Privacy Policy

Last updated: 2026-05-17

Data we collect

• Email (account, waitlist)
• Test answers, scores, ELO ratings
• Locale and country (rough geolocation for compliance + i18n)
• Analytics events (PostHog, anonymized device-level)
• Payment metadata (Stripe — we never store card details)

Why we collect it

To provide the service (training, scoring, progress tracking), bill Pro/Family subscriptions, prevent fraud, and improve product via aggregate analytics.

GDPR (EU + UK)

Legal bases: contract performance, legitimate interest (analytics), consent (marketing). Your rights: access, rectification, erasure (Art. 17), portability, objection. Contact: privacy@iqoria.com. DPA available on request. Lead supervisory authority: CNIL (France).

CCPA (California)

We do not sell personal information. California residents may request access, deletion, or opt-out by emailing privacy@iqoria.com with subject CCPA request.

LGPD (Brazil)

We process your data according to Law 13.709/2018. You can request access, rectification, anonymization or deletion via privacy@iqoria.com.

Retention

Account data: kept while account is active + 30 days after deletion. Anonymized analytics: 24 months. Payment records: 7 years (legal obligation).

Subprocessors

• Vercel (hosting, EU/US)
• Supabase (database, EU/US region)
• Stripe (payments)
• Resend (transactional email)
• PostHog (product analytics)
• Sentry (error monitoring)

Contact

privacy@iqoria.com — we respond within 30 days.