Privacy Policy

Who we are

IQ Daily (“IQ Daily: Brain Games & Test”) is published by D-bug Station Limited (“we”, “us”). We are responsible for the personal data described here. This policy covers the IQ Daily iOS app, the website iqdaily.app, and the service the app talks to at api.iqdaily.app.

Questions about privacy go to [email protected].

What we collect and why

Your account

The first time you open the app, it creates an anonymous account for you: a random install ID kept in your phone’s Keychain (not your device’s advertising or vendor identifier) and an IQ Daily user ID. You don’t need to give us your name, email address or phone number to play. Why: to save your progress and run the game for you.

Sign in with Apple or Google (optional)

If you link your account to Apple or Google, we store the account identifier from the sign-in token (its “subject”), so you can get back into your account on another phone. We don’t ask Apple or Google for your name or email address. If a sign-in token includes an email address anyway, we keep it with that sign-in link and don’t use it to contact you. Why: so you can recover your account.

Your profile and friends

Your handle, your avatar orb, your friends, invites, blocks and nudges, your time zone and your device’s language setting. Why: to show you to your friends and other players, to follow your local day for the daily puzzle, reminders and the weekly recap, and to keep the social features working.

Your play

Your puzzle answers, attempts and times; scores, streaks and streak freezes; level progress, XP and badges; teams you create or join (including team names and emblems); duels, private rooms and Arena results, ratings and crowns; and where you stand on leaderboards. Why: to run the game, work out percentiles and leaderboards, and keep play fair.

Learning and practice

The Learn stories you open and how far you get, the daily brain cards you open, your answers in Focus practice, and your Review list (puzzles you missed and when they’re due again). Why: to keep your place, bring missed puzzles back at the right time, suggest what to practise, and show your weekly brain report.

Ask Lume (optional)

Ask Lume is a chat with Lume, our mascot, about puzzles, practice and the app. It’s powered by Claude, an AI model made by Anthropic. Before your first question, the app tells you what is shared and asks you to agree; we record when you did. When you ask something, we send Anthropic your question, the recent messages of that chat and a short summary of your progress: your plan (free or Pro), your streak, the levels you’ve reached, your accuracy by puzzle category over the last 60 days and how many Review puzzles are due. We never send your handle, user ID, contact details or device identifiers. We keep each question and answer, with its date, for 30 days so we can enforce the daily limits and check the quality of Lume’s answers, then delete it. Don’t share personal details in the chat. Lume’s answers are AI-generated and can be wrong; they aren’t professional advice. Why: to answer you.

Tournaments

If you enter a cup, we store your entry, your answers and times, your bracket and your country (the country of your App Store account, which the app sends us), and your results. Your handle, avatar orb, country and results appear on that cup’s leaderboards. If you win a prize of money value and claim it, we keep what you confirmed (that you’re 18 or older or have a guardian’s permission, your country and the gift card you chose) and send the prize in Profile → , then Help & support. Why: to run the cups fairly and deliver prizes. See the Official Cup Rules.

Messages to support

If you write to us from Profile → , then Help & support, we store your messages and our replies with your account so the conversation can continue in the app. Why: to help you.

Player reports

If you report another player, we store the reason and any note you write so a person can review it. Reports other players make about you are stored too. Why: to moderate handles and team names and to deal with cheating.

Notifications

If you allow notifications, we store your device’s Apple push token and the app’s version so we can send reminders and game notifications through Apple. News and events, new Learn stories and the daily brain card are sent only if they’re switched on in Profile → , then Notifications, where you can also turn reminders off. We record which notifications we sent you, and the app tells us when you open one. You can turn notifications off at any time in iOS Settings.

Purchases

When you buy IQ Daily Pro, Apple takes the payment. The app sends us the App Store transaction (StoreKit 2), which we verify on our server and use to switch Pro on. We never see or store your card or other payment details.

App analytics (first-party only)

The app sends us events about how it’s used, such as screens viewed, puzzles started and submitted, shares, and which notifications, messages, stories and cards you open. They go only to our own servers, are linked to your IQ Daily user ID, and are used only to understand and improve IQ Daily. There are no third-party analytics SDKs. The only third-party SDK that collects data is Google’s ads SDK, for free players (see Advertising).

