Last updated: 18 October 2026
This privacy policy explains which personal data the app IQ Test Challenge (iOS and Android, “the App”) processes, for what purposes, and which rights you have. The App works without an account: you do not need to provide your name or email address to play.
1. Controller
InnoMobile GmbH
Schlehenweg 20
18069 Lambrechtshagen
Germany
Amtsgericht Rostock, HRB 15811
Managing Director: Paul Stelzer
Email: support@innomobile.de
2. Summary
- When you first start the App, our server creates an anonymous player ID. There is no login and no email address.
- Your answers, results and game progress are stored on our server in Germany so that rankings, duels, leagues and comparisons with other players work.
- Profile details (nickname, country, year of birth, gender, education) are optional. Year of birth, gender and education are never shown to other players.
- Purchases of the Club subscription are handled by Apple or Google; we use RevenueCat to manage the subscription status.
- If you allow it, the App receives push notifications about duels, the league and your groups; for this we store a push token of your device and send the messages via Apple or Google.
- The App contains no advertising and no tracking for advertising purposes.
- To fix crashes and errors, we use the error reporting service Sentry.
3. Anonymous player ID
On first start, the App registers with our server. The server creates a random player ID and a secret token; only a hash of the token is stored on the server. The App sends the token with every request so that your results can be assigned to your player profile. You can find your player ID in the App under “Profile”.
With registration and with requests, the App transmits: app language, time zone offset (difference to UTC in minutes), app version and the version of the App interface. We need the time zone offset so that daily challenges, streaks and the daily reminder start at midnight in your local time.
Legal basis: Art. 6(1)(b) GDPR (providing the App in accordance with the terms of use).
4. Game data
When you play, we process and store in connection with your player ID:
- each test or training round: mode, day, language, the tasks shown, your answers (selected option, right or wrong), the time you needed per answer and the resulting score and IQ value
- if enabled: your self-assessment per answer (“How sure are you?”: guessed, unsure, sure) and its totals in your profile
- results and records in the daily challenge, Sudden Death, Blitz, category ladder, exam simulation, duels, ghost duels and the weekly league (group, rank, experience points)
- progress: experience points, achievements, streak and streak freezes, already seen puzzles
- duels you created (code, tasks)
- groups you founded or joined (group name, code, the display name you chose for the group, date of joining)
From your answers of the last 90 days the server calculates your cognitive profile (a value per category and a playful type). It is calculated anew whenever it is shown and is not a diagnosis.
Legal basis: Art. 6(1)(b) GDPR. Without this data, results, rankings and duels cannot work.
5. Optional profile details and comparison groups
In your profile you can optionally enter a nickname, your country, your year of birth, your gender and your education. All details are voluntary; the App works without them. We use country, age group, gender and education to compare your results with groups of other players (e.g. “better than 70 % of players in your age group”). For this, results are only added up in aggregated statistics per group, without assignment to individual players; shares are shown only once a group has at least five answers.
Legal basis: Art. 6(1)(a) GDPR (consent by entering the details). You can change or delete the details in your profile at any time; this does not affect statistics already aggregated anonymously.
6. What other players can see
- In rankings and duels, other players see your rank, score or streak, time, date and your country (flag), as well as whether you are a Club member.
- Your nickname is only shown to others if you are a Club member. Otherwise you appear anonymously.
- In the weekly league, players without Club membership appear under an animal name that changes every week.
- Ghost duel: a completed IQ test of yours from the last 90 days can be used as a “ghost” that another player with the same app language competes against. They see your answers per task (right or wrong, time), your age group and your country, and your nickname only if you are a Club member – otherwise an animal name.
- In a group, its members see the group name, your display name in this group, your weekly experience points, your streak and whether you played today. Players outside the group see nothing of it.
- Year of birth, gender and education are never shown to other players.
7. Shared links
When you share a result, the text contains a link to challenge.iqtest-app.de/share/… . If someone opens such a link and the App is installed, the App reports the link type (e.g. “share/daily”) to our server. If this happens within 24 hours after the first start, we store the link type as the origin of the player profile. This shows us which kinds of shared content bring new players. The origin is also passed to RevenueCat (see section 10). On the website, the link redirects to the App Store or Google Play depending on the device; the store receives the link type as campaign name.
If you share your cognitive profile, the server stores a snapshot of it (values per category, type, and your nickname only if you are a Club member) under a random link. Anyone with the link can view the snapshot in the App; we count how often it is opened. Your player ID is not part of the link.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding how the App is recommended).
8. Usage statistics for the Club offer
When the Club offer is shown, opened or closed, the App reports this event and where it was opened. On the server we count these events per day. To avoid double counting and to see which offer led to a purchase, we additionally store the event with your player ID for 40 days.
Legal basis: Art. 6(1)(f) GDPR (improving the App and the offer).
9. Reminders and push notifications
If you switch on the daily reminder, the App schedules a local notification on your device. It is created on the device itself; no data is sent for it.
