Privacy Policy

IQLakes is a personal productivity, learning and life-admin application operated by Unilakes Technologies ("IQLakes", "we", "us"). We are the data controller for the personal data described here.

For anything in this policy, including a request to access or delete your data, write to hello@iqlakes.com.

Account details. Your email address, your display name, and — if you sign in with a password — a cryptographic hash of that password. We never store your password itself.

What you put into the app. IQLakes is a place you keep your own records, so most of what we hold is content you chose to enter: tasks, notes, reminders, projects, habits, focus sessions, well-being check-ins, courses, assignments, exams, grades, flashcards and practice results.

Sensitive records, if you choose to store them. Some parts of IQLakes exist to hold information that matters a great deal if it leaks. You are never required to use them, and nothing else in the app depends on them:

• Documents. Identity and legal document records — a passport, visa, national ID, licence, tenancy or trade licence — including the document number you type in, its issue and expiry dates, and a link to wherever you store the file itself.
• People. A directory of family members, colleagues and contacts, including names, relationships, email addresses and phone numbers. These are records about other people; see “Information about other people” below.
• Money. Bills, amounts, currencies, due dates, the accounts and liabilities you track them against, and any notes you attach.

Images. Images you paste into a note, and cover images you set on a learning path. These are compressed in your browser and stored in our file storage.

Settings and technical data. Your timezone, display preferences, which modules you have enabled, and the session tokens that keep you signed in. Standard server logs record IP addresses and request metadata for security and debugging.

If you choose to sign in with Google, we receive only your name, email address and profile picture from your Google Account. We use them to create and identify your IQLakes account, and nothing else.

We do not request access to any other Google service. IQLakes does not read, write or store your Gmail, Google Drive, Google Calendar or Google Contacts data. We request no sensitive or restricted Google scopes.

IQLakes' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data to train generalised AI models, we do not sell it, and we do not transfer it except as needed to provide the service, comply with the law, or as part of a merger or acquisition with your notice.

You can revoke IQLakes' access at any time from your Google Account permissions page.

We use your data to run the service you asked for: to show you your own records, to work out what is due, to send the reminders you have turned on, and to keep your account secure. Under the UK and EU GDPR our lawful basis for this is performance of a contract with you.

We rely on legitimate interests for keeping the service secure, preventing abuse, and fixing faults — and on consent for anything optional you switch on yourself, such as email digests. You can withdraw that consent at any time in Settings.

We do not sell your data, and we do not advertise. IQLakes carries no analytics scripts, no advertising pixels and no third-party trackers of any kind.

Some features — generating a study plan, drafting flashcards or a revision sheet, importing a syllabus, suggesting what to do next — send the relevant part of your content to a third-party AI provider through the Lovable AI Gateway so it can produce a result.

Only what the feature needs is sent, and only when you trigger it. AI features never run in the background over your whole account.

Your content is not used to train anyone's models. It is sent to produce your result and nothing further.

AI output can be wrong. Treat it as a draft to check, not as advice — see our Terms of Service for the detail.

We share data only with the service providers that make IQLakes work. Each processes data on our instructions:

• Lovable Cloud (Supabase). Hosting, database, authentication and file storage. This is where your account and content live.
• Lovable AI Gateway. Routes AI requests to model providers, for the features described above.
• Emailit. Delivers transactional email — sign-in links, and the daily digest if you have enabled it.
• Pexels. If you search for a stock cover image, your search term is sent to Pexels. No account data is sent.

We may also disclose data where the law requires it, or to establish or defend a legal claim. If IQLakes is ever involved in a merger or acquisition, we will tell you before your data becomes subject to a different privacy policy.

Parts of IQLakes let you record details about people who are not IQLakes users — a family member's birthday, a colleague's phone number, whose passport a document belongs to.

Where you do that, you decide what to record and why, and you are responsible for having a proper basis to hold it. We process it only to show it back to you. We never contact the people in your directory, and we never use their details for any purpose of our own.

If someone asks you to remove their details, you can delete them yourself at any time. If they contact us directly, we will point them to you as the person who holds the record.

Every account is isolated at the database level. Access rules are enforced by the database itself on every single query, so one account's rows cannot be returned to another — not through the app, and not through the API. There is no admin screen anywhere that shows one person's content to another.

Data is encrypted in transit (TLS) and at rest. Any third-party access tokens you connect are encrypted before they are stored.

No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the relevant regulator as the law requires.

We keep your content for as long as your account is open. Delete an item and it is removed from the live database; residual copies may persist in encrypted backups for up to 30 days before they age out.

Close your account and we delete your content within 30 days, except where we must keep something longer to meet a legal obligation.

Depending on where you live, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate — most of which you can edit yourself in the app.
• Delete your data, or close your account entirely.
• Export your data in a portable format.
• Restrict or object to a particular use.

Email hello@iqlakes.com and we will respond within 30 days. You will never be charged for making a request, and we will not treat you differently for having made one.

If you are in the UK or EEA and think we have handled your data badly, you may complain to your local supervisory authority.

Our providers operate infrastructure in several regions, so your data may be processed outside the country you live in. Where data leaves the UK or EEA, transfers are covered by appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

IQLakes is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, email us and we will delete it.

If we change how we handle your data, we will update this page and move the date at the top. For anything material, we will tell you in the app or by email before it takes effect.