Rewarded ads

If you choose to watch an ad for a reward (extra levels, a hint, a streak freeze, an archive puzzle or a retry), we record the reward, when you earned it, the ad unit and the ad’s response ID, and a one-way hash of your IP address. Why: to give you the reward, enforce the daily and weekly limits, and stop abuse. Rewards never change scores, XP or leaderboards.

Server logs

Our servers log the requests they receive, including IP addresses. Why: to keep the service running and secure, and to investigate abuse.

The website

iqdaily.app shows no ads, runs no analytics and sets no cookies of its own. It remembers your colour-blind grid choice in your browser’s local storage. Puzzles you solve on the website are checked, not saved. Cloudflare protects the site, so it processes your IP address and may set cookies it needs for security.

What we don’t collect

• Contact details: no name, email address or phone number is requested, including at sign-in.
• Your location. A time zone isn’t a location.
• Your contacts, photos or videos. Saving a clip adds it to your photo library; the app can’t read your library.
• Crash reports and diagnostics, health, financial or browsing data.

Our legal bases

Where the law asks us to have a legal basis for using personal data, ours are:

• Our contract with you: to provide the game you asked for, including your account, progress, social features and purchases.
• Legitimate interests: to keep IQ Daily secure and fair (logs, anti-cheat, moderation and rewarded-ad limits), to understand how the app is used through our own analytics, to keep backups, and to fund the free game with non-personalized ads. We weigh these against your rights.
• Consent: for push notifications, which you allow in iOS (and news and events, which you switch on in the app); for Ask Lume, which you agree to before your first question; for linking Apple or Google sign-in; and for personalized ads, which you allow through Google’s consent form (where it applies) and Apple’s App Tracking Transparency prompt. You can withdraw it at any time.
• Legal obligations: when the law requires us to keep or disclose information.

Who processes your data

We don’t sell your data to data brokers, and we don’t give advertisers your account, handle or results. These providers handle data for us, or for you when you choose to use them:

• DigitalOcean hosts our servers and database, and stores our backups (DigitalOcean Spaces, Singapore region).
• Cloudflare sits in front of iqdaily.app for security and speed, so requests to the website pass through it.
• Apple takes App Store payments and confirms purchases, provides Sign in with Apple, and delivers push notifications. If Game Center support is switched on and you’re signed in to Game Center, the app also posts your daily score, weekly XP and badges there, under Apple’s terms.
• Google confirms your identity, only if you choose Sign in with Google. For free players, Google also serves the ads in the app through Google Ad Manager (including AdX) or AdMob, and, if we switch them on, its mediation partners (see Advertising).

Other players see what the game shows them: your handle, avatar orb, streak, level, badges and results on leaderboards, in teams, duels, rooms and the Arena, plus anything you share yourself. You can hide yourself from global leaderboards in Profile → , then Show me on global boards; friends always see you.

• Anthropic runs Claude, the AI model behind Ask Lume. Only if you use Ask Lume, it receives what’s described in Ask Lume and writes Lume’s reply. Anthropic’s commercial terms don’t allow it to train its models on this data. We also use Claude to help draft puzzles and translate our own announcements and lessons; no player data is included in those.

We may also disclose information if the law requires it, or to protect our players or the service from fraud or abuse.

Advertising

IQ Daily is free to play, and free players see ads. They come from Google, through Google Ad Manager (including Google’s ad exchange, AdX) or Google AdMob, and, if we switch it on, the ad networks Google mediates for us. Most ads are rewarded: optional ads you choose to watch for a reward. A few full-screen ads can appear between levels. There are no ads in the daily puzzle before your result, Hard Mode, Duels, the Arena, teams, rooms, onboarding, the paywall or sharing, and none on iqdaily.app.

What Google may collect

When the app shows an ad, Google’s ads SDK may collect:

• your device’s advertising identifier (IDFA), only if you allow tracking in Apple’s App Tracking Transparency prompt;
• your IP address and a coarse location worked out from it (country or city, never GPS);
• device and app information, such as the device model, iOS version, language and the app’s version;
• your interactions with ads: which ads were shown, viewed, tapped or watched to the end.

For a rewarded ad the app also passes Google your IQ Daily user ID and a one-time reward code, so the reward can be matched to your account. We don’t give Google your handle, puzzle results or contact details. Google uses this data to show, measure and protect ads and, if you allow it, to personalize them. Google explains how in How Google uses information from sites or apps that use our services, and its privacy policy applies to it.

