Legal
Privacy Policy
This covers aiiqlabs.dev and the free learning platform at learn.aiiqlabs.dev, which we call The IQ Fleet. It is written against what the software actually stores — every item listed below is a real field, and nothing we collect has been left out.
Version 2026-08-25 · last updated 25 August 2026
The short version
- The courses are free. There is no payment, so we hold no payment details.
- We do not sell your data, and we do not share it for advertising.
- The courses are behind a sign-in. We ask for an account so your progress has somewhere to live.
- You can have your account and everything attached to it deleted by writing to us.
Who we are
AIIQLabs operates this site and The IQ Fleet, and is the controller of the personal data described here. For anything in this policy, including a deletion request, write to [email protected].
Before you sign in
The public pages — this one, the terms, and the front page of the learning site — can be read without an account, and doing so we store nothing about you beyond what any web server records to serve a page and keep itself running. We use no advertising or cross-site tracking cookies, and no third-party analytics script runs on these pages.
The courses themselves are behind a sign-in. That is not a paywall — they are free, and stay free — but reading one does mean having an account, because progress has to belong to somebody.
When you sign in
Signing in uses Google, GitHub or Facebook. We never see your password — the provider confirms who you are and passes us a small profile. We keep the following.
| What we store | Why |
|---|---|
| Email address | It identifies your account, receives your sign-in confirmation code, and is where an invitation you accept is matched. |
| Name and profile picture | Shown in the header and to people in your fleet. Both come from the provider you signed in with; we do not ask you to upload anything. |
| Which provider you used, and its account identifier | So the same person signing in again lands in the same account rather than a second one. |
| Whether the provider confirmed your address, and when you confirmed it | An address a provider will not vouch for has to be confirmed before it is trusted, or someone could claim an address that is not theirs. |
| Time zone and language | Time zone decides whether the site greets you with "good morning". Language is stored for a future translation and is not used yet. |
| Your invite code, and who invited you | The fleet is a referral chain. This single link is what makes it one. |
We also keep the raw profile the provider sent, as received, so that a later change to what we read from it does not require asking you to sign in again. We ask each provider for the least it will give: your identity, your address, and your picture. We do not request access to your repositories, your contacts, your friends, or anything you have posted, and we cannot act on your behalf on any of those services.
While you are learning
| What we store | Why |
|---|---|
| Courses you enrol in, and when | To show your courses on your own pages and let you carry on where you stopped. |
| Lessons you open and finish, with times and a view count | Progress, the resume position, and the completion count. |
| Learning events — enrolled, lesson completed, course completed | To understand which courses people finish and where they stop, so the material can be improved. |
A daily streak is counted but is not shown anywhere and is not used for anything. It is recorded so the feature can exist later without starting everyone from zero.
Technical records
| What we store | Why |
|---|---|
| IP address and browser user-agent, recorded against your consent and against learning events | Consent records need to show where and when agreement was given, to be worth anything. Event records use them to tell people apart and to catch abuse. |
| The page that referred you and any campaign tag in the link | To know which courses and links bring people in. |
Your fleet, and what other people see
When you invite someone and they join, the two accounts are linked and you both appear on each other’s fleet. People in your fleet can see your name, your picture, and whether you have finished a lesson in the last seven days.
They cannot see which courses you are taking, how far through you are, your email address, or anything else. Accepting an invitation is not agreeing to have your progress reported to whoever sent it.
If you send an invitation to an email address, we store that address so the invitation can be matched when it is accepted, and so the same person is not invited twice.
Cookies
We set one cookie, and only after you sign in: it holds your session so that moving between pages does not sign you out. It is signed, restricted to this site, and not readable by JavaScript. It is not used to follow you anywhere else, and there is no third-party cookie on the learning platform.
Cloudflare, which sits in front of the site, may set a cookie of its own to tell genuine visitors from automated abuse. Some pages also use Cloudflare Turnstile in place of a CAPTCHA.
Who else can see it
We do not sell personal data, and we do not disclose it for advertising. It is handled by the small number of services needed to run the site:
- Hostinger — the server the site and its database run on.
- Cloudflare — sits in front of the site, serving traffic and filtering abuse.
- Google, GitHub and Facebook — only when you choose one to sign in with. What they do with that is governed by their own policies.
Our servers are in Europe. If you are elsewhere, using the site means your data is stored there. We may also disclose data where the law requires it.
How long we keep it
- Your account and progress — until you ask us to delete it.
- Sign-in confirmation codes — minutes. They expire, and are stored hashed, never as the code itself.
- Records of what you agreed to — kept after deletion where we need them to show that consent was given, which is the only reason such a record is worth keeping.
- Learning events — kept while they are useful for improving the courses. We have not yet set a fixed period, and will state one here when we do.
Deleting your account
Write to [email protected] from the address on the account, or from the account you signed in with, and ask for it to be deleted. We will do it within 30 days and confirm when it is done.
Deletion removes your account, your linked sign-in identities, your enrolments and all of your progress. People who joined through your invitation keep their own accounts and their own progress; they simply stop being linked to yours.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to our using it. Write to [email protected] and we will answer within 30 days. There is no charge.
Depending on where you live you may also have the right to complain to a data protection authority. We would rather you told us first, so we can put it right.
Children
The platform is not intended for children under 13, and we do not knowingly create accounts for them. If you believe a child has an account here, write to us and we will remove it.
Changes
When this policy changes we update the date at the top. If a change affects what we collect or what we do with it, we will ask you to accept the new terms the next time you sign in, and keep a record of which version you agreed to.