Privacy

PsychoQuant takes your data seriously. The short version: we collect what's needed to run the service, we don't sell anything to anyone, and you can take your data with you or delete it whenever you like.

Who we are

PsychoQuant is operated by Adrian Aspinall, based in the United Kingdom. Contact: hello@psychoquant.com.

What we collect

• Account information — email address and password (the password is hashed; we never see it).
• Assessment responses — your 432 binary recognitions and the time you spent on each card.
• Generated reports — the JSON profile and any narrative text produced for you.
• Payment records — the fact of a purchase, the amount, the currency, the Stripe session reference. We do not store card numbers; Stripe handles all card data.
• Email events — a record that a transactional email (welcome, report-ready) was sent to you.
• Technical access — standard request logs at the network edge (IP address, user agent, page path) for security and abuse prevention. These are retained for a short period.

How we use it

• To run the assessment, generate your reports, and deliver them.
• To process payments through Stripe.
• To send transactional email about your account and reports.
• To detect and prevent abuse of the service.

We do not use your responses or reports for marketing, advertising, model training, or any purpose unrelated to delivering the service to you.

Where it lives

• Supabase — primary data store (assessments, responses, reports, payments). Hosted in the EU.
• Cloudflare — site and edge functions. Provides DDoS and abuse protection.
• Stripe — payment processing only. Receives your email and payment details when you purchase.
• Anthropic — generates the narrative content of paid reports. Your assessment data is sent at the moment of generation. Anthropic does not retain it for training under their commercial terms.
• Postmark — sends transactional email. Receives your email address and the message content.

Cookies

We use a single technical cookie to keep you signed in (a Supabase auth session token). We don't use advertising cookies. We don't use third-party tracking cookies.

Site analytics — page views and conversion events — are measured with privacy-respecting tools (Plausible or Cloudflare Web Analytics) that don't set persistent cookies and don't track individuals across sites. No GDPR consent banner is required for that.

Your rights

Under UK GDPR you have the right to access, correct, port, and erase your personal data. We support all of these as self-service from your profile:

• Access and portability — Export your full data as JSON from your profile page at any time.
• Erasure — Delete your account from your profile page. Deletion is immediate and complete: profile, assessments, responses, reports, payment records, and email events are all permanently removed. Stripe payment records are retained by Stripe under their own legal obligations.
• Correction — Email hello@psychoquant.com if anything in your account needs correcting.

Retention

We keep your data for as long as your account exists. When you delete your account, your data is removed within minutes. Backups containing your data are rotated out within 30 days.

Stripe is required by law to retain payment records for a number of years for tax and anti-fraud purposes. Their retention is independent of ours.

Children

PsychoQuant is not designed for, marketed to, or intended for children under 18. We don't knowingly collect data from minors. If you believe we have, contact us and we will delete it.

International transfers

Some processors (notably Anthropic, headquartered in the United States) operate outside the UK and EU. Where personal data crosses borders, we rely on the appropriate UK / EU adequacy mechanisms or Standard Contractual Clauses with each processor.

Changes

If we change anything material about how we handle data, we'll update this page and email anyone with an active account. The "last updated" date at the top reflects the most recent revision.

Complaints

If we haven't resolved a privacy concern to your satisfaction, you can complain to the UK Information Commissioner's Office at ico.org.uk.