Privacy Policy

We collect only the information needed to run the test, deliver results, and understand usage:

• Email address
• Location (city and country)
• Test choices and timing data
• IP-derived country for default language selection
• Visit timestamps and page paths for conversion analytics

We do not collect names, phone numbers, government IDs, payment information, or health records.

We use the collected data for the following purposes:

• Generate and deliver your personal results and interpretation
• Prevent duplicate test submissions per email address
• Improve the test experience and measure completion rates
• Comply with legal and security obligations

Your data is stored securely with the following safeguards:

• Personal data and test results are stored in the Lovable Cloud backend (Supabase).
• Email and sensitive test data are encrypted at the application level using AES-256-GCM before storage.
• IP-derived country information is used only for language selection and is not stored as a separate profile.
• Only the project owner can decrypt sensitive fields using the ADMIN_TOKEN.

We keep your data according to these rules:

• Test submissions and visit analytics are retained until you request deletion.
• You can ask for your data to be deleted at any time by contacting the project owner.
• Anonymized, aggregated statistics may be retained for research and improvement purposes.

Depending on your location, you may have the right to:

• Request a copy of the personal data we hold about you
• Correct inaccurate information
• Request deletion of your test submission and contact details
• Withdraw consent for future communications

Because sensitive fields are encrypted, only the project owner can retrieve and delete your exact record. Please use the contact email below and allow a reasonable time for verification.

PersonAZ keeps cookies and tracking minimal:

• The app does not use third-party advertising or analytics cookies.
• Session state is stored locally in your browser during the test.
• No tracking pixels or social-media widgets are embedded in the results page.

We apply reasonable technical and organizational measures to protect your data:

• Application-level encryption (AES-256-GCM) for sensitive data
• Row-level security on the database so public accounts cannot read your submissions
• Access to raw data is limited to the project owner and the hosting platform's infrastructure controls
• No passwords are stored by the app; authentication is handled by the hosting platform when needed for admin access

Protecting younger users is important:

• The main PersonAZ test is intended for adults.
• The separate Tadpole experience for children aged 6–12 requires a parent or guardian email and affirmative consent confirmation.
• Children's data is subject to the same encryption, retention, and deletion practices described above.

We may update this Privacy Policy from time to time. The latest version will always be available at this page, and the 'Last updated' date will reflect the most recent revision.

If you have questions, want to exercise your data rights, or need to report a privacy concern, please contact the project owner at fred@aquaduq.com.