Privacy Policy
Effective date: 25 July 2026
This Privacy Policy explains how Teknosparc LTD collects, uses, shares, and protects your personal data when you use the iQuli mobile application and our website at iquli.com (together, the "Service"). It also explains the rights you have over your personal data and how to exercise them.
We have written this policy in plain English. If anything is unclear, please contact us at contact@teknosparc.com and we will be glad to help.
1. Who we are
iQuli is operated by Teknosparc LTD ("Teknosparc", "we", "us", "our"), a company registered in England and Wales under company number 14615978.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), Teknosparc LTD is the data controller responsible for your personal data.
You can reach our privacy team at contact@teknosparc.com for any questions about this policy or how we handle your data.
2. What iQuli is
iQuli is a cognitive training app that offers brain-training games and exercises. iQuli is a wellness and entertainment product. It is not a medical device, it does not diagnose, treat, cure, or prevent any disease or medical condition, and it does not provide medical advice. Nothing in the Service should be interpreted as a clinical or diagnostic assessment.
3. What data we collect and why
We collect only the data we need to run the Service, keep it secure, and improve it. The categories of personal data we process are set out below.
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Email address, authentication identifier, display name (if provided), and — where you use Apple Sign-In — the identifier and any relayed email address Apple provides. | To create and secure your account, sign you in, and communicate with you about the Service. |
| Date of birth | The full date of birth you provide when you set up your account. | To confirm you are aged 18 or over (iQuli is for adults only) and to group your results with a comparable age band when we calculate your scores. Your age band is derived from your date of birth; it is not used for any other purpose. |
| Profile and onboarding data | Biological sex and education level (both optional), and your answers to the short self-assessment questionnaire shown before the Fit Test (for example, how sharp you feel your focus is). | To normalise and contextualise your scores against a comparable group of users. These fields are self-reported and are used only to calculate and present your results — never to make any health or medical assessment about you. |
| Usage and gameplay data | Games played, scores, session timestamps, progress, difficulty levels, and in-app activity such as daily workout completion. | To deliver the core training features, track your progress, and adapt game difficulty. |
| Device and technical data | Device model, operating system version, app version, language settings, crash logs, and diagnostic identifiers. | To operate the app, diagnose crashes, maintain security, and ensure compatibility. |
| Subscription status | Whether you have a free or paid plan, trial status, and renewal status received from the app stores through our subscription management provider (see Section 6). | To manage access to paid features. We do not receive or store your card or payment details — see Section 6. |
| Analytics data (optional) | Aggregated and event-level usage analytics, collected where you have consented. | To understand how the app is used and improve it. This is optional, consent-based, and can be disabled at any time. |
| Communications | Emails and support messages you send us. | To respond to your enquiries and provide support. |
We do not collect special category data as defined by the UK and EU GDPR (such as data concerning your health, racial or ethnic origin, sexual orientation, or biometric or genetic data). Your date of birth, biological sex, education level, questionnaire answers, and gameplay performance are treated as ordinary personal data, used only to run the Service and to calculate and contextualise your scores — they are not used to make any health, medical, or clinical assessment about you.
4. Legal basis for processing
Under the UK GDPR and EU GDPR, we must have a lawful basis for each use of your personal data. The bases we rely on are:
- Performance of a contract (Article 6(1)(b)): to provide the Service you have signed up for, including creating your account, delivering games, tracking your progress, and managing your subscription.
- Legitimate interests (Article 6(1)(f)): to keep the Service secure, prevent fraud and abuse, diagnose and fix crashes, and improve our product. We balance these interests against your rights and only rely on this basis where it does not override your interests or fundamental rights.
- Consent (Article 6(1)(a)): for optional analytics. You can give or withdraw consent at any time (see Section 9). Withdrawing consent does not affect processing carried out before withdrawal.
- Legal obligation (Article 6(1)(c)): where we must process data to comply with the law, for example to respond to lawful requests or meet accounting and tax requirements.
5. How long we keep your data
We keep personal data only for as long as we need it for the purposes described in this policy.
- Account, profile, and gameplay data (including your date of birth, biological sex, education level, and questionnaire answers): retained for as long as your account is active. If you delete your account, we delete or anonymise this data within 30 days, except where we must retain limited records for legal reasons.
- Crash and diagnostic logs: retained for up to 90 days, then deleted or aggregated.
- Analytics data: retained in aggregated form for up to 14 months.
