Privacy notice
Last updated 13 October 2026
Aminah is run by ProlifAI Ltd, the controller of the personal data described here, of registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Write to quantum@prolifai.xyz about anything in this notice.
Without an account
- Your conversations are yours. They are kept so that you can come back to them, and you can delete them at any time. To answer you, your questions are processed by Aminah's agent, which runs on our servers, and by the AI model providers below.
- A cookie (
amn_guest) and your IP address count the three questions a day you may ask without an account. We keep them only as keyed hashes that change every day, for at most a day. - Questions, with personal details removed (names, numbers, addresses), may be kept with no link to you or your account, to find where her knowledge is thin and improve it. Lawful basis: our legitimate interest in improving the service.
With an account
- Your email address, to send you sign-in links and to know your account. It is never shown to anyone. Lawful basis: providing the service you asked for.
- A session cookie (
amn_session), strictly necessary to keep you signed in, for 60 days or until you sign out. Sign-in links work for 20 minutes. - Your credits: your balance, and a record of credits given, bought and spent, with the time. It holds no words of your questions.
- Your settings for Aminah (what to call you, your school, where you live, how she should answer, anything you tell her about yourself). They are sent with your questions to the model provider writing the answer, so it can follow them.
- Payments are handled by Stripe. We keep the amount, the time and Stripe's reference, never your card details.
Who else processes it
- Railway hosts the service and its database.
- OpenRouter, and the model providers it routes to, receive your questions and the passages she reads to answer them. Your questions go only to providers with zero data retention, which keep nothing of them and do not train on them. Your email address is never sent to them.
- Our email provider sends sign-in links. Stripe takes payments.
Some of these providers are outside the UK; they process data under the safeguards the law requires, such as standard contractual clauses.
How long
Your account, settings and credit record stay until you delete your account, which you can do at any time from your account panel; then they are erased. Payment records are kept for six years, as the law requires, without your email address.
Your rights
You may ask to see the personal data we hold about you, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. Write to us at the address above. You may also complain to the Information Commissioner's Office (ico.org.uk).
Children
An account is for people aged 13 or over. Buying credits is for people aged 18 or over.