Privacy Policy

1. Who processes data

IQ Home, s. r. o., is the controller for its customer relationships, accounts, billing, support and service security. Contact info@iqhome.app for privacy questions and rights requests.

IQ Home acts as processor for client, staff and family-contact data supplied by an organisation. That organisation determines purposes, legal bases and permissions. Direct requests about care records to the organisation; IQ Home assists it.

2. Data, purposes and legal bases

Account data includes names, work email, organisation, roles and account information. We use it to provide access and services, based on contract where the individual is a party, or legitimate interests in providing and managing the service for organisational representatives.

Billing and payment data supports contract performance and accounting and tax obligations. Demo and support contact details enable us to handle requests and establish or manage the customer relationship.

Necessary technical and security records, IP addresses, login data and operation records protect the service, prevent misuse and provide accountability, based on our legitimate interest in secure operation.

Required registration fields are needed to create an account. We receive data from you, your inviting organisation and service use.

3. Organisational client data

Depending on features used, organisations may store client identity and contact information, visit addresses, family contacts, staff details, care records and documents including health information.

Organisations must establish a basis under Article 6 GDPR and an applicable Article 9 condition for health data, inform individuals and control access. IQ Home does not diagnose or deliver healthcare.

4. AI document processing

When an authorised user requests AI pre-filling, the document is sent via API to Anthropic to propose form fields. The user must review and correct results. This does not constitute automated decision-making with legal or similarly significant effects.

Saving the original document to the client folder is a separate choice. Without it, IQ Home does not save the extraction document to its document storage. Pre-filled fields may still be saved to the client record when the user confirms it.

Not saving a document in IQ Home does not mean immediate deletion by Anthropic. Standard API retention is stated as up to 30 days, with exceptions such as legal and security requirements.

5. Providers and processing locations

We use the following third-party services (processors) to operate the application and process data, all with processing in the EU:

• Railway (Railway Corporation): application hosting (web and API), region EU West (Amsterdam).
• Supabase (Supabase Inc.): database (PostgreSQL), user authentication and storage of uploaded documents, region EU Central (Frankfurt).
• Anthropic (Anthropic PBC): processing (AI data extraction) of documents uploaded during client onboarding, region EU.
• Resend (Resend Inc.): sending transactional emails (invitations, confirmations, account summaries), region EU.
• Mapbox (Mapbox Inc.): map data and travel-time calculation for visit planning, region EU.
• IPinfo (IPinfo LLC): approximate country detection for website visitors based on IP address, region EU.

Authorised staff, accountants, legal advisers and authorities may receive necessary data where appropriate or legally required.

6. Retention

Account data is processed during service provision. Support handles closure through info@iqhome.app after verifying authority. Organisations have 30 days after service ends to request an export; operational data is deleted within the next 30 days unless law or another valid instruction applies.

Accounting records follow statutory retention periods. Evidence for legal claims is kept only as necessary for applicable limitation periods and disputes.

Backup copies are not intended for routine use.

7. Cookies and marketing

Necessary technical cookies and browser storage support login, sessions, language and country preferences. Blocking necessary storage may affect access or functionality.

We currently do not collect data for newsletters or advertising campaigns. If optional analytics or marketing technologies are introduced, we will update this notice and provide the appropriate user choice beforehand.

8. Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Contact info@iqhome.app. Proportionate identity verification may be necessary. We normally respond within one month and explain any lawful extension. For organisational records we cooperate with the relevant controller.

9. Document version

This notice is effective from 24 October 2026. Material changes will be communicated appropriately.