Privacy Notice

1. Who we are

Calibrate IQ ("we", "us") provides Calibrate, an app for tracking confidence and performance across practice exam questions. Calibrate IQ is the data controller for the personal data described in this notice. For any privacy question, or to exercise the rights below, contact us through the support channel shown in the app.

2. Data we collect and why

• Account data — email address and login credentials, used to create and secure your account and to sign you in. Legal basis: performance of our contract with you.
• Study data — the tests you create, confidence ratings, subject and topic tags, right/wrong grading, answer changes and the notes you write. Used to provide the service: scoring, analysis and your history dashboard. Legal basis: performance of our contract.
• Support messages — anything you send us when asking for help, used to answer you. Legal basis: legitimate interests.
• Technical and usage data — IP address, device and browser information, and error/diagnostic logs. Used for security, fraud prevention, keeping the service reliable and improving the product. Legal basis: legitimate interests and legal obligation.
• Subscription status — plan, status and renewal dates for paid accounts, used to give you access to paid features. Legal basis: performance of our contract. Card and billing details are collected and processed by Paddle, not by us.

3. Automated analysis of your study data

To produce your rating and written feedback, anonymised summaries of your confidence and grading data for a block (for example counts, percentages and subject names) are sent to an AI model provider acting as our processor. We do not send your email address or other identifying details for this purpose, and the summaries are not used to make decisions with legal effects about you.

4. Who we share data with

• Paddle.com — our reseller and Merchant of Record for all orders. Paddle handles payment, subscription management, tax compliance, invoicing and payment-related customer service.
• Service providers — hosting, database, authentication, email delivery, error monitoring and AI model providers, each acting on our instructions as processors.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose data by law.

We do not sell your personal data.

5. International transfers

Some of our providers are located outside the UK and EEA. Where personal data is transferred outside those areas, we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an applicable adequacy decision.

6. Retention

We keep your account and study data for as long as your account is open. If you delete a test it is removed from our live database. If you close your account we delete or anonymise your personal data within a reasonable period, except where we must keep records for legal, tax or accounting reasons. Diagnostic logs are kept for a short period only.

7. Your rights

Subject to applicable law, you have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable form, and to withdraw consent where processing relies on it. We aim to respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority (in the UK, the Information Commissioner's Office).

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database rules that restrict each account to its own records. No online service can be guaranteed completely secure.

9. Cookies and local storage

We use only essential cookies and browser storage needed to keep you signed in and to remember your preferences. We do not use advertising cookies. You can clear this storage in your browser settings, but you will then be signed out.

10. Changes

We may update this notice. Material changes will be announced in the app, and the date above will be updated.