Privacy Policy

1. Who we are

The IQ test, this website and the BetterIQ app are made by BetterIQ ("we", "us"). We decide how the personal data described here is used, and we are responsible for it (in EU and UK terms, we are the "controller"). You can reach us at help@better-iq.com.

2. The IQ test on our website

• Your answers and result: the answers you give, how long you took, and the result we work out from them (your IQ, your percentile and your scores by area). If the test asks about you, for example your age range, we keep those answers with your result.
• Your email address, so we can send you your result, your receipts and the link that opens it in the app, and your name if you add one to your certificate.
• What you bought: the plan, the prices, the dates and whether each payment went through.

3. Payments

Payments on our website are handled by Stripe. You type your card details into Stripe's checkout, not ours, and we never see or store your full card number. Stripe tells us whether a payment worked and may show us the card type, its last four digits and its country, which we use to answer billing questions. Stripe also uses your payment data to prevent fraud, under its own privacy policy. If you subscribe inside the app, Apple or Google takes the payment and only tells us whether your subscription is active.

4. The app

You can use the app without an account. If you do, your progress stays on your phone and we store nothing about you.

If you sign in, we store:

• Your account: your email address and, if you give one, your name. You sign in with Apple, with Google, or with a one-time code we email you. Sign in with Apple may give us a private relay address instead of your real one. We never see your Apple or Google password.
• Your training progress: your games, levels, streaks and Brain Score, backed up so you can restore them on a new phone.
• Your IQ results: your score from each IQ test you take in the app, and from the test on our website if you took it there.

Certificates. When you get an IQ certificate, it is registered with us so anyone holding its number can check it is real. A certificate record holds the number, the IQ, the test, the dates and the name on it if you chose to add one. It is not linked to your account. Anyone with the number can see the name, IQ, date and number at better-iq.com/lookup, so only share the number with people you want to see it.

The app has no ads and no advertising or tracking SDKs. We don't collect your location, contacts or photos. Reminder notifications are scheduled on your phone; we don't receive a push token.

5. Cookies, analytics and technical data

While you take the test, your progress is kept in your browser so you don't lose it if you reload the page. Stripe sets cookies on the checkout to keep payments secure. We don't use analytics or advertising cookies, and we don't put advertising pixels on our pages.

Like any website, our servers receive your IP address and basic browser and device details with each request. We use them to deliver the pages, to stop abuse (for example by limiting repeated requests) and to fix errors, and our hosting providers keep them in logs for up to 30 days.

6. Why we use it, and our legal bases (EU and UK)

Under the GDPR and the UK GDPR, we need a legal reason for each use. These are ours:

• To perform our contract with you (article 6(1)(b)): scoring your test, showing your result and certificate, running your account, backing up your progress, taking payments, and handling cancellations and refunds.
• To meet legal duties (article 6(1)(c)): keeping purchase records for tax and accounting, sending the notices consumer law requires, and answering requests about your rights.
• Our legitimate interests (article 6(1)(f)): keeping the service secure, preventing fraud and abuse, fixing errors, answering you when you write to us, and letting people check a certificate you share with them. You can object to these at any time (section 10).
• Your consent (article 6(1)(a)): marketing emails, only if you said yes. You can withdraw consent at any time with the link in every email.

Your IQ score is worked out automatically from your answers, but it has no legal or similarly significant effect on you; it is your own result for your own use. We don't sell your personal data, and we don't share it for advertising.

7. Who handles it for us

We use a small number of service providers who process data for us, only on our instructions:

• Vercel hosts this website and the test.
• Fly.io runs our server.
• Supabase hosts our database.
• Stripe processes payments.
• Resend sends our emails, such as sign-in codes and receipts.
• Apple and Google confirm who you are when you sign in with them, and bill purchases made in the app.

We may also share data when the law requires it, to protect our rights or someone's safety, and with a buyer if the business is sold, under the same promises as this policy.

8. International transfers

We are a US company, so if you live outside the United States your data is transferred to the US, and our providers may also process it in other countries. For data from the EU, the EEA or the UK, we protect these transfers with the European Commission's standard contractual clauses (and the UK addendum to them), or rely on the EU-US Data Privacy Framework where a provider is certified under it. Email us for a copy of the safeguards.

9. How long we keep it

• Your account, progress and results: until you delete your account.
• Test answers, result and email from someone who took the test but didn't buy: 90 days, then we delete them.
• Purchase records: as long as tax and accounting law requires, usually 7 years.
• Server logs with IP addresses: up to 30 days.
• Sign-in codes: they work for 10 minutes and are stored only as a one-way hash.
• Sign-in sessions: they end after 60 days without use, or when you sign out.
• Certificates: as long as the service runs, so a certificate stays checkable. Ask us and we will remove one.

10. Your rights in the EU, the EEA and the UK

Under the GDPR and the UK GDPR you have the right to:

• access your data: know whether we have data about you and get a copy of it;
• rectification: have wrong or incomplete data corrected;
• erasure: have your data deleted;
• restriction: have us stop using your data for a while, except to store it, for example while we check a complaint;
• portability: get the data you gave us in a common, machine-readable format, or have us send it to another company;
• object to uses based on our legitimate interests, and to direct marketing at any time;
• withdraw your consent at any time, where we rely on it, without affecting what we did before; and
• complain to the data protection supervisory authority in the country where you live or work, or where you think the law was broken. In the UK that is the Information Commissioner's Office (ico.org.uk).

