Privacy Policy

Who we are

Ayni (“we”, “us”) operates a marketplace that runs AI inference workloads on idle personal devices. The data controller is the operator of ayni-ai.com, reachable at [email protected].

What we never see

Prompts, model outputs and any files inside a workload are encrypted on the renter’s side to a key held only by the device that runs the job. Our coordinator relays sealed bytes it cannot open, and the provider app keeps decrypted content in memory only for the duration of the job. We do not log, store, sample or train on workload content. The design is documented on the Security page.

What we collect, and why

Renters (people who buy compute)

• Account: the e-mail address and display name returned by the sign-in provider you choose (GitHub). We store no password.
• Billing: prepaid credit balance and a ledger of debits and top-ups. Card details are entered on Stripe’s pages and never reach our servers; we keep Stripe’s session and payment identifiers.
• Usage metadata: per job, the model name, token counts, timing, price and the anonymous identifier of the device that served it. Not the content.

Providers (people who share a device)

• Device identity: a public key generated on the device and, for the Android app, the hardware attestation certificate chain used to award the device_attested trust tier. This identifies the device, not you.
• Capability and health: platform, hardware class, RAM, benchmark throughput, battery, charging and thermal state, so the scheduler can place work responsibly.
• Earnings: a ledger of accrued earnings per device and, if you enrol for payouts, the Stripe Connect account identifier. Identity checks and bank details are collected by Stripe under its own policy.

Everyone

• Operational logs: request timestamps, status codes, IP address and user agent at our edge, kept to run and secure the service.
• Waitlist: the e-mail address you give us, used only to contact you about Ayni.

What we do not do

• No advertising, no ad identifiers, no third-party analytics SDKs in the provider app.
• No selling or renting of personal data, ever.
• No access to your contacts, photos, location, microphone or files. The provider app runs only the model files it downloads from our signed registry.

Legal bases

We process account and billing data to perform our contract with you; operational logs and abuse prevention under our legitimate interest in running a secure service; and waitlist e-mails with your consent, which you can withdraw at any time.

Sharing

We share data only with processors needed to run the service: Google Cloud (hosting, in the United States), Stripe (payments and payouts), Cloudflare (web hosting and DNS) and GitHub (sign-in). Each is bound by its own data-processing terms. We disclose data to authorities only when legally required.

Retention

• Account data: until you delete your account.
• Billing and earnings ledgers: 7 years, as required for financial records.
• Job metadata: 90 days in detail, then aggregated.
• Edge logs: 30 days.

Your rights

You can access, correct, export or delete your data, and object to or restrict processing. Delete your account from the web app or e-mail us at [email protected]; we respond within 30 days. Deleting a provider device from the app removes its identity from the network at the next heartbeat. If you are in the EU/EEA or UK you may also complain to your local supervisory authority.

Children

Ayni is not directed at children under 16 and we do not knowingly collect their data.

Security

Transport is TLS everywhere; workloads are additionally end-to-end encrypted; secrets live in a cloud key-management service; every job carries a signed Workload Manifest that the device verifies before it runs anything. Details, threat model and test harness are on the Security page.

Changes

We will post changes here and update the date above. Material changes to what we collect will be announced in the app before they apply.