Privacy Policy

Effective date: October 3, 2026

1. About This Service

IQ Test Brambin (hereinafter "the Service"), consisting of the Brambin mobile app (hereinafter "the App") and its website, is provided by KUBOYA Inc. (hereinafter "the Company"). The Service offers IQ tests and cognitive puzzles that provide an estimated IQ score for self-reflection and entertainment purposes. The Service is not a medical device, psychological assessment tool, or clinical test. Estimated IQ scores and all other results are provided for self-reflection and entertainment purposes only and do not constitute a diagnosis or a formal evaluation of intelligence.

Nature of the Service

Brambin is an entertainment app. The IQ test is a game-like puzzle challenge made to be fun. Your score is a rough estimate from our own simple scoring model — it is not an accurate IQ measurement and has no medical or scientific basis. Please don’t use it for diagnosis or for decisions about school, work or anything similar.

This policy applies to users worldwide and covers both the App and the website. Certain provisions below apply to specific jurisdictions.

2. Information We Collect

We collect the following information when you use the App or the website.

Information Collected Automatically

• Anonymous device ID: a random identifier generated on your device when you first use the App. On the website, a random ID is generated and stored in your browser's localStorage (we do not use cookies for this ID).
• Test results and scores: estimated IQ scores and test results, including item-level data (whether each answer was correct and the response time), which we also use to improve our scoring model.
• Anonymous usage events: for example, screen and page views, test started/completed, and button taps. On the website, this also includes the host name of the referring site and campaign parameters (such as UTM parameters).
• Device information: device model, OS version, and error logs.

Purchase Information

• Purchase records (product purchased, purchase date, platform, and the store's transaction identifier, which is used to verify the purchase)
• Credit card and payment details are handled by Apple/Google and are never received by us.

Website Analytics

In addition to the first-party anonymous usage events described above, the website uses Google Analytics 4 (GA4) to analyze how the website is used. Google Analytics may use its own cookies or similar technologies.

Information NOT Collected

• We do not collect your name, email address, phone number, or other information that directly identifies you (except that if you contact us by email, we use your email address only to respond to you).
• No account registration is required to use the App or the website.

3. Purpose of Use

• Providing, operating, and improving the App and the website
• Calculating and displaying test results, and improving the accuracy of our scoring model
• Verifying purchases and restoring purchased content
• User support and inquiry response (including data deletion requests)
• Prevention of unauthorized use and security assurance
• Usage analysis and service improvement
• Compliance with applicable laws

4. Legal Basis for Processing

We process information on the following legal bases:

• Contract performance: Processing necessary to provide the Service's core functionality (test results, scores, purchase verification)
• Legitimate interests: Anonymous usage analysis, service and scoring model improvement, security and fraud prevention
• Legal obligation: Compliance with applicable laws

For users in the European Economic Area (EEA) and UK, this is pursuant to Articles 6(1)(b), 6(1)(f), and 6(1)(c) of the GDPR respectively.

5. Third-Party Disclosure

We do not sell, trade, or share collected information with third parties except as required by law or as described in Section 6.

We do not sell personal information as defined under the California Consumer Privacy Act (CCPA). We do not share personal information for cross-context behavioral advertising.

6. External Services

The App and website use the following external services:

• Apple App Store / Google Play Store (payment processing)
• Supabase (cloud database that stores the information described in Section 2 — data is stored in the Tokyo region, Japan). Supabase processes data on our behalf.
• Google Analytics 4 (usage analysis on the website only)

We do not use any advertising SDKs or ad networks in the App or on the website, and we do not use the collected information for targeted advertising.

Each external service has its own privacy policy governing the handling of data.

7. Data Management

We take appropriate technical and organizational measures to manage collected information and prevent unauthorized access, loss, or alteration. Data is transmitted using encryption (TLS/SSL).

8. Retention and Deletion

We retain information only for the period necessary to fulfill the stated purposes. Specifically: test results and scores are retained for the duration of your use of the Service; usage analytics are retained for up to 24 months; purchase records are retained as long as necessary to verify purchases and comply with legal obligations.

You may request deletion of your data at any time by emailing us at info@kuboya-biz.jp and including the device ID shown on the App's Settings screen. On the website, you can reset the anonymous ID at any time by clearing the site data in your browser; if you know your browser ID, you may include it in your deletion request. We will process deletion requests within 30 days.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

• Right to access your data
• Right to correct inaccurate data
• Right to request deletion of your data
• Right to data portability
• Right to restrict or object to processing

To exercise any of these rights, please contact us at the email address below.

For users in the EEA/UK: You also have the right to lodge a complaint with your local data protection supervisory authority (e.g., the ICO in the UK, or the relevant DPA in your EU member state).

For California residents: You have the right to know what personal information is collected, the right to delete, and the right to non-discrimination for exercising your rights.

10. Children

The Service is not intended for children under 13 years of age (or under 16 in the EEA/UK, under 14 in South Korea and China, or under 18 in India, as applicable). We do not knowingly collect information from children under these ages. If we learn that we have collected information from a child below the applicable age threshold, we will delete it promptly. If you are a minor above the applicable age threshold but under 18, please use the Service with parental or guardian consent.

11. International Data Transfers

The information described in Section 2 is stored on Supabase servers in the Tokyo region, Japan. If you use the Service from outside Japan, your data is transferred to and stored in Japan. For users in the EEA/UK, such transfers rely on the European Commission's adequacy decision for Japan (2019); the UK likewise recognizes Japan as providing an adequate level of data protection. Data collected by Google Analytics on the website may be processed by Google in other countries, including the United States, subject to Google's own safeguards (such as Standard Contractual Clauses). For users in other jurisdictions, by using the Service you acknowledge that your data may be transferred internationally as described above.

12. Data Breach Notification

In the event of a data breach that poses a risk to your rights, we will notify the relevant supervisory authorities and affected users in accordance with applicable laws.

13. Changes to This Policy

This policy may be updated as needed. Material changes will be communicated through the App or our website. Continued use after changes constitutes acceptance.

14. Contact

KUBOYA Inc.
3-1 Nihonbashi Tomizawacho, Chuo-ku, Tokyo 103-0006, Japan
Email: info@kuboya-biz.jp