Privacy Policy

Last updated: November 25, 2025

At Cypher IQ ("we", "us", "our"), we are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our services and website (the "Services"), you agree to this Policy.

Scope

This Policy applies to the Services we provide through our website and any related applications or integrations that link to it.

Information we collect

• Account information: name, email address, password (hashed), and preferences you provide when creating or managing an account.
• Content you choose to upload: such as assessments, comments, and related metadata.
• Usage and device data: IP address, browser type, device identifiers, pages visited, referring/exit pages, timestamps, and other diagnostic data collected for security and performance.
• Cookies and similar technologies: we use essential cookies and may use analytics or preference cookies to improve the Services. You can control cookies through your browser settings.

How we use information

• Provide, operate, and maintain the Services, including creating and managing user accounts and school-teacher collaboration features.
• Process and store uploaded content to enable playback, analysis, and sharing within your school or with authorized users.
• Protect the security and integrity of the Services, prevent fraud and misuse, and enforce our terms.
• Communicate with you about your account, updates, security alerts, and administrative messages.
• Analyze usage to improve features, performance, and user experience.
• Comply with legal obligations and respond to lawful requests.

Legal bases for processing (EEA/UK)

If you are in the EEA or UK, we process personal data under these legal bases:

• Contract: to provide and support the Services you request.
• Legitimate interests: to secure, improve, and operate the Services. We balance these interests against your rights.
• Consent: for certain optional features (e.g., non-essential cookies), when required. You can withdraw consent at any time.
• Legal obligation: to meet compliance and regulatory requirements.

Sharing of information

• Service providers: we use trusted vendors for hosting, storage, email delivery, analytics, and support. They are bound by contractual obligations to protect your data and use it only on our instructions.
• Team access: depending on your settings and role, coaches and team members you are connected with may see your shared content and related metadata.
• Legal and safety: we may disclose information if required by law or to protect rights, safety, and security.
• Business transfers: if we undergo a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

International transfers

Your information may be processed in countries other than your own. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your information.

Retention

We retain personal information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may delete uploaded content at any time; backups and logs may persist for a limited period thereafter.

Security

We employ administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your rights

Depending on your location, you may have rights to:

• Access, correct, or delete personal information;
• Restrict or object to processing;
• Port your data to another service;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with a supervisory authority.

We do not sell personal information. If we engage in activities considered “sharing” for targeted advertising under applicable law, we will provide an opt‑out mechanism.

Children’s privacy

The Services are not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to remove it.

Cookies

We use essential cookies to operate the site and may use analytics cookies to understand usage and improve performance. You can manage cookies in your browser settings. If required by your jurisdiction, we will request consent for non‑essential cookies.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date. Your continued use of the Services means you accept the revised Policy.

Contact us

If you have questions or requests regarding this Policy, contact us at privacy@cypheriq.com.au.