Privacy Policy

Introduction

This policy describes how Implicitify AI collects, uses, and protects information you provide while using the platform, including the MotiveScore iPhone app (an Implicitify AI product by Biolexic Labs), which links to this policy.

Information We Collect

Account details, assessment responses, contact requests you submit, aggregate public-page usage counts, and, during certain tests, the behavioral and biometric signals described below. We minimize collection of personally identifiable information.

MotiveScore iPhone App

MotiveScore scores Picture Story Exercise narratives on your device. Story text you write in the iPhone app does not need to leave your device for analysis, and the app does not require a network connection to score. Your credit balance, audience setting, and reports are stored locally on your device. In-app purchases are processed by Apple; we receive purchase records and credit entitlements through RevenueCat, linked to an anonymous app user ID that RevenueCat generates. We do not receive your payment card details. The current version of MotiveScore (1.0.3) sends us only purchase records, the anonymous RevenueCat app user ID, and basic store details such as locale and currency, and it does not record behavioral or biometric signals. If a MotiveScore test adds such collection, it will be disclosed on that test's screen and in this policy before it starts.

Behavioral & Biometric Signals

During assessments, Implicitify products and MotiveScore may collect behavioral and biometric signals tied to the test being taken. Today these are: response timing on timed cognitive tasks (for example the Stroop tasks, Lexical Decision, Trail Making, digit span, memory, word-recognition, and mental-rotation tasks), recorded per trial together with the type of input used (key, touch, mouse, or pen) and, for Trail Making, segment timing and drawn-path length; and voice audio on Verbal Fluency when you choose the spoken option. Response timing is part of how timed tests are scored. Spoken Verbal Fluency audio is sent to our speech-to-text provider for transcription; we keep the transcript, not the recording, and Verbal Fluency can also be taken by typing. With your separate permission, asked before each test, we also use these signals for analytics and product improvement: developing assessment indexes (physiological correlates of psychological constructs), using de-identified data once the indexes are derived; improving the design of the user interface and experience; checking data quality and validity, for example flagging rushed or random responding or device problems; possibly adding biometric-derived indicators to your own report as supplementary information; building norms and checking scoring accuracy across users, using de-identified, aggregated data; training and improving AI and machine-learning models, using de-identified data only and the minimum information needed, never names, email addresses, contact details, or account IDs, with pseudonymous or random keys used only where linking records is strictly necessary; and scientific publication, using de-identified, aggregated data only. Your core scores are computed the same way whether or not you give permission. We ask for this permission only on individual accounts and for testing through a clinician's assessment link, not for testing without an account or through a study or employer assessment. Giving that permission is optional and is not required to take a test or get your score, and you can withdraw it at any time in your account settings or, for testing through a clinician, from your assessment link. These signals are not used for medical diagnosis. Implicitify does not sell, lease, trade, or otherwise profit from biometric data. This policy lists what each kind of test collects, and any new kind of collection is added to this policy before it starts. Biometric collection is not offered to residents of Illinois, Texas, or Washington, and it is not offered if we cannot determine which state you are in. To decide this, we use the state you give us and, where available, the approximate region of your internet connection; if either points to one of these states, or neither is available, biometric collection is not offered. In those cases you are not asked for this permission, spoken Verbal Fluency is not available (the typed option is), and response timing is collected and used only to score and report your test.

Analytics

On public marketing and catalog pages only (home, pricing, the assessment catalog and the public description pages of non-clinical assessments listed in it, about, FAQ, apps) we use Google Analytics, with Google Analytics cookies, to measure visits to those pages, which assessments are opened from the catalog (only the assessment's public name and its short catalog ID), and whether our ads lead to purchases. Google signals and ad personalization are off, and browsers that send a Global Privacy Control signal are not tracked by Google Analytics: the tag does not load, and no checkout events are sent for a checkout started with Global Privacy Control on. It is never loaded on test-taking, result, report, patient-link, clinician, sign-in, checkout or account pages, or on pages for clinical screening instruments, and web addresses are sent without their query strings (except ad-campaign tags). When you start a checkout and when payment is confirmed, we send Google only the price, a generic product type, a random order number and the Google Analytics cookie ID — never your name, email, test names, answers or results. Separately, we count public-page traffic as aggregate totals, as described under Cookies & Aggregate Traffic below. For MotiveScore, Apple may provide us aggregate app analytics and crash reports from users who choose to share them with developers. We use analytics to operate and improve MotiveScore and other Implicitify products, not to diagnose you, and we do not use it to track you across other companies' apps or websites.

How We Use Your Information

To deliver scored results and narrative interpretations, to operate the service, and to improve assessment quality.

How We Share Your Information

We do not sell your data. Limited service providers operate under contract: payment processors and hosting; Apple and RevenueCat for MotiveScore in-app purchases; Google, for Google Analytics on the public pages and checkout events described under Analytics; OpenAI, for speech-to-text transcription of spoken Verbal Fluency responses; and xAI, for the optional Individual Portrait narrative, which receives de-identified scores only, never your name or free-text responses.

How We Protect Your Information

Encryption in transit, restricted access, and PHI-minimization by design.

Data Retention & Deletion

We retain account and assessment records, including scored results and reports, for 7 years on our secure server. For testing you do on your own, with an individual account or without an account, raw behavioral and biometric signals are handled differently. Before any of them are deleted, the scores computed from them are saved, so your results and reports remain available without the raw signals. If you have given permission for analytics and product improvement, raw signals are deleted once the indexes derived from them have been computed and de-identified. If you have not given permission, withdraw it, or permission is not offered to you, raw signals are used only to score and report your test and are deleted within 30 days after you complete or stop the test or withdraw permission, whichever is later. In every case, they are deleted no later than 3 years after your last interaction with Implicitify (for testing without an account, after that test session). Testing done through a clinician, for example through a clinician's assessment link, is different: its test data, scores, and reports are kept as part of the clinical record in the clinician's custody and are not deleted under this biometric deletion schedule, and withdrawing permission for that testing stops future capture and analytics use only. Spoken Verbal Fluency audio is never stored. You may request deletion of your account and associated self-serve assessment records at any time; requests about testing done through a clinician are handled with that clinician under their record-keeping obligations.

Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your data.

Cookies & Aggregate Traffic

We use a session cookie for authentication. On the public pages listed under Analytics, Google Analytics also sets its own cookies, unless your browser sends Global Privacy Control, in which case Google Analytics does not load and does not track you. Separately, our own public-page traffic reporting is performed server-side and sets no cookie of its own: a request path, same-origin referrer, and user-agent are inspected in memory only to classify an approved public route, infer an aggregate transition, and filter recognizable automation. For this reporting we store only UTC daily page and transition totals—never raw events, sessions, account identifiers, IP addresses, user-agents, referrers, query strings, or arbitrary URLs. These aggregate totals are retained indefinitely and cannot report unique visitors, sessions, bounce rates, attribution, or cross-device activity. The admin-only traffic visualization loads a first-party display script and does not collect browser events.

Children's Privacy (COPPA)

The service is not directed to children under 13 and we do not knowingly collect their data.

Changes to This Policy

We will update the effective date above when this policy changes.

Contact Us

Questions about privacy can be directed to Dr. Daniel Winarick at dwinarick@implicitify.com or +1 917 822 8476.