In addition, the App can inform you about duels (your opponent has played, a rematch), the weekly league (promotion, relegation, rank) and your groups (new member, someone overtook you). The App only asks for permission at a suitable moment (e.g. after your own duel run); without your permission no push notifications are sent. If you allow them, the App sends a push token of your device to our server, together with platform, app language, app version and the time of the last registration. We use the token only to send these messages – at most five per day. For each delivery attempt we log the type of message, platform and success (without the token).
Push notifications are delivered on iPhone and iPad by the Apple Push Notification service (Apple Inc.) and on Android by Firebase Cloud Messaging (Google Ireland Ltd. / Google LLC, USA). They receive the token and the content of the message. For transfers to the USA, the EU-US Data Privacy Framework applies. You can switch the notifications off completely or per topic in the App under “Profile” → “Notifications” or in the device settings at any time.
Legal basis: Art. 6(1)(a) GDPR (your consent via the system permission). You can withdraw it at any time with effect for the future.
10. Purchases and Club subscription
In-app purchases are processed by Apple (App Store) or Google (Google Play). We do not receive your payment details. The privacy policies of Apple and Google apply.
To manage purchases we use RevenueCat (RevenueCat, Inc., USA). The App passes RevenueCat your player ID, the purchase receipts from Apple/Google, device and app information, where in the App a purchase was started and the origin from a shared link (section 7). RevenueCat informs our server about purchases, renewals and cancellations; we store these messages with your player ID to manage your Club status. More information: RevenueCat privacy policy.
Legal basis: Art. 6(1)(b) GDPR (fulfilling the purchase) and Art. 6(1)(c) GDPR (statutory retention obligations).
11. Error reports (Sentry)
If the App or our server encounters an error, an error report is sent to Sentry (Functional Software, Inc., USA). It contains the technical error description, the app version, platform, operating system and device type and, for server errors, the requested address. We do not send names, nicknames or profile details. We use the reports exclusively to find and fix errors. More information: Sentry privacy policy.
Legal basis: Art. 6(1)(f) GDPR (stable and secure operation of the App).
12. Server, hosting and log files
The App communicates with our server api.challenge.iqtest-app.de. Server and database run at IONOS SE (Elgendorfer Str. 57, 56410 Montabaur) in a data centre in Germany; IONOS processes the data on our behalf (Art. 28 GDPR). When the App accesses the server, the web server records technical access data (IP address, time, requested address, status code, app/browser identifier) in log files. These log files are rotated automatically and deleted after a short time. In addition, we use the IP address briefly in memory to limit excessive requests (rate limiting); it is not stored in our database.
Legal basis: Art. 6(1)(f) GDPR (security and operation of the server).
13. Data on your device
The App stores your player ID, settings, statistics and game states locally on your device so that it also works offline and starts quickly. This data is deleted when you uninstall the App. The App also uses the device functions for sharing (system share dialog), store ratings (rating dialog of Apple/Google) and checking for updates (query of the store version).
14. Reporting a puzzle
If you report a faulty puzzle, we store the puzzle, the reason and – if you enter it – your comment (up to 500 characters) together with your player ID in order to check the puzzle. Please do not enter any personal information in the comment.
Legal basis: Art. 6(1)(f) GDPR (quality of the puzzles).
15. Contact
If you contact us by email or via the support page, we process your message and your contact details to answer your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
16. Storage period
- Player profile, game data and rankings: as long as the player profile exists. As there is no account, please contact us if you want us to delete your data (section 18).
- Opened shared links: 180 days; the origin stored in the player profile remains as long as the profile exists.
- Snapshots of a shared cognitive profile: 90 days, at most the 20 newest per player.
- Push token: deleted when the App has not reported for 120 days (switching off notifications stops sending immediately); delivery log: 90 days.
- Usage statistics for the Club offer with player ID: 40 days; daily counters without player ID are kept permanently.
- Purchase messages from RevenueCat: 400 days, longer only where statutory retention obligations require it.
- Started game rounds without any answer: deleted after 24 hours.
- Aggregated statistics per comparison group do not contain any personal data and are kept permanently.
17. Recipients and transfers to third countries
We only pass data to the service providers named in this policy (IONOS, RevenueCat, Sentry, Apple, Google). RevenueCat and Sentry are based in the USA. Transfers take place on the basis of the EU Standard Contractual Clauses or, where the provider is certified, the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). We do not sell data.
18. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent at any time with effect for the future (Art. 7(3)).
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this processing at any time for reasons arising from your particular situation.
To exercise your rights, write to support@innomobile.de. Please include your player ID (App → Profile) so that we can find your data; we will then delete the player profile and all game data assigned to it. Subscriptions must be cancelled separately in the App Store or Google Play.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Werderstraße 74a, 19055 Schwerin, Germany.
19. Changes
We adapt this privacy policy when the App or the legal situation changes. The current version is always available on this page.
