No advertising trackers, no precise location, no unnecessary device fingerprinting, and no cognitive results — cognitive measurement capabilities are not active in this release.
Children
Child profiles are created and administered by a parent account. A child PIN grants play access only. Administrative areas require the parent to confirm their password again, and that confirmation expires automatically.
Record keeping
Sensitive actions — creating a child, updating a profile, creating or resetting a PIN, confirming a parent password, ending a play session — are recorded in a private activity log visible to the account owner. Passwords and PINs are never written to that log.