Privacy Policy
WordMend Clarity, published by IQ Source.
Effective date: 27 August 2026
This policy explains exactly what WordMend Clarity records, where it goes and how to get rid of it. It describes the app as it is actually built, not a general template.
In short
- The app works without an account. If you never sign in, everything you record stays on your device.
- Signing in with your email address turns on cloud sync so your practice history follows you to another device.
- There is no advertising in WordMend, no advertising identifier, no analytics SDK and no crash reporting SDK. Nobody buys your data, because we do not sell it or share it for marketing.
- Your symptom logs are encrypted on your device before they leave it, the severity ratings as well as the free-text note, with a key we never receive. We cannot read them. Your cognitive practice scores are a different matter: those are stored on our servers in readable form and protected by access controls. We would rather be precise about that than claim more than we do.
Who we are
IQ Source publishes WordMend Clarity and is the controller of the personal data described here.
Contact: support@iqsource.ai
What we collect
Account information
If you choose to sign in, we collect your email address and nothing else. Sign-in is passwordless: we email you a one-time code and you type it back into the app. We do not ask for a password, a name, a phone number or a date of birth, and we do not use social or third-party sign-in.
Practice data
The app records what you do in the exercises so it can adapt difficulty, schedule reviews and show your progress. This data is always stored on your device. It is uploaded to our servers only while you are signed in.
- Exercise sessions: exercise type, difficulty level, start and end time, number of words seen, number of correct answers, average response time, a computed cognitive score, and an optional symptom severity rating attached to the session.
- Individual attempts: which word was shown, the answer you typed, whether it was correct, how long you took, and whether you used a hint.
- Memory Bridge attempts: the word you recalled, whether the recall succeeded and how long it took.
- Word mastery progress: per-word correct and incorrect counts, review scheduling values and a mastery level.
- Difficulty profiles and the history of automatic difficulty changes, including the accuracy and score that triggered each change.
- Goals you create, their description, target and current value, dates, status, priority and any notes you add, plus the progress updates and milestones generated against them.
- Professional progress records: word, session date, cognitive score, response time, practice context and an optional symptom severity rating.
- App preferences: difficulty level, word count per session, last exercise type and date, and whether you finished onboarding.
- Usage counters: minutes practiced and sessions completed per day, used to show you your own activity and to apply the free tier’s daily allowance of Word-Finding Emergency lookups.
Health-related information
Some of what the app records is health-related, and we treat it as sensitive:
- Symptom logs: the date, a brain fog severity rating, and yes or no flags for fatigue, hot flashes, sleep problems and anxiety.
- The free-text notes you can attach to a symptom log.
- Symptom severity ratings attached to individual practice sessions.
- Cognitive performance scores calculated from your answers and response times.
You are never required to record symptoms. If you skip symptom tracking, none of this exists.
Purchase information
If you subscribe, we store your subscription tier, trial start date, subscription start and end dates, and the store product identifier. Payment is processed by Apple. We never see your card number, billing address or any other payment credential.
Technical information
The app loads practice images from our own storage on Supabase. These requests, and any sync requests, reach our backend with your IP address and are kept in ordinary server logs for security and troubleshooting. Image requests happen even when you are not signed in, but they are not linked to an identity in that case.
What we do not collect
We do not collect location, contacts, calendar entries, health records from Apple Health, an advertising identifier, or any behavioral profile for advertising. There is no analytics SDK and no crash reporting SDK in the app.
The Spoken Naming exercise is the one place the app uses the microphone, and only while you are answering a question in it. Your speech is turned into text on the device itself, that text is compared with the word you were practicing, and the audio is never recorded, never stored and never sent to us or to anyone else. The exercise is offered only where the device can do that recognition without sending your voice away, and every question in it can be answered by typing instead.
The Name Recall exercise is the one place the app uses your camera or your photo library, and only at the moment you tap to add a person to it. The photo you take or choose, the name you give them and any note you add are encrypted on your device with the same key that seals your symptom logs, which we never receive, and they are stored only on that device. They are never uploaded to us, never included in a sync even while you are signed in, and never part of a backup we hold. Only the anonymous result of a practice session, how many names you saw, how many you recalled and how long you took, is treated like any other exercise session. Removing a person deletes their photo and their name from the device immediately, and deleting your account deletes all of them.
Why we use it, and our legal basis
- To provide the app and adapt exercises to you: necessary to perform our contract with you.
- To sync your data between your devices: necessary to perform our contract, and only after you sign in and ask for it.
- To store and display your symptom logs, symptom ratings and cognitive scores: your explicit consent, which you give by choosing to record them. You can withdraw it at any time by deleting those entries or your account.
