Privacy Policy

This policy explains what 11755447 Canada Inc. ("AIQ", "we", "us") collects when you use the AIQ app and aiqworlds.com, why, and what control you have over it. It is written to match what the product actually does — see Safety for the plain-language version of the same system.

If you are a parent setting up AIQ for a child, also read our Children's Privacy notice — it describes the additional, stricter rules that apply to child accounts and is part of this policy.

1. Who we are

AIQ is operated by 11755447 Canada Inc., a corporation incorporated under the Canada Business Corporations Act, of Canada (Business Number 760326074). For any privacy question, contact [email protected].

2. What we collect

Category	Examples	Why
Account details	Parent email, hashed password, child first name, age band, PIN (hashed)	Creating and securing your account and any child profiles under it
Learning activity	Topics requested, lessons completed, quiz answers, points and the record of how they were earned or spent, streaks, saved notes	Running the product — progress, gamification, spaced review scheduling
Memory facts	Interests, goals, a rolling measure of accuracy, buddy persona choice	Personalising course difficulty and tutor tone — visible and deletable by you at any time
Tutor conversations	Messages you send the AI buddy and its replies	Answering your question in context; safety review
Voice conversations (adults who turn them on)	What you say to Zylo, streamed from your device to our voice provider while you talk; the words of each turn as text; how many minutes you used	Turning your speech into text and Zylo's replies into speech, and keeping to the daily time limit. We keep the text like any tutor conversation; we never receive or keep a recording of your voice
Device & usage	App version, coarse error logs, hashed analytics identifiers	Keeping the service running and finding bugs
Payment	Subscription status and receipt validation via the App Store / Play Store	Entitlement — we do not receive or store your card details

3. What never leaves the product boundary

• Only a first name and a coarse age band are ever sent to the AI model that generates courses or powers the tutor — never an email address, surname, or any other identifier. This runs through a single point in our code specifically so it cannot leak by accident.
• Voice is the one exception, and it is adults only. If you are 18 or over and choose to talk to Zylo out loud, the sound of your voice goes from your device to ElevenLabs, our voice provider, for the length of the call. You confirm you are 18 or over and agree to this in the app before your first call, and you can withdraw that agreement at any time. ElevenLabs is configured to keep no recording or transcript after the call. Voice is never available on a child's account.
• Analytics never carry raw identifiers. Any identifier used for product analytics is a one-way cryptographic hash — it cannot be reversed back to your account.
• We do not sell personal information, and we do not use any child's data for ad targeting, at any age.

4. Who we share information with

We use a small number of infrastructure providers to run AIQ — cloud hosting, database, the AI model provider, and (for adults who use voice) the voice provider. Each acts as a processor under contract, may only use your information to provide their service to us, and is listed with its role at Sub-processors. We do not sell personal information, and we do not share it with advertisers.

5. Where information is stored

Data is stored on cloud infrastructure that may be located outside your country, including outside Australia, Canada and India. Where that happens, we rely on our processors' contractual and technical safeguards to protect it to a standard consistent with this policy.

6. How long we keep it

We keep account and learning data for as long as your account is active. If you delete your account (see Delete your account), we delete your personal information within 30 days, except where we are required to keep limited records for legal, security or fraud-prevention purposes.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. In the app, you can already:

• View everything AIQ has inferred about a learner and delete any fact, in Memory Graph;
• Export or delete an account entirely, from Settings or via this page;
• Turn off the optional weekly leaderboard, which deletes all associated leaderboard data immediately.

For anything not self-service, email [email protected]. We will respond within the time required by applicable law (30 days under the Australian Privacy Act and Canada's PIPEDA; as specified under India's DPDPA).

8. Australia — Australian Privacy Principles

We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. If you have a complaint we cannot resolve, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

9. Canada — PIPEDA

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy law. If you have a complaint we cannot resolve, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

10. India — Digital Personal Data Protection Act

AIQ is not yet available to users in India. Before that launch, we will designate a named Grievance Officer as required under the Digital Personal Data Protection Act, 2023, publish their contact details here, and process personal data as a Data Fiduciary under that Act. Consent for a child's account (any user under 18, under DPDPA) will be given and managed by a verified parent — see Children's Privacy.

11. Children's privacy

AIQ is built for use by children under a parent's account. Read the full Children's Privacy notice for the specific rules, consent mechanism, and protections that apply.

12. Security

Passwords and PINs are stored as salted hashes, not plain text. Traffic to the app is encrypted in transit. Quiz answers and other server-authoritative data are never sent to the client ahead of time — a security property built into the product itself, not just its infrastructure.

13. Changes to this policy

If we make a material change, we will update the effective date above and, for significant changes, notify account holders directly.

14. Contact

[email protected] · 11755447 Canada Inc., Canada