Privacy Policy

The short version. OuiAmi helps you build a network of people you can actually trust. We collect only what you give us to make that work — your account details and whatever you choose to add to your profile. We never sell, rent, or trade your information. Your private keys stay on your device. You can delete your account, and everything in it, at any time.

1. Who we are

OuiAmi is operated by AmericaFirst4Us Inc. ("AF4U," "we," "us"), a US corporation and Steward of the ELAI security ecosystem. OuiAmi is one of the independent product surfaces that implement the ELAI cryptographic primitives. This policy covers the OuiAmi mobile app and the OuiAmi website. Questions: tpoc@americafirst4us.com.

2. What we collect

Information you give us

• Account details — the email address or phone number you use to create your account, and the method you use to sign in (for example, email, phone, or a connected provider such as Facebook).
• Profile information you choose to add — your name, the general area where you live and work, and an emergency contact, when you share these with Ami during setup.
• Connected networks — when you link an outside account (such as Facebook, X, Instagram, or LinkedIn), we receive a basic identifier from that service to confirm the connection and strengthen your trust network. We do not post on your behalf, and we do not import your contacts or content beyond what is needed to confirm the link.
• Conversations with Ami — the messages you send to Ami, our in-app assistant, so it can help you and remember your preferences.
• Listings, photos, and activity — items, offers, or photos you choose to post, and the basic activity needed to operate trust and sharing features.

Information we collect automatically

• Limited technical data for security and abuse prevention, such as a salted hash of your network or device identifier. We keep hashes for abuse detection rather than raw identifiers.
• Standard server logs kept by our hosting and backend providers for security and operations.

Information we do not collect

• We do not use third-party advertising or tracking SDKs (no ad networks, no analytics pixels).
• We do not pull your full contact list or social graph from connected networks.
• We do not buy, sell, rent, or enrich your data against third-party brokers.

3. How we use what we collect

• To create and secure your account.
• To build your trust profile and match you with people you can trust.
• To power Ami's help and memory.
• To operate sharing and listing features you choose to use.
• To detect, prevent, and respond to fraud and abuse.

We do not use your information for behavioral profiling, ad targeting, or commercial enrichment.

4. Who we share it with

No one for marketing or commercial purposes. We never sell, rent, lease, or trade your information.

We use technical service providers to operate OuiAmi — currently Supabase (secure database and authentication), third-party AI service providers that help generate Ami's responses and voice, and Apple for app distribution. These providers process your data only as required to perform their function on our behalf, and are not authorized to sell, share, or commercially enrich it. When you connect an outside network, that connection is also governed by that service's own terms.

We disclose information only when legally compelled by valid US legal process (subpoena, warrant), or when necessary to protect safety. We challenge over-broad requests where appropriate.

5. How long we keep it

We keep your account and profile information for as long as your account is active. When you delete your account from within the app, we permanently delete your profile and associated data from our active systems, typically within 30 days. Hashed abuse-prevention signals are kept for up to 90 days and then deleted.

6. Your rights

For everyone

• Delete your account and data at any time, directly in the app, or by emailing tpoc@americafirst4us.com.
• Ask what we have on you — we will respond within 14 days with the full record.
• Correct anything we got wrong by emailing us or editing your profile.

For EU and UK residents (GDPR / UK GDPR). You also have rights to data portability, restriction of processing, objection to processing, and to lodge a complaint with your supervisory authority. Our legal basis for processing is your consent, which you may withdraw at any time without affecting prior processing.

For California residents (CCPA / CPRA). You have the right to know what we collect, to delete what we have, to opt out of "sale" (we do not sell), and to non-discrimination for exercising these rights.

7. Children

OuiAmi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us and we will delete it.

8. Cookies and similar technologies

We use only essential session and authentication cookies required for the app and site to function. We do not use advertising, tracking, or analytics cookies, and we do not embed third-party scripts that set marketing cookies.

9. Your keys stay with you

OuiAmi is built local-first, consistent with the ELAI Ecosystem Charter:

• Your private keys are never transmitted to or stored on our servers — they remain on your device.
• As OuiAmi moves toward its peer-to-peer model, trust is verified directly between devices, and your signed trust data is not aggregated on our servers.
• The account data we do hold is limited to what is required for access control and core features — never your private keys or signed content.

10. Data security

We use TLS for all data in transit. Account and profile records are stored in Supabase with row-level security policies, and project access requires multi-factor authentication. API keys are stored in encrypted secret managers and rotated periodically. We will notify affected users within 72 hours of becoming aware of any unauthorized access to personal information that could affect them.

11. International transfers

Our infrastructure operates primarily from US data centers. If you access OuiAmi from outside the US, your data will be processed in the US. By using OuiAmi, you consent to this transfer. Standard contractual clauses with our processors govern transfers where required.

12. Changes to this policy

We will update this policy as needed. The current version, effective date, and last-reviewed date appear at the top. Material changes will be communicated in-app and on this page for at least 30 days before they take effect.

13. Contact

Privacy questions, or requests for access, deletion, or correction:

AmericaFirst4Us Inc.
c/o LegalZoom Registered Agent
5865 Ridgeway Center Pkwy, Ste 384
Memphis, TN 38120-4032
Email: tpoc@americafirst4us.com

This Privacy Policy is published in plain English to make our handling of your data legible without legal training. If anything here conflicts with applicable law, the law controls.