AQLI
Privacy Policy
Version 4.4 · 26 October 2026 Applies to aqli.app and the AQLI application. Reviewed annually. Next review: September 2027.
Changed: a family invitation now waits for a yes from the person who made it, so AQLI keeps who asked to use it, and when. A wrong family code is noted, without the code, for at most about two days. Corrected: how long invitations and phone setups are kept.
Corrected to list everything AQLI's server holds for an account.
Corrected to state that Ruha Solutions LLC owns AQLI and AQLI Kids.
Supersedes the version of 31 August 2026. AQLI Kids, at kids.aqli.app, has its own privacy policy.
The rule this policy is built on
AQLI asks for as little as it can, and never asks for anything it does not need in order to do something you asked for.
This is a rule AQLI is built on, not a description of how it happens to work today. No future version of AQLI may relax it.
Everything stated below follows from that rule.
The short version
Browsing AQLI collects nothing. No tracking, no analytics, no advertising, ever. You can read the directory, use the Resource Center, and open the Kids room without telling us anything at all.
An account is optional, and only for adults. It exists so that you can post on the noticeboard, connect with family, or serve as a steward. It holds your email address, your profile, and what you post or write in AQLI's shared rooms. The table below lists every item it holds.
Children never have accounts anywhere in AQLI.
What we collect, and only if you ask us to
We collect nothing unless you create an account. If you create one, we hold:
| What | Why | How long |
|---|---|---|
| Your email address | To sign you in, and to reach you about your account | Until you delete your account |
| Your profile — name, role, interests, pronouns if you add them, your language choice, anything you enter | So the community knows who it is speaking to | Until you delete it or your account |
| What you post, and whether a steward approved it | So it can be shown to the community | Until you remove it or your account |
| A record of a steward's verification of a listing or of a step in First Things First, with the steward's name | So a listing or a step can say who checked it, how and when | Kept, but without your name once your account is deleted |
| If you are a steward: each moderation action you take | So a decision can be shown, and appealed | Kept, but without your name once your account is deleted |
| A listing you report as wrong, and what you said | So a steward can check it again | Until you delete your account |
| A thank-you note you leave a steward (it carries no name) | So the steward can read it | Until the steward's account is deleted |
| A post or a member you report, and why | So a steward can act on it | Kept, but without your name once your account is deleted |
| A member you have stopped seeing (the pair only; they are not told) | So their posts stay out of your view | Until you delete your account |
| Family connections | So the people you connected with can see each other | Until you delete your account |
| Family invitations you make, and the ones you ask to use: who asked, and when | So an invitation waits until the person who made it says yes | 30 days after the invitation ends, or sooner if you delete your account |
| That a family code you typed was wrong, and when (never the code) | So nobody can guess their way into a family | Deleted each night once a day old, so at most about two days |
| A phone you set up for someone: its language, text size and simple screens | So that phone opens the way you chose | 7 days after its setup code ends, or sooner if you delete your account |
| Selam: a request to talk to someone, the conversation that follows, and the moment you confirm you are an adult (the Wellness Bridge is switched off today, so none are made) | So a trained person can answer you | Until you delete your account |
| Circles: a circle, its members, its rounds, and each payment recorded (Circles is closed today, so none are made; circles made before stay as they were) | So the members of a circle share one record of what they agreed | Until you delete your account; a treasurer hands the role on first |
| “Say it for me”: a sentence you ask for, in your own words | So a steward can write it for you, and then for everyone | Until you delete your account |
| Question Board questions you ask | So a teacher can answer them | Until you delete your account |
| Lessons you finish, and the sentence you write after one (only you can see it in AQLI) | So AQLI remembers what you have learned | Until you delete your account |
| If you teach: the lessons you write, with your name and the credential you give | So learners can see who wrote them | Until you delete your account |
| Community history you send in, and listings you add | So a steward can check them and publish them | Until you delete your account |
| “This worked for me” on a listing (the count is public; your mark is private) | So others can see that a listing helped someone | Until you delete your account |
| If you are a researcher: your Research House entries | So the research can be read and built on | Until you delete your account |
| Records Supabase's sign-in system keeps of each signed-in session, including the internet address it came from | So a sign-in can be kept and ended safely | While the session lasts, and until your account is deleted |
We do not collect dates of birth, genders, telephone numbers, photographs of you, your location, your phone's contacts, advertising identifiers, or any record of what you searched for or read. A search in the Research House is answered and not kept.