To use these rights, email help@better-iq.com from the address you used with us. We answer within one month; if a request is complex we may take two more months, and we'll tell you within the first month. Using your rights is free.

11. California: notice at collection

If you live in California, the California Consumer Privacy Act (CCPA, as amended by the CPRA) gives you the right to know what we collect when we collect it. Here is what we collect, where it comes from, why, and how long we keep it. We have collected the same categories in the last 12 months.

• Identifiers: email address, name if you give one, account ID, IP address. Source: you; Apple or Google when you sign in with them; your browser. Why: to send your result and receipts, run your account, keep the service secure. Kept: until you delete your account; 90 days if you took the test but didn’t buy; IP addresses in logs for up to 30 days.
• Commercial information: your plan, prices, dates, payment status, card type, last four digits and country. Source: you, through Stripe; Apple or Google for app purchases. Why: to bill you, send reminders, handle cancellations and refunds, prevent fraud, keep tax records. Kept: as long as tax and accounting law requires, usually 7 years.
• Inferences: your IQ, percentile, scores by area, Brain Score and training progress. Source: worked out by us from your test answers and games. Why: to show you your result and certificate, and back up your progress. Kept: until you delete your account; 90 days if you took the test but didn’t buy; certificates as long as the service runs.
• Characteristics: your age range, if the test asks it. Source: you. Why: to compare your result with people your age. Kept: as for your result.
• Internet activity: test answers and timings, pages loaded, browser and device type. Source: your browser. Why: to score your test, deliver the pages, stop abuse and fix errors. Kept: test answers as for your result; technical logs up to 30 days.

We disclose these categories only to the service providers in section 7, for the business purposes above, under contracts that stop them using the data for anything else.

We don't sell or share your personal information. We don't sell it for money or anything else, and we don't share it for cross-context behavioural advertising (ads based on what you do on other sites and apps). We have not done so in the last 12 months, and we don't knowingly sell or share data of anyone under 16.

Sensitive personal information. We don't collect sensitive personal information as the CCPA defines it (such as government ID numbers, precise location, health data or account passwords). Your IQ results aren't sensitive personal information under the law, but we treat them carefully anyway: we use them only to show you your result, certificate and progress, never for advertising, and never sell or share them.

12. California: your privacy rights

If you live in California, you have the right to:

• know what personal information we have collected about you, where it came from, why, who we disclosed it to, and get a copy of it;
• delete personal information we collected from you, with exceptions the law allows (such as tax records);
• correct inaccurate personal information;
• opt out of the sale or sharing of your personal information. We don't sell or share it, so there is nothing to opt out of today;
• limit the use of sensitive personal information. We don't collect any, so this right doesn't apply today; and
• not be discriminated against for using these rights: we won't deny you the service, charge you a different price or give you a worse service.

How to make a request

Email help@better-iq.com. Because we operate only online and have a direct relationship with you, email is our method for these requests. Tell us which right you want to use.

How we verify it's you

We check that the request comes from the email address on your account or purchase, and may send a code to that address. For a copy of specific information, or to delete it, we may ask for one more detail we already have, such as the date of a purchase. We use what you give us only to verify you.

Authorized agents

Someone you authorize can make a request for you. We will ask them for your signed permission, and we may ask you to confirm your identity with us directly, unless they hold a power of attorney.

When we answer

We confirm we got your request within 10 business days and answer within 45 days. If we need more time, we tell you within those 45 days and take up to 45 more. If we turn a request down, we tell you why.

Shine the Light

California's "Shine the Light" law (Civil Code section 1798.83) lets you ask whether we disclosed personal information to third parties for their own direct marketing. We don't.

Do Not Track and Global Privacy Control

We don't track you across other websites, so a browser "Do Not Track" signal doesn't change what we do. Because we don't sell or share personal information, there is nothing for a Global Privacy Control (GPC) signal to opt you out of today. If that ever changes, we will treat a GPC signal from your browser as a valid request to opt out of sale and sharing, without asking you for anything else.

13. Other US states

If you live in Virginia, Colorado, Connecticut, Texas, Oregon or another state with a consumer privacy law, you have similar rights to access, correct, delete and get a copy of your data, and to opt out of targeted advertising, sale and profiling (we don't do any of these). Email help@better-iq.com. If we turn your request down, you can appeal by replying to our answer; we will tell you the outcome and how to contact your state attorney general.

14. Deleting your data

In the app, open You, then tap Delete account and confirm. This deletes your account, your email address, the progress and results saved on it, and your sign-ins. If you signed in with Apple, we also revoke the app's access to your Apple ID.

If you only used the website, or can't open the app, email help@better-iq.com from the address you used and we will delete your data. Deleting your data doesn't cancel a subscription, so cancel first (see our Subscription Terms). We keep purchase records the law requires us to keep.

Progress kept on your phone stays there until you delete the app. Certificates are not part of your account; to remove one from the lookup, email us its number.

15. Children

IQ is not made for children under 13, and we don't knowingly collect data from them. Only adults, or children with a parent's permission, can buy a subscription. If you think a child under 13 has given us data, email help@better-iq.com and we will delete it.

16. Security

We send data over encrypted connections, keep sign-in codes and session tokens only as one-way hashes, and limit who can access our systems. No service is perfectly secure, but if a breach puts your data at risk, we will tell you as the law requires.

17. Changes

We review this policy at least once a year and update the date at the top when it changes. If a change matters, for example if we add analytics or advertising, we will tell you by email or in the app before it applies.