How personal data is processed on the IQ Home website and in the application.
IQ Home, s. r. o.A. Dubčeka 3558/78, 908 51 Holíč, Slovenská republika
Company ID: 54 791 227 · Tax ID: 2121796567 · VAT ID: SK2121796567
Commercial Register of the District Court Trnava, section Sro, entry 52233/T.
info@iqhome.app
1. Who processes data
IQ Home, s. r. o., is the controller for concluding and managing its customer relationships, accounts, billing, support and service security. Contact info@iqhome.app for privacy questions and rights requests.
For client, staff and family-contact data that an organisation enters, the organisation is as a rule the controller and IQ Home its processor. Their mutual rights and obligations are governed by Part 8 of the Terms and Conditions – the data processing terms (DPA). The organisation determines purposes, legal bases and permissions.
Direct requests about care and client records to the organisation. If IQ Home receives such a request, it forwards it to the organisation without delay and provides the necessary assistance.
2. Data, purposes and legal bases
Account data includes names, work email, organisation, roles and account information. We use it to provide access and services, based on contract where the individual is a party, or legitimate interests in providing and managing the service for organisational representatives.
When an agreement is concluded electronically or in writing, we process data of the person acting for the customer and of the sales representative involved. We record the method of conclusion, the identity of the acting person and the version of the accepted documents, and for electronic conclusion also the record of confirmation. The basis is contract performance and our legitimate interest in proving the conclusion and content of the agreement.
Billing and payment data supports contract performance and accounting and tax obligations. Demo and support contact details enable us to handle requests and establish or manage the customer relationship.
Necessary technical and security records, IP addresses, login data and operation records protect the service, prevent misuse and provide accountability, based on our legitimate interest in secure operation.
Required registration fields are needed to create an account. We receive data from you, your inviting organisation and service use.
3. Organisational client data
Depending on the features used, organisations may store client identification, contact and address data, data on visits, services and procedures, photographs, documents and communication, staff details and family and emergency contacts. When the relevant modules are used, this also includes data on health status, diagnoses and allergies.
Organisations must establish a basis under Article 6 GDPR and an applicable Article 9 condition for health data, inform individuals and control access. IQ Home does not diagnose or deliver healthcare.
4. AI document processing
AI extraction runs only on the instruction of an authorised user. The document is sent via API to Anthropic, which proposes form fields. The output is a proposal for manual review; the user checks and corrects it. This is not automated decision-making with legal or similarly significant effects. Manual data entry remains available.
Saving the original document to the client folder is a separate choice. Without it, IQ Home does not save the extraction document to its document storage. Pre-filled fields may still be saved to the client record when the user confirms it.
Not saving a document in IQ Home does not mean immediate deletion by Anthropic. Standard API retention is stated as up to 30 days, with exceptions such as legal and security requirements.
5. Providers and processing locations
We use the following sub-processors to operate the application. For each, we state its activity and the region where it is set by our service configuration:
- Railway (Railway Corporation): application hosting (web and API), configured region EU West (Amsterdam).
- Supabase (Supabase Inc.): database (PostgreSQL), user authentication and document storage, configured region EU Central (Frankfurt).
- Anthropic (Anthropic PBC): AI data extraction from documents on an authorised user’s instruction.
- Resend (Resend Inc.): sending transactional emails (invitations, confirmations, account summaries).
- Mapbox (Mapbox Inc.): map data, address search and travel-time calculation for visit planning.
- IPinfo (IPinfo LLC): approximate country detection for website visitors based on IP address.
- Sentry (Functional Software, Inc.): application error reporting; IP addresses, cookies, headers and request content are not sent.
We notify customers of intended changes to sub-processors in advance, as a rule at least 30 days, under Part 8.5 of the Terms and Conditions.
Authorised staff, sales representatives acting under a power of attorney, accountants, legal advisers and authorities may receive necessary data where appropriate or legally required.
6. Storage in the EU and transfers
Under Part 8.6 of the Terms and Conditions, it is a contractual requirement that customer and health data is stored in data centres in the European Union and processed in the EU to the extent of the service provided. Transfer, remote access or other processing of this data outside the EU is not permitted. Changing this rule would require an express written amendment and compliance with all GDPR requirements.
We treat a supplier’s regional restriction as fulfilled only after verifiable technical and contractual confirmation.
7. Retention
Account data is processed during service provision. Support handles closure through info@iqhome.app after verifying authority. Organisations have 30 days after service ends to request an export; operational data is deleted within the next 30 days unless law or another valid instruction applies.
Accounting records follow statutory retention periods. Evidence for legal claims is kept only as necessary for applicable limitation periods and disputes.
Backups are removed according to a documented retention cycle with restricted access. While retained, they are not used for regular operation.
9. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.
Contact info@iqhome.app. Proportionate identity verification may be necessary. We normally respond within one month and explain any lawful extension. For organisational records we cooperate with the relevant controller.
10. Document version
The version and effective date of this notice are stated at the top of this document. Material changes will be communicated appropriately. We keep previous versions and provide them on request at info@iqhome.app.