Privacy Policy

This Privacy Policy explains how Home of IQ ("we", "us", "our") collects, uses, and shares information when you use our website, IQ test, and training platform (the "Service"). It also describes the privacy rights available to you and how to exercise them, including under the EU and UK General Data Protection Regulations (GDPR) and applicable US state privacy laws.

Who we are (data controller). The Service is provided by CLIQstream B.V., a private limited company registered with the Dutch Chamber of Commerce (KvK) under number 94411867, with its registered office at Stadhouderskade 85, 1073AT Amsterdam, Netherlands. CLIQstream B.V. is the data controller responsible for your personal data. Privacy questions and rights requests: privacy@homeofiq.com.

1. Information we collect

Information you provide. Your email address; account credentials; optional display name; your answers to test questions; feedback or support correspondence; and any other information you choose to send us.

Payment information. Payments are processed by an independent third-party payment provider. We receive a confirmation and a tokenized reference. We do not see, store, or process your full payment-card number.

Information generated by your use of the Service. Your computed IQ estimate, percentile, per-domain sub-scores, individual question correctness, training activity, streaks, achievements, and progress over time.

Information collected automatically. IP address, approximate location derived from IP, device and browser type, operating system, language, pages viewed, referral source, links clicked, and the date and time of each event. We use first-party cookies and similar technologies for authentication, session state, remembering your preferences (including cookie choices), measuring traffic, and attributing your visit to the marketing campaign that brought you in (UTM and click-id parameters in your landing URL).

2. How we use information

• To deliver the Service: compute and present your results, run the training platform, and provide customer support.
• To create, manage, and secure your account, including authentication and fraud prevention.
• To process your subscription, billing, renewals, refunds, and related communications.
• To send transactional emails about your account, order, billing, results, and security.
• To send marketing emails about Home of IQ products, features, and related cognitive content. You may unsubscribe at any time using the link in every marketing email.
• To measure and improve the Service, including calibrating questions using aggregated, de-identified response data.
• To attribute and measure marketing campaigns so we can pay partners accurately and improve our advertising spend.
• To comply with law, enforce our Terms, and protect our users and the Service.

3. Automated scoring

Your IQ estimate, percentile, and per-domain profile are produced automatically by our scoring model from your answers. There is no manual review of individual results. Results are estimates produced for educational and entertainment purposes only and do not produce legal or similarly significant effects about you. We do not use your results to make decisions about credit, employment, insurance, housing, or eligibility for any service. You may contact privacy@homeofiq.com to ask how a result was produced, or to request its deletion.

4. How we share information

We share information only with service providers acting on our behalf under contract, and only as necessary to deliver the Service. Current providers include:

• Supabase— authentication and database hosting (stores your account, results, and progress);
• Vercel— application hosting and content delivery;
• Resend— transactional and marketing email delivery;
• Payment processor— collects and processes your payment information directly;
• CogniFit— provides the brain-training exercises offered to subscribed members.

We may also disclose information when required by law, subpoena, or court order; to protect our rights, users, or the public; to enforce our Terms; in connection with a merger, acquisition, financing, or sale of all or substantially all of our assets (in which case the successor entity will be bound by this Policy or one no less protective); or with your consent. We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising, as those terms are defined under California law (and the equivalent terms under other state laws).

5. Sensitive information

We treat your IQ estimate and cognitive profile as sensitive personal information. We use it only to provide the Service and the purposes described in this Policy, never sell or share it, and apply additional access controls. To the extent any U.S. state classifies cognitive-performance data as "consumer health data" or "sensitive data," we treat it accordingly. You may request that we limit our use of sensitive personal information to those purposes necessary to provide the Service.

6. Cookies and similar technologies

We use first-party cookies and similar technologies to:

• keep you signed in (authentication and session);
• remember your test progress between page loads;
• remember your cookie and consent preferences;
• identify your browser across visits for our own analytics and deduplication (visitor id);
• preserve the marketing source of your visit (UTM and click-id parameters) so the conversion can be attributed.

These cookies are first-party and used solely for our own analytics and to operate the Service. We do not embed third-party advertising trackers or cross-site tracking pixels. You can manage cookies in your browser settings; blocking cookies may break parts of the Service. We recognize the Global Privacy Control (GPC) signal as a valid opt-out request for any "sale" or "sharing" of personal information under applicable state law.

7. Marketing email

We comply with the CAN-SPAM Act. Every marketing email clearly identifies the sender, includes our physical mailing address, and contains a working unsubscribe link. We honor unsubscribe requests within 10 business days. Transactional messages (account, order, billing, results, security) are not subject to unsubscribe and will continue while your account is active.

