Privacy Policy

This policy explains what {{LEGAL_ENTITY}} ("AIQ", "we", "us") collects when you use the AIQ app and aiqworlds.com, why, and what control you have over it. It is written to match what the product actually does — see Safety for the plain-language version of the same system.

If you are a parent setting up AIQ for a child, also read our Children's Privacy notice — it describes the additional, stricter rules that apply to child accounts and is part of this policy.

1. Who we are

AIQ is operated by {{LEGAL_ENTITY}}, {{ENTITY_TYPE}}, of {{REGISTERED_ADDRESS}} ({{COMPANY_NUMBER}}). For any privacy question, contact [email protected].

2. What we collect

Category	Examples	Why
Account details	Parent email, hashed password, child first name, age band, PIN (hashed)	Creating and securing your account and any child profiles under it
Learning activity	Topics requested, lessons completed, quiz answers, XP/gems/streaks, saved notes	Running the product — progress, gamification, spaced review scheduling
Memory facts	Interests, goals, a rolling measure of accuracy, buddy persona choice	Personalising course difficulty and tutor tone — visible and deletable by you at any time
Tutor conversations	Messages you send the AI buddy and its replies	Answering your question in context; safety review
Device & usage	App version, coarse error logs, hashed analytics identifiers	Keeping the service running and finding bugs
Payment	Subscription status and receipt validation via the App Store / Play Store	Entitlement — we do not receive or store your card details

3. What never leaves the product boundary

• Only a first name and a coarse age band are ever sent to the AI model that generates courses or powers the tutor — never an email address, surname, or any other identifier. This runs through a single point in our code specifically so it cannot leak by accident.
• Analytics never carry raw identifiers. Any identifier used for product analytics is a one-way cryptographic hash — it cannot be reversed back to your account.
• We do not sell personal information, and we do not use any child's data for ad targeting, at any age.

4. Who we share information with

We use a small number of infrastructure providers to run AIQ — cloud hosting, database, and the AI model provider. Each acts as a processor under contract, may only use your information to provide their service to us, and is listed with its role at Sub-processors. We do not sell personal information, and we do not share it with advertisers.

5. Where information is stored

Data is stored on cloud infrastructure that may be located outside your country, including outside Australia and India. Where that happens, we rely on our processors' contractual and technical safeguards to protect it to a standard consistent with this policy.

6. How long we keep it

We keep account and learning data for as long as your account is active. If you delete your account (see Delete your account), we delete your personal information within 30 days, except where we are required to keep limited records for legal, security or fraud-prevention purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. In the app, you can already:

• View everything AIQ has inferred about a learner and delete any fact, in Memory Graph;
• Export or delete an account entirely, from Settings or via this page;
• Turn off the optional weekly leaderboard, which deletes all associated leaderboard data immediately.

For anything not self-service, email [email protected]. We will respond within the time required by applicable law (30 days under the Australian Privacy Act; as specified under India's DPDPA).

8. Australia — Australian Privacy Principles

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you have a complaint we cannot resolve, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

9. India — Digital Personal Data Protection Act

AIQ is not yet available to users in India. Before that launch, we will designate a named Grievance Officer as required under the Digital Personal Data Protection Act, 2023, publish their contact details here, and process personal data as a Data Fiduciary under that Act. Consent for a child's account (any user under 18, under DPDPA) will be given and managed by a verified parent — see Children's Privacy.

10. Children's privacy

AIQ is built for use by children under a parent's account. Read the full Children's Privacy notice for the specific rules, consent mechanism, and protections that apply.

11. Security

Passwords and PINs are stored as salted hashes, not plain text. Traffic to the app is encrypted in transit. Quiz answers and other server-authoritative data are never sent to the client ahead of time — a security property built into the product itself, not just its infrastructure.

12. Changes to this policy

If we make a material change, we will update the effective date above and, for significant changes, notify account holders directly.

13. Contact

[email protected] · {{LEGAL_ENTITY}}, {{REGISTERED_ADDRESS}}