Legal information
Privacy policy
This policy explains what data is processed when you use the website peerscore.app and the mobile app PeerScore, for what purpose and for how long.
Data controller: SOLUCIONEC
Tax ID (NIF): 45774319H
Address: C/ Calzada Lateral del norte, 22. 35014 Las Palmas de Gran Canaria (Las Palmas – Spain)
Contact: info@solucionec.com
1. The short version
You can take the test without an account. As you answer, your answers and your score are sent to our server together with a random session identifier that the app receives the first time it opens. If you challenge a friend, their email address is only used to send them the challenge and is not stored: we keep a keyed hash to link you up if they sign up with it. If you decide to create an account, we also keep your email address, stored encrypted, and your password, stored only as a secure hash that nobody can read back. Nothing is published and nothing is sold.
2. Your test and your result
Each time you answer a question, the app sends over HTTPS: the question number, which of its variants you were shown, the option you chose, whether it was correct, how long you took, and your score and correct answers so far. When you finish, it also sends the total time and the version of the question bank. So if you leave a test halfway, the question you reached is recorded. The session identifier, the platform (iOS or Android), the language and the currency code of the device, and the date and time travel with each request. The app keeps your best result and any test left halfway on the device itself. If you take the test on the web version, the same data is sent, and the session identifier and the number of tests you have taken are kept in your browser's local storage; they are not used for anything else.
This data is used to calculate your estimated IQ and your position compared with the other players, which is the service you ask for when you take the test (art. 6.1.b GDPR), and to improve the test by measuring, in aggregate, which questions are too easy or too hard, which is our legitimate interest (art. 6.1.f GDPR).
The estimated IQ is calculated automatically, but it has no legal effects and does not significantly affect you in any similar way: it is a game result that only you see, unless you decide to share it or challenge a friend (section 4).
Retention: results are kept while the service is running, because the comparison between players depends on them. If you have an account and delete it, your results are deleted with it.
3. Your account, if you create one
To create an account we ask only for your name, an email address and a password. We store: the name, which is what the friends you share the ranking with will see; the email address, encrypted, plus a keyed hash that lets us find it when you sign in; the password, only as a hash; the session identifier; the language; the date of sign-up; the IP address and device data of the first connection; a counter of failed sign-in attempts, to block anyone trying to guess your password; and, if you ask for it, a one-time token to reset your password.
The legal basis is the performance of the service you request when you create the account (art. 6.1.b GDPR). We use your email address only for service messages, such as the welcome email and the password reset; we do not send you advertising by email.
Retention: until you delete the account. Section 10 explains how.
4. Challenges between friends
You need an account to challenge a friend or accept a challenge. If you challenge a friend, you enter their email address. Only enter the address of someone you know. Their address is used to send them, with your account name, one message with the challenge link. Their address is not stored: only a keyed hash, which cannot be read back, to add them to your ranking if they create their account or sign in with that address; it is deleted as soon as they join or after 30 days. We keep the date of the challenge and, once your friend accepts it, the link between your two identifiers.
While the link is active, each of you sees the other's name and best result (estimated IQ and points) in the friends ranking. Either of you can stop sharing at any time from the app, and from then on neither of you sees the other's result. To prevent abuse, you can only challenge someone after finishing a test, and at most ten times a day.
The legal basis is the performance of the service you request when you challenge someone or accept a challenge (art. 6.1.b GDPR) and, for the email to your friend, our legitimate interest in delivering the invitation you ask us to send, limited to a single message (art. 6.1.f GDPR). Retention: the link is kept, even if you stop sharing, until either of you deletes their account.