Your consent

• In the European Economic Area, the UK and Switzerland (and US states where it’s required), Google’s consent form asks you first whether ads may be personalized and what data may be used for them.
• Then iOS asks, through App Tracking Transparency, whether IQ Daily may track you across other companies’ apps and websites.
• If you say no to either, you still get ads, but they’re non-personalized: chosen from the app’s content and your coarse location, without your advertising identifier. The app works the same either way.

How to opt out

• Stop tracking at any time in iOS Settings → , then Privacy & Security → , then Tracking: turn IQ Daily off, or turn off Allow Apps to Request to Track.
• Turn off personalized ads from Apple in iOS Settings → , then Privacy & Security → , then Apple Advertising → , then Personalized Ads.
• Where Google’s consent form applies, you can change your choice later from the app’s settings.
• Or go ad-free with IQ Daily Pro.

How long we keep it

• Your account and game data: for as long as your account exists. Deleting the app doesn’t delete your account.
• Analytics events: as long as your account exists, and deleted with it.
• Ask Lume questions and answers: 30 days, then deleted (sooner if you delete your account).
• Support messages: as long as your account exists, and deleted with it.
• Rewarded-ad records: as long as your account exists, and deleted with it. Google keeps ad data under its own policies.
• Server logs, including IP addresses: about 14 days.
• Backups: a copy of the database is made every night and kept for 14 days, then deleted.
• After you delete your account: it’s gone from the live database straight away, and from backups once they expire, within 14 days.

Deleting your account

In the app, go to Profile → , then Delete account (at the bottom of the Profile screen), then confirm twice with Continue and Delete forever. It happens immediately; there’s no waiting period, and it can’t be undone.

What’s removed: your account and any anonymous accounts merged into it; your Apple or Google sign-in link and any email address stored with it; your devices and push tokens, settings, handle and avatar orb; your streak, freezes, level progress, XP, badges and leaderboard places; your friends, invites, blocks and nudges; your shares and analytics events; your Learn, Focus and Review progress; your cup entries and prize claims; your Ask Lume chats and support messages; your rewarded-ad history; your Pro purchase records; reports about you; and your duel rating, duels, room memberships, Arena results and crowns. You leave your team; the captaincy passes to another member, or a team of one is disbanded.

What stays, without you: your daily, Hard Mode and team-set results are kept only as anonymous numbers, re-labelled with a random ID that’s stored nowhere else, so past percentiles stay correct. A private room you created stays open for its other members. Reports you made about others stay for moderation, no longer linked to you. Apple’s notifications about past purchases stay in our records, no longer linked to your account.

The app then wipes what it stored on your phone (settings, sign-in credentials in the Keychain and caches) and starts fresh.

Can’t open the app? Email [email protected] with your handle. We may ask for details to confirm the account is yours before we delete it.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct it (you can change your handle at any time in Profile → , then Handle);
• delete it (see Deleting your account);
• portability: get a copy in a common machine-readable format;
• object to or restrict how we use it, and withdraw consent you’ve given.

To use any of these rights, email [email protected]. We’ll answer within the time the law allows, normally one month, and we may need to confirm the account is yours first. You can also complain to your local data protection authority.

Children

IQ Daily isn’t directed at children under 13, and we don’t knowingly collect personal data from them. If you think a child under 13 has given us personal data, email [email protected] and we’ll delete it.

Security

Data travels between the app, the website and our servers over encrypted connections (HTTPS). Access to our servers and admin tools is limited to the people who run IQ Daily, and backups are kept in private storage. We never handle payment card data. No system is perfectly secure; if you find a problem, please tell us at [email protected].

International transfers

Our servers are run by DigitalOcean, and our backups are stored in DigitalOcean’s Singapore region. Cloudflare, Apple and Google operate around the world, and Anthropic processes Ask Lume questions in the United States. So your data may be processed in countries other than your own, whose data protection laws may differ. Where the law requires it, we rely on the safeguards our providers offer for these transfers, such as standard contractual clauses.

Changes to this policy

We’ll update this policy when IQ Daily changes, and change the date at the top when we do. If a change matters, we’ll also tell you in the app before it takes effect.

Contact

D-bug Station Limited, the publisher of IQ Daily: [email protected].