- To keep the service secure and prevent abuse: our legitimate interest in a working, non-abused service.
- To manage subscriptions and meet accounting obligations: performance of a contract and compliance with a legal obligation.
We do not use your data to train machine learning models, and we do not profile you for advertising or any automated decision that has a legal or similarly significant effect on you.
How your data is protected
- Everything travels over encrypted connections.
- On our servers, your rows are tied to your account and row-level access rules stop one account reading another account’s data. The database is encrypted at rest by our hosting provider.
- Your whole symptom log is encrypted on your device before it is stored or uploaded. The brain fog, fatigue, hot flashes, sleep and anxiety ratings are sealed into a single encrypted value, and the free-text note is encrypted alongside them. If the app cannot encrypt an entry it refuses to upload it at all, so a symptom log never reaches us in readable form.
- The key that seals them is generated and kept in your device’s keychain. It is never uploaded, never included in a backup we hold, and we never have a copy, so nobody at IQ Source and nobody at our hosting provider can read your symptom entries.
- Because that key stays on the device, a symptom entry written on one device cannot be read on a second device, and it becomes unreadable if you reinstall the app or reset the device. We are working on a way for you to carry the key to a new device; until that exists, treat your symptom history as readable only on the device that wrote it.
- Symptom logs recorded before we introduced this encryption were uploaded in readable form, and those older entries are still stored that way.
- Your cognitive performance scores are not covered by that encryption. The score and the symptom severity attached to an exercise session, the score attached to a professional progress record, and the average and trigger scores held in your difficulty profile and its adjustment history are stored on our servers in readable form. They are protected by access control and by encryption in transit and at rest, not end to end.
- Data held on your device is protected by your device passcode and the operating system file protection. If you do not lock your device, someone with physical access to it can open the app.
No system is perfect, and we do not promise that ours is.
Who your data is shared with
We do not sell your personal data, we do not share it for advertising or cross-context behavioral advertising, and we do not disclose it to employers, insurers or health providers. We share it only with the service providers we need to run the app:
- Supabase Inc., which hosts our database, authentication and image storage, and therefore processes everything described above that leaves your device.
- The email delivery provider used by our authentication service, which receives your email address in order to deliver your one-time sign-in code.
- RevenueCat Inc., which validates subscription receipts and tells the app which subscription you own. It receives the purchase receipt and an app-specific user identifier.
- Apple, which processes the payment and tells us whether a subscription is active. Apple’s handling of that transaction is governed by its own privacy policy.
We will disclose data if we are legally required to, and will tell you unless we are legally prevented from doing so.
Where it is stored, and for how long
Your data is stored on infrastructure operated by Supabase Inc., a United States company. We can tell you the current hosting region on request at support@iqsource.ai. If you are in the European Economic Area or the United Kingdom, transfers to the United States rely on the standard contractual clauses in our agreement with that provider.
- Practice, health and account data is kept while your account exists.
- When you ask us to delete your account, we delete the account and all rows belonging to it within 30 days.
- Data held only on your device disappears when you uninstall the app.
- Subscription records are kept for as long as we need them to handle billing disputes and to satisfy accounting rules.
- We do not currently delete inactive accounts automatically. If you want your data gone, ask us.
Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, export it in a portable form, restrict or object to how we use it, or withdraw a consent you gave earlier. Withdrawing consent does not undo what we did before you withdrew it. If you are in the EEA or the UK you can also complain to your data protection authority. If you are in California, you can ask what we collected and ask us to delete it; we do not sell personal information, so there is nothing to opt out of.
To exercise any of these, write to support@iqsource.ai from the address on your account. We answer within 30 days.
How to delete your data
Be aware of what the app can and cannot do today:
- Open Settings and choose Delete account. We ask you to confirm, then remove your account and every row attached to it from our servers immediately, and erase the local database, your preferences, your subscription record and the encryption key from the device.
- If the deletion cannot reach our servers, nothing is removed anywhere and the app tells you so. It is never left half done.
- You can also email support@iqsource.ai from the address you signed in with and ask for your WordMend account to be deleted. We do it within 30 days and confirm by email.
- Deleting the app on its own erases what is on the device, but not what is on our servers. Use Delete account, or email us, for that.
Children
WordMend Clarity is intended for adults and you must be 18 or older to use it. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to support@iqsource.ai and we will delete it.
Changes to this policy
If we change this policy we will update the effective date at the top and publish the new version at the same address. If the change materially affects how we handle your data, we will tell you in the app or by email before it takes effect.
Contact
IQ Source support@iqsource.ai