- Support communications: retained for up to 24 months after your enquiry is resolved.
- Records required by law (e.g. tax and accounting): retained for the period required by applicable law, typically up to 6 years.
6. Third-party processors and recipients
We use a small number of trusted service providers ("processors") who process personal data on our behalf and under our instructions. We do not sell your personal data, and we do not share it for third-party advertising.
- Google (Firebase / Firestore / Google Cloud Platform): hosting, database, authentication, crash reporting, and optional analytics. Google acts as our processor for these services under the Google Cloud Platform / Firebase Data Processing and Security Terms. Servers are located in EU and US regions.
- RevenueCat (RevenueCat, Inc.): subscription and purchase management. RevenueCat operates the in-app purchase infrastructure that unlocks paid features and keeps your subscription status (trial, active, renewed, cancelled) in sync across your devices. To do this it receives your iQuli user identifier (your Firebase user ID, used as your RevenueCat app user ID), a device identifier, and the purchase and subscription details relayed from Apple or Google — such as the product purchased, the store, transaction identifiers, and renewal or expiry dates. RevenueCat does not receive your payment card details, which remain with Apple and Google. RevenueCat acts as our processor under the RevenueCat Data Processing Addendum and processes this data on servers in the United States.
- Apple: where you use Apple Sign-In, Apple provides authentication identifiers. Where you subscribe through the App Store, Apple processes your payment and provides us with your subscription status. Apple acts as an independent controller for its own payment and account processing.
- Google Play: where you subscribe through Google Play, Google processes your payment and provides us with your subscription status. Google acts as an independent controller for its own payment and account processing.
App store payments are handled entirely by Apple and Google. We never receive, see, or store your full card number or other payment card details.
7. International data transfers
Our infrastructure runs on Google Cloud Platform, with servers in both EU and US regions. This means your personal data may be transferred to and processed in countries outside the UK and the European Economic Area (EEA), including the United States.
Where personal data is transferred outside the UK or EEA, we ensure an appropriate level of protection through legally approved safeguards, including the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses (SCCs), together with additional technical and organisational measures such as encryption in transit and at rest.
8. Your rights
If you are in the UK or the EEA, you have the following rights over your personal data:
- Right of access — to ask for a copy of the personal data we hold about you.
- Right to rectification — to ask us to correct inaccurate or incomplete data.
- Right to erasure — to ask us to delete your personal data ("right to be forgotten") in certain circumstances.
- Right to data portability — to receive your data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
- Right to object — to object to processing based on our legitimate interests.
- Right to restriction — to ask us to limit how we use your data in certain circumstances.
- Right to withdraw consent — where we rely on consent, you can withdraw it at any time.
You also have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EEA, you may complain to your local data protection authority.
9. How to exercise your rights
To exercise any of the rights above, email us at contact@teknosparc.com. We may need to verify your identity before acting on your request. We will respond within one month, as required by the GDPR. There is normally no charge, though we may charge a reasonable fee or refuse requests that are manifestly unfounded or excessive.
You can delete your account at any time from within the app. You can grant or withdraw your consent to optional analytics in the app's privacy settings at any time.
10. Cookies and local storage
The iQuli app and website use a minimal amount of local storage and similar technologies:
- Authentication tokens: Firebase Authentication stores a secure session token on your device so you stay signed in. This is strictly necessary for the Service to function.
- Analytics identifiers: where you have consented, Firebase Analytics may store an identifier. This is optional and you can withdraw consent at any time.
- Web fonts and website essentials: our website loads fonts via Google Fonts and may use small amounts of local storage for basic functionality.
For full details, please see our Cookie Policy.
11. Children
iQuli is intended solely for adults aged 18 and over. You must be at least 18 to create an account or use the Service, and the Service is not directed at children. We do not knowingly collect personal data from anyone under 18. During account setup we ask for your date of birth and block access where it indicates you are under 18; this check is enforced on our servers, not only in the app. If we discover that we hold personal data relating to a person under 18, we will close the associated account and delete that data without undue delay. If you believe someone under 18 has provided us with personal data, please contact us at contact@teknosparc.com.
12. How we protect your data
We use appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and the security features provided by Google Cloud Platform and Firebase. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly if a personal data breach occurs.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will update the effective date above and, where appropriate, notify you in the app or by email. We encourage you to review this policy periodically.
14. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
Teknosparc LTD
Company No. 14615978, registered in England and Wales
Email: contact@teknosparc.com