Privacy Policy

AcumenBrain^™ is an app that runs an IQ test and a set of brain training games for individuals using it on their own. It is not a clinical tool, a medical service, or a diagnostic instrument. Anything you see here is meant for personal self-reflection and training.

For privacy questions or to exercise any of the rights below, email privacy@acumenbrain.com.

Account

• Your email address (required to sign in via magic link).
• An optional display name you choose.
• Your timezone (defaults to America/New_York; used to schedule the Daily challenge correctly).
• A boolean flag for whether you opted in to marketing emails.

Gameplay

• The answers you submit on the IQ test, your dimension breakdowns, and the time you took per question.
• Your Daily, Sync, and Survival session results — scores, streaks, and what games you played.
• If you request a PDF Profile Pack, we save a frozen snapshot of the quiz you ran it on.

Anti-cheat (referrals only)

• When someone signs up through your invite link, we record a one-way SHA-256 hash (with a per-deploy salt) of their IP address, their user-agent, and a browser fingerprint, plus the email domain they signed up with. We use these only to detect referral abuse — we cannot recover the original IP from the hash.

Anonymous progress (before sign-up)

• Before you create an account, we keep a random anonymous device ID in your browser so your in-progress quiz isn’t lost. When you sign up, your anonymous progress is migrated to your account and the device ID is forgotten.

• Raw IP addresses or user-agents — only salted SHA-256 hashes.
• Payment details — when paid plans go live, your card is held by Stripe directly. We never see it.
• Location — no GPS, no city-level geolocation.
• Mobile advertising IDs (IDFA / GAID).
• Third-party trackers — no Google Analytics, no Meta Pixel, no TikTok Pixel, no LinkedIn Pixel, no Sentry, no Mixpanel, no Amplitude. Zero advertising and analytics SDKs.
• Contacts, photos, microphone, camera, or anything else from your device.
• Health data — AcumenBrain is a brain training app for individuals, not a medical product.

We only use cookies that the app actually needs to work. There is no advertising cookie, no cross-site tracker, and no consent banner because there’s nothing to opt out of.

• Auth cookie — set by Supabase after you click your magic link. HTTP-only. Lives until you sign out.
• Referral attribution cookie — if you arrive through an invite link /r/<code>, we save the code for 15 days so the inviter gets credit when you sign up. No identifier other than the code.
• Anonymous client ID — a random token so your in-progress quiz survives a page reload before you create an account.

We use a small set of vendors. Each is bound by their own data protection terms.

• Supabase — database, authentication, and PDF report storage. Hosted in the US.
• Email delivery (Supabase’s built-in SMTP / Resend) — to send your magic link and a small number of system emails.
• Vercel — application hosting. Receives request metadata at the edge but we don’t persist raw IPs.
• Stripe (planned, not yet active) — when paid plans launch, Stripe will hold the payment information directly. We’ll update this page before that goes live.

If we ever add a new sub-processor (an analytics tool, a help-desk, anything that touches your data), we’ll update this page first.

Wherever you live, you can do all of the following. We respond within 30 days at the latest, and usually much faster while we’re small.

• See your data — most of it is on your /account page; PDF reports include the full quiz payload.
• Edit your data — change your display name and marketing opt-in on /account; email privacy@acumenbrain.com to update your email or timezone.
• Delete your account — email privacy@acumenbrain.com and we’ll soft-delete your profile. After 30 days an anonymization job clears your personal fields. Aggregated, anonymized quiz data may stay for percentile calibration.
• Export your data — request a JSON export by email. PDF Profile Packs are also a portable copy of your IQ test results.
• Opt out of marketing — uncheck the marketing flag on /account. Transactional emails (magic links, account events) keep working.
• Withdraw consent — opt out or delete your account at any time. Anything you did under your previous consent stays valid until that point.

EU/UK and California residents have additional statutory rights (GDPR / UK GDPR / CCPA / CPRA). They are all implemented through the same email address above. You may also lodge a complaint with your local data protection authority or California’s Attorney General.

• Active accounts — until you delete them.
• Soft-deleted accounts — 30 days, then your personal fields are anonymized.
• Quiz sessions after deletion — kept without your identity, used only for percentile calibration. Cannot be linked back to you.
• Anti-cheat hashes — up to 24 months.
• Magic link tokens — 15 minutes, then expired.
• Referral cookie — 15 days.
• Credit ledger — kept indefinitely as an append-only audit trail (financial records).

AcumenBrain is intended for users 13 and over (16 and over in the EU/EEA, where local law sets that floor). We do not knowingly collect data from anyone younger. If you believe a child has signed up, email privacy@acumenbrain.comand we’ll delete the account.

Your data sits behind Supabase row-level security: by default, only you can read your own rows, and any changes go through our backend. Anti-cheat signals are stored as one-way salted hashes, not raw values. Magic-link tokens are single-use and expire in 15 minutes. No system is bulletproof, but we keep the attack surface small by collecting little to begin with.

Our infrastructure runs in the United States. If you’re outside the US, your data is transferred and processed there under standard contractual safeguards from our vendors (Supabase, Vercel, and email delivery).

When something material changes — a new sub-processor, a new category of data, a new region — we’ll update this page and bump the “Last updated” date at the top. For changes that affect existing accounts, we’ll notify you by email before they take effect.

Questions, requests, complaints, or anything privacy-related — email privacy@acumenbrain.com. A human reads it.