5. What data is processed and why
| Context | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| App | Answers (with the variant of each question), whether correct, score, time per question, the question you reached, session identifier, platform, language, currency, IP address, date and time | Calculate your estimated IQ and position (performance of the service, art. 6.1.b) and improve the questions in aggregate (legitimate interest, art. 6.1.f) | While the service is running, or until you delete your account |
| App | Name, email address (encrypted), password (hash), session, language, sign-up date, first-connection IP and device data | Manage the optional account and recover your result on another device. Performance of the service (art. 6.1.b) | Until you delete the account |
| App | The link with the friends whose challenge you accept or who accept yours, and the date. Your friend's email address, only to send them the challenge, and a keyed hash of that address | Challenges and friends ranking. Performance of the service (art. 6.1.b) and, for sending the challenge, legitimate interest (art. 6.1.f) | Your friend's email address is not kept; its keyed hash, until they join or for 30 days. The rest, until either of you deletes their account |
| App | Device advertising identifier, approximate IP location and technical device data (Google AdMob) | Show advertising — personalised only if you accept — and measure it. Consent given in Google's User Messaging Platform (UMP) and, on iOS, in the system tracking permission | Google's retention periods for each purpose |
| App | Aggregated usage events and installation identifier (Firebase Analytics) | Understand how the app is used in order to improve it. Consent: measurement is off until you accept | Up to 14 months |
| App | Push notification token and time zone (Firebase Cloud Messaging) | Remind you of a test left halfway and tell you when your position or your estimate changes, at a sensible time in your time zone. Consent, given when you allow system notifications | While the app is installed and the permission is not withdrawn |
| Web | Analytics and advertising cookies (Google Analytics 4 and Google Tag Manager) | Measure use of the site and the effectiveness of campaigns. Consent (art. 6.1.a), given in the cookie panel | Per cookie; your choice is remembered for 180 days |
| Web | Access records: IP address, date, page requested and browser | Provide the service, security and abuse prevention. Legitimate interest (art. 6.1.f) | 12 months from the record; after that, they are deleted periodically |
| Contact | Your email address and the content of your message | Answer your query or handle the exercise of your rights. Consent and legitimate interest | As long as needed to answer it, plus the applicable limitation periods |
6. Who else is involved
The following providers take part in delivering the service, acting as processors or as independent controllers depending on the case:
- Google Ireland Limited — Google AdMob, Firebase (measurement and notifications), Google Analytics 4 and Google Tag Manager.
- Apple Distribution International and Google Ireland Limited as app stores, with their own download statistics, always aggregated.
- The hosting provider of the website and of the database where results and accounts are stored, and the email provider that delivers account messages and challenges, both on behalf of SOLUCIONEC.
Your data is not sold, shared or handed to third parties for purposes other than those described here.
7. International transfers
Some of these providers may process data outside the European Economic Area, mainly in the United States. In those cases the transfer relies on the EU-US Data Privacy Framework or, failing that, on the standard contractual clauses approved by the European Commission, together with the additional measures each provider documents.
8. Your rights
You can exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand, by writing to info@solucionec.com. If you have an account, write from the email address you registered. If you took the test without an account, your results are linked only to a random identifier; tell us and we will explain what we need to find them. We will never ask you for an ID document to answer a request about an anonymous identifier.
If you believe the processing does not comply with the rules, you can complain to the Spanish Data Protection Agency (www.aepd.es).
9. How to withdraw your consent
- On the web: click here to clear your choice and bring the cookie panel back.
- In the app, on Android: in Information › Privacy options. That option appears where the law requires it.
- In the app, on iOS: in Settings › Privacy & Security › Tracking, where you can withdraw the tracking permission.
- Notifications: from your device's notification settings.
10. How to delete your account
This applies to the account of the app PeerScore (com.solucionec.peerscore), published by SOLUCIONEC.
- Open PeerScore and tap My account.
- Tap Delete my account.
- Confirm. The deletion is immediate.
If you can no longer open the app or sign in, write to info@solucionec.com from the email address you registered and we will delete the account within 30 days.
What is deleted: your email address, your password, your name, your session, your push notification token, the results of your tests and your challenges with friends (you disappear from their rankings). Nothing linked to you is kept.
11. Minors
The service is aimed at people aged 18 or over, is not directed at children and does not knowingly collect their data. If we find that we have processed a child's data, we will delete it.
12. Security
The website is always served over HTTPS and so are the app's requests. Passwords are stored only as a hash and email addresses are stored encrypted. Reasonable technical and organisational measures are applied to protect the information. No system is infallible: should a breach affecting your rights occur, it would be notified in accordance with art. 33 GDPR.
13. Changes to this policy
This policy may be updated to reflect legal, technical or service changes. The version in force is always published on this page, with its last revision date.
Last updated: 11/10/2026