Privacy Policy

Effective: May 25, 2026 · Last updated: May 25, 2026

GridIQ ("we," "us," or "our") operates the GridIQ mobile and web application ("Service"). This page explains what data we collect, how we use it, and how to delete it.

By using the Service, you agree to the collection and use of information described here.

Information we collect

Information you provide

• Email address and display name — collected when you sign in with Google. Used to identify your account across devices.
• Game results — accuracy, time, IQ score, streak, and similar gameplay statistics. Stored to compute your GridIQ rating, leaderboard standing, and streak.
• Settings preferences — sound effects, notifications, leaderboard visibility, and similar in-app choices.

Information collected automatically

• Device push token (optional, only if you grant notification permission) — used solely to deliver daily-puzzle reminders.
• Anonymous usage events — game start, game complete, hint used, and similar events. Tied to a randomly-generated device identifier, not to your email. Used to understand how the app is used in aggregate.

We do not collect: precise location, contacts, photos, microphone, camera, advertising IDs, browsing history, or biometric data.

How we use information

• Provide and maintain the Service — display your IQ, streak, and leaderboard standing.
• Sync across devices — when signed in, your progress is shared between the web and mobile apps.
• Notifications — only daily-puzzle reminders, only if you opt in. We never send promotional pushes.
• Improve the Service — aggregate, anonymous analytics inform product decisions.

How we share information

We do not sell, rent, or trade your personal data.

We share data only with the following processors, strictly to operate the Service:

• Google Firebase Authentication — verifies your sign-in.
• Supabase — stores your account and game data.
• Resend — delivers email reminders (only if enabled).
• Expo Push Notification Service — relays push notifications (only if enabled).
• PostHog — receives anonymous usage events.

We may disclose information when required by law or to enforce our terms.

Data retention

• Account and game data are retained while your account exists.
• Anonymous usage events are retained for up to 24 months.
• You can request deletion of your account and all associated data by emailing the address below. We will fulfill verified requests within 30 days.

Children

GridIQ is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us data, please contact us so we can delete it.

Security

We use industry-standard technical and organizational measures (HTTPS, encrypted databases, scoped API keys) to protect your data. No system is 100% secure; we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data. To exercise any of these rights, email us.

Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app or via email. The "Last updated" date above always reflects the current version.