The short version: the app works without an account. If you sign in, we keep your email, your name if you give one, your training progress and your IQ results, so you don't lose them. No ads, no tracking, and you can delete your account in the app.
1. Who we are
The IQ app and this website are made by Corelane Labs ("we", "us"). We are responsible for the personal data described here. You can reach us at support@corelanelabs.com.
2. What we store
You can use the app without an account. If you do, your progress stays on your phone and we store nothing about you.
If you sign in
- Your account: your email address and, if you give one, your name. You sign in with Apple, with Google, or with a one-time code we email you. Sign in with Apple may give us a private relay address instead of your real one. We never see your Apple or Google password.
- Your training progress: your games, levels, streaks and Brain Score, backed up so you can restore them on a new phone.
- Your IQ test results: your score from each IQ test you take in the app, and from the starting test on our website if you took it there.
Certificates
When the app issues an IQ certificate, it registers it with us so anyone holding the certificate number can check it is real. A certificate record holds the number, the IQ, the test and the dates, and the name printed on it if you chose to add one. It is not linked to your account. Anyone who has the number can see the name, IQ, date and number at iq.corelanelabs.com/lookup, so only share the number with people you want to see it.
The starting test on our website
If you took the starting IQ test on our website and paid for access, we receive your email address, your name if you gave one, your result and what you bought, so the app can find it when you sign in. Card payments are handled by the payment provider; we never see your card number.
What we don't collect
The app has no ads and no advertising or tracking SDKs. We don't collect your location, contacts or photos, and we don't sell or share your data for advertising. Reminder notifications are scheduled on your phone; we don't receive a push token.
3. Why we use it
- To run your account and sign you in (performing our agreement with you).
- To back up and restore your training progress and IQ results (performing our agreement with you).
- To let people check a certificate you share with them (our legitimate interest in certificates that can be trusted).
- To answer you when you write to us, and to keep the service secure, for example by limiting repeated requests (legitimate interest).
4. Where it is kept
We use a small number of service providers who process data for us and only on our instructions:
- Fly.io runs our server.
- Supabase hosts our database.
- Resend sends the sign-in code emails.
- Vercel hosts this website.
- Apple and Google confirm who you are when you sign in with them.
Some of these providers may process data outside the EU/EEA. Where they do, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
5. How long we keep it
- Your account, progress and results: until you delete your account.
- Sign-in codes: they work for 10 minutes and are stored only as a one-way hash.
- Sign-in sessions: they end after 60 days without use, or when you sign out.
- Certificates: for as long as the service runs, so a certificate stays checkable. Ask us and we will remove one.
6. Deleting your account
In the app, open You, then tap Delete account and confirm. This deletes your account, your email address, the progress and results saved on it, and your sign-ins. If you signed in with Apple, we also revoke the app's access to your Apple ID.
Progress kept on your phone stays there until you delete the app. Certificates are not part of your account; to remove one from the lookup, email support@corelanelabs.com with its number. If you can't open the app, email us from the address on your account and we will delete it for you.
7. Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to object to how we use it. Email support@corelanelabs.com and we will answer within a month. You can also complain to your data protection authority (in Denmark, Datatilsynet).
8. Children
The app is not made for children under 13, and we don't knowingly collect data from them. If you think a child has given us data, email support@corelanelabs.com and we will delete it.
9. This website
This website sets no cookies and runs no analytics. When you look up a certificate, we fetch it from our server by its number. To stop abuse, our servers count requests per IP address for a short time; we don't keep a record of who looked up which certificate.
10. Changes
If we change this policy, we will update the date at the top. If a change matters, for example if we add analytics or ads, we will tell you in the app first.