Privacy Policy
Last updated: September 2026
1. Data we collect
We collect the minimum necessary to deliver the service: your account email, the name you provide on sign-up, and your assessment answers and results (IQ score, cognitive profile, and test metrics). No payment details are stored on our servers — payments are processed by our payment provider (Stripe).
2. How we use your data
Your data is used solely to: operate your account, compute and display your assessment results, generate your certificate, and (if you participate in a recruiter invitation) share your final IQ score with the organization that invited you. We do not sell, rent, or trade your personal data to third parties.
3. Legal basis
We process your data on the basis of contract (providing the service you requested), your consent (as recorded when you create an account), and our legitimate interest in operating and improving the platform.
4. Data sharing
Aptimetric uses trusted subprocessors to operate the service: Supabase (hosted PostgreSQL database and authentication), Vercel (hosting), and Google Fonts (typography). Each is subject to strict data-processing terms. If you are invited by an organization, only your final IQ score and completion status are shared with them — never your raw answers.
5. Data retention & deletion
We retain your account and results for as long as your account is active. You may delete your account at any time from the dashboard; doing so permanently removes your profile and assessment results. Email us at support@aptimetric.org for manual deletion requests.
6. Security
All traffic is encrypted in transit (TLS/HTTPS), passwords are hashed and never stored in plain text by Supabase Auth, and database access is protected by row-level security so each user can only see their own data.
7. Cookies
We use strictly necessary cookies for authentication (Supabase session tokens) and functional cookies for local test-progress persistence. We do not use advertising or tracking cookies.
8. Children's privacy
The service is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a child has provided us personal data, contact support@aptimetric.org and we will delete it.
9. Your rights
Depending on your jurisdiction (e.g. GDPR or CCPA), you may have rights to access, correct, export, restrict, or delete your personal data. Contact support@aptimetric.org to exercise any of these rights — we respond within 30 days.
10. Changes to this policy
We may update this policy as the service evolves. Material changes will be announced via email or an in-product notice. Continued use after changes constitutes acceptance.