Privacy Policy
Last updated: May 2025 — How AKILI handles your account, scans, and API usage.
1. What we collect
- Account: email, name, password (bcrypt hash), optional Google ID
- Scan reports stored by scan ID (target, findings, scores)
- API key previews and usage counters (not raw keys)
- Per-module daily usage for rate limits
2. What we do not store
- Raw API keys (only SHA-256 hashes)
- Passwords in plain text
- Full request logs of every URL you scan in production logging
3. Third-party services
Scans may call external providers (search, threat intel, AI inference). Their policies apply to data they process. Configure keys in your server .env.
4. Your rights
Where GDPR or NDPR applies, you may request access, correction, or deletion via hello@akili.com.ng.
5. Security
HTTPS in production, JWT sessions, rate limits, and tiered access to premium modules. Report issues responsibly via Contact.