Privacy notice

Last updated: 24 October 2026. QaamuusAi is a community project operated by Abdiaziz Abdullahi. Contact hello@smidify.com about your information or account.

Information we use

Applications contain your name, email, study or training, professional background, review status and decision dates. Technical administrators can review applications. Your chosen professional title does not grant editorial permissions.

Accounts contain an email, profile name and assigned roles. We store your contributions, sources, licensing evidence, discussions and review history. Published resources and their attribution are public. Workspace members see information permitted by their roles.

Why we use it

We use this information to review applications, deliver invitations, authenticate members, coordinate contributions and preserve an accountable review process. Application and account processing supports your request to join and use the service. Security and audit processing supports our legitimate interest in protecting the community and published resources.

Service providers and security

Vercel hosts the app, Supabase provides authentication and the database, and Simply.com sends authentication email. These providers may process technical logs and network addresses. International processing may occur under their service terms and applicable transfer safeguards. Passwords are handled by Supabase Auth; administrators do not need your password.

Application abuse limits store a keyed hash of the source address, not the raw address, in our database. Expired budget records are removed on subsequent applications after one day. Hosting providers may separately keep access and security logs.

Cookies and browser storage

Authentication cookies keep your session signed in. Browser storage remembers your language preference. Signing out clears the current authentication session.

Retention and your choices

We keep applications while review and account administration require them, and contribution history while it supports attribution and independent review. Security logs and provider backups follow the providers’ retention settings. Contact us to request access, correction, deletion, restriction or an export, or to object to processing based on legitimate interests. Some audit records and published attribution may need to remain to protect others’ work and comply with legal obligations. Deletions from backups follow the backup retention cycle.

You may raise a concern with your local data protection authority; in Sweden this is IMY. Please avoid submitting sensitive personal information in applications or contributions.