8. How long we keep information

Account data, results, training history, and the answers behind a result are retained while your account is active and for up to 90 days after account closure (to allow account recovery and resolve disputes), after which they are deleted or de-identified. Quiz attempts taken before an account is created are retained for up to 24 months for attribution, conversion measurement, and follow-up communications, then deleted or de-identified. Billing and tax records are kept for as long as required by law, generally up to seven years. Aggregated, de-identified data may be retained indefinitely.

9. Security

We protect information using TLS in transit, encryption at rest, Row-Level Security in our database, principle-of-least-privilege access controls, and regular review of provider security. No system is perfectly secure. If a security incident affects your personal information, we will notify you and any applicable authorities as required by law.

10. Your privacy rights (United States)

Depending on your state of residence, you may have the following rights with respect to your personal information:

• Right to know / access the categories and specific pieces of personal information we hold about you and how we use them.
• Right to delete personal information we hold about you, subject to certain exceptions.
• Right to correct inaccurate personal information.
• Right to data portability— receive a copy in a usable format.
• Right to opt out of the sale of personal information, the sharing of personal information for cross-context behavioral advertising, and certain profiling. We do not engage in these activities, so there is nothing to opt out of, but you may still submit a request and we will confirm.
• Right to limit use of sensitive personal informationbeyond what is necessary to provide the Service.
• Right of non-discrimination for exercising any of these rights.
• Right to appeal a denial of your request, where applicable under state law.

These rights are guaranteed by, among others, the California Consumer Privacy Act (CCPA) as amended by the CPRA, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Texas Data Privacy and Security Act, the Oregon Consumer Privacy Act, the Montana Consumer Data Privacy Act, the Florida Digital Bill of Rights, the Delaware Personal Data Privacy Act, and the comparable privacy laws of New Hampshire, New Jersey, Tennessee, Iowa, Indiana, Kentucky, Minnesota, Maryland, and Rhode Island, plus any other comparable state laws as they take effect.

To exercise any right, email privacy@homeofiq.comfrom the address tied to your account, or write to the address at the top of this Policy. We respond within 45 days (with one 45-day extension if needed and permitted). You may use an authorized agent; we may need to verify your identity and the agent's authority before fulfilling the request. California residents may also request information about our direct-marketing disclosures under California's "Shine the Light" law.

11. Children's privacy

The Service is intended for adults age 18 and over. We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA), or from anyone under 18. If you believe a person under 18 has provided us with personal information, contact privacy@homeofiq.com and we will delete it.

12. Your rights under the EU / UK GDPR

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data:

• Right of access— obtain a copy of the personal data we hold about you.
• Right to rectification— correct inaccurate or incomplete data.
• Right to erasure("right to be forgotten") — ask us to delete your data, subject to legal retention obligations.
• Right to restrict processing in certain circumstances.
• Right to data portability— receive your data in a structured, commonly used, machine-readable format.
• Right to object to processing based on our legitimate interests or for direct marketing.
• Right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Our scoring does not produce such effects (see Section 3).
• Right to withdraw consent at any time, where processing is based on consent.
• Right to lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (AP); other EU residents may complain to their local authority.

Our legal bases for processing are: (a) performance of the contract between you and us (delivering the Service); (b) compliance with our legal obligations (tax, accounting, fraud prevention); (c) our legitimate interests in operating, securing, and improving the Service and in marketing similar products to existing customers; and (d) your consent for optional cookies and marketing email to prospects. To exercise any right, email privacy@homeofiq.com. We respond within one month and may need to verify your identity first.

13. International data transfers

We are based in the Netherlands and your data is primarily processed in the European Economic Area. Some of our service providers (e.g. Vercel hosting, Supabase) operate infrastructure outside the EEA, including in the United States. When personal data is transferred outside the EEA / UK / Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the UK Addendum and the EU-US Data Privacy Framework. You can request a copy of the relevant safeguards by emailing privacy@homeofiq.com.

14. Do Not Track

Some browsers transmit a "Do Not Track" signal. Because there is no common industry standard for how to respond, we do not respond to DNT signals at this time. We do honor the Global Privacy Control (GPC) signal as described above.

15. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will notify you by email or through the Service before they take effect. The "Last updated" date at the top of this page reflects the most recent version. Continued use of the Service after an update constitutes acceptance.

16. Contact us

Privacy requests and questions: privacy@homeofiq.com. General support: support@homeofiq.com. Postal address: CLIQstream B.V., Stadhouderskade 85, 1073AT Amsterdam, Netherlands. See also our Terms of Service and Refund Policy.