What stays on your own device
Your language choice, text size, and lesson progress are saved in your own browser's storage, on your own device. This never leaves your device and we cannot see it, with three exceptions listed in the table above: if you are signed in, your language choice is saved to your account, so it follows you to another device; the lessons you finish are also kept with your account; and a phone you set up for someone carries the language and text size you chose for it. Clearing your browser data erases what is on your device.
Who else can see anything
AQLI runs on services that other companies operate. Each of them sees your device's internet address when a page loads, as happens on every website. None of them is told what you searched for or read.
- Netlify, our web host, keeps standard, short-lived server logs.
- Supabase, our database provider, receives your internet address whenever a listing, a post, or a sign-in loads. Account data is stored with them, in the United States.
- jsDelivr serves one software library that AQLI needs. Loading it sends your internet address to that service.
- Resend sends AQLI's sign-in and security emails, with AQLI as the sender. It receives your email address to send them.
Our typefaces are served by AQLI itself. Noto Serif Ethiopic and Nunito were moved onto AQLI's own servers on 9 August 2026, so reading Tigrinya or Amharic here sends nothing to anyone. They also work with no connection at all.
Apart from the sign-in records listed above, we do not receive, store, or combine any of this. We have no analytics, no advertising network, no crash reporting, and no tag manager.
Passwords and security
Passwords are hashed before they are stored. We never see them and cannot recover one for you — we can only help you set a new one.
We take reasonable care to keep account data safe, but no service can promise that nothing will ever go wrong. If a breach ever affects your data, we will tell you plainly and promptly, and say what happened, what it affected, and what to do about it. We will not wait to be asked.
Phone calls from the Resource Center
Tapping a resource dials from your phone, exactly as if you had dialed it yourself. AQLI does not know whether you called, when, or for how long. No call goes through us and no record is made.
Advertising, and what AQLI is never paid for
There is no advertising in AQLI. No advertising networks, no trackers, no sponsored listings, and nothing that earns from your attention.
We do not sell, rent, or share anything about you with anybody. Not to advertisers, not to data brokers, not to anyone. There is no arrangement under which we could, and there will not be one.
We will not train any machine learning system on what you write, on what a steward records, or on what an elder records in the Elder Center. Not now, not under new management, not at any price.
What you can ask us to do
Whoever you are and wherever you live, you can ask us to:
- show you everything we hold about you
- correct anything that is wrong
- delete your account and what it holds
- send you a copy of your own content in a file you can keep
Write to privacy@aqli.app. We will do it, and we will not ask you why.
Deleting your account removes your posts and your private information. Records that must survive for the protection of others — a moderation log, a verification a steward performed — are kept, but no longer carry your name.
Deleted data may remain in Supabase's automatic backups for up to 7 days before it is gone for good.
If you are the treasurer of a circle that is still running, you will need to hand that role to somebody else first, because other people's records depend on you.
Where your information is held
AQLI is operated from the United States, and account data is held there. If you use AQLI from another country, your information is handled in the United States.
We apply one standard everywhere rather than the minimum each place requires. If you believe we have handled something wrongly, tell us first — and you also have the right to complain to the data protection authority where you live.
Children
Children never have accounts in AQLI, in either application.
The Kids room collects nothing from anyone, and AQLI Kids has its own privacy policy at kids.aqli.app/privacy, which goes further and sets out exactly what stays on the device.
If AQLI changes hands
Should AQLI ever be sold, transferred, invested in, or inherited, the rule at the top of this page travels with it and binds whoever operates AQLI thereafter.
Nothing about you can be sold as part of such a transaction, because nothing about you is ours to sell.
Changes to this policy
If this policy changes, the version number and date above change with it. Any change affecting what is collected will be stated plainly at the top of this page, not absorbed into the text.
Every version of this policy is numbered and dated, and earlier versions are kept. If you want to know what a previous version said, ask us and we will send it to you.
The current version always lives at aqli.app/privacy.
Terms of Service
What AQLI is, what it costs, and what we do and do not promise are set out in the AQLI Terms of Service at aqli.app/terms. That document and this policy are read together, and where they appear to differ, this policy governs.
Contact
privacy@aqli.app
Ruha Solutions LLC, a Maine limited liability company, Maine, United States — the company that operates AQLI and is responsible for the information described in this policy.
AQLI was created by Aklil Belay. AQLI and AQLI Kids are owned and operated by Ruha Solutions LLC, a Maine limited liability company.