Privacy Policy: ADHD Screener

Aperio Profiles is a trading name of Liberation Academy Ltd, a company registered in England and Wales (company number 16087057), registered office 20 Wenlock Road, London N1 7GU, and registered with the Information Commissioner's Office (ICO), registration reference ZB819301. We are the data controller for the personal data described in this policy. Contact: enquiries@liberationacademy.co.uk.

When you complete the ADHD screener, we collect:

Your email address and, optionally, your name, used to send you your results.

The sex you were assigned at birth and your age: the screener is sex-differentiated, so this determines which version of the questionnaire you receive.

Any existing diagnoses you choose to disclose (optional), used to contextualise your results, never required to proceed.

Your responses to the 120 (female version) or 111 (male version) screening items, and the score, domain breakdown, and pattern indicators computed from them.

When you give, decline or withdraw consent, we record your email address, your IP address and your browser's user-agent string alongside the exact wording you were shown, your decision and the time. We keep this only as evidence of the decision you made, which UK GDPR Article 7(1) requires us to be able to demonstrate. If you decline, it also lets us show that the access code was not used. It is not used for tracking, profiling, or advertising.

Your screening responses, and any existing diagnoses you disclose, are special category (health) data under Article 9 UK GDPR. We process this only on the basis of your explicit consent under Article 9(2)(a), given via the consent screen before the screener begins. If you decline consent, none of your answers are collected.

Our lawful basis under Article 6 is contract performance (Article 6(1)(b)) where you buy an access code yourself, and your consent (Article 6(1)(a)) where an organisation provides the code. Taking the screener is voluntary and confidential, and you can withdraw your consent at any time.

Your overall score and level (high / moderate / mild / low pattern) are computed on our server directly from your submitted responses, using a fixed, published scoring method, not left to a value your browser sends us. This is a screening instrument, not a diagnosis, and does not make any automated decision about you with legal or similarly significant effect.

Your results are sent only to the email address you provide. We do not share your individual results with employers, third parties, or advertisers.

If you completed the screener using an access code issued by your employer, your employer does not see your individual result, and does not see that you personally took part. They see only anonymous, aggregate figures across everyone who took part (for example, how many people completed a screener and how many scored in the high range), never your score, level, or any individual answer, and never linked to your name, unless you explicitly choose to share something with them elsewhere in our products.

Your data is stored in Supabase, hosted in the UK (AWS London), with row-level access controls. We use the following processors, each under a data processing agreement:

Supabase (database), Vercel (hosting), Resend (email delivery), and Stripe (payment processing, if you purchased directly). We do not store your payment card details.

Google Analytics (Google) and Vercel Analytics (Vercel): only if you accept analytics cookies, they receive information about how you use this site, such as the pages you visit and your device type. They never receive your answers or results. See our Cookie Policy.

Vercel, Resend, Stripe and Google process some data on US infrastructure. This is covered by their data processing agreements with us, incorporating the UK Addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement as the transfer safeguard.

The Live Help button on our sites opens the Aperio Assistant, an AI assistant. When you use it, we process what you type, the page you were on (with any code or link removed from the address), a random conversation ID, and a scrambled (hashed) version of your IP address that we use only to prevent abuse. If you send something to our team through its form, we also process the name, email address and organisation you choose to give. We use this to answer your questions and deal with what you send us, and we look at the questions people ask, grouped by topic, to check and improve the answers. Our lawful basis is our legitimate interest in supporting the people who use Aperio and responding to enquiries (Article 6(1)(f)), or our contract with you where your question is about something you have bought (Article 6(1)(b)).

Your messages are sent to Anthropic, the provider of the AI model, to generate the replies. Anthropic acts as our processor under its data processing addendum, does not use them to train its models, and deletes them within 30 days. Anthropic processes data in the United States; the transfer is safeguarded by the UK Addendum to the EU Standard Contractual Clauses or the UK International Data Transfer Agreement.

We keep chat conversations, and the record of each question and the reply it got, for 30 days after the last message and then delete them automatically. After that we keep only a count of the topics asked about and a short general rewording of each question, written without personal details and not linked to you. Anything you send through the form is kept until we have dealt with it and for up to 24 months after that; the copy of the conversation attached to it is deleted 30 days after we close it. Please do not type health information, diagnoses or results into the chat: we do not need them. The conversation is also kept in your own browser for up to 12 hours so that it survives a page change, and Clear chat removes it.

A usage log holding the hashed IP address, the conversation ID and timing data is kept for 90 days for abuse prevention and service monitoring, and then deleted automatically.

We keep each type of data only as long as we need it. Your raw answers are deleted or anonymised about 90 days after your report is produced, and your results are kept while your Aperio account is active. If you do not have an Aperio account, your results are deleted 24 months after your last activity.

Access codes and session tokens are kept for up to 12 months. Consent records are kept for up to 6 years, because the law requires us to be able to demonstrate the consent you gave. When a retention period ends we delete or anonymise the data; the shorter-lived deletions run automatically each day and are logged.

Under UK GDPR you have the right to access, correct, erase, or export your data, to restrict or object to our processing, and to withdraw consent at any time (withdrawal does not affect processing already carried out). To exercise these rights, use your account or email enquiries@liberationacademy.co.uk.

You also have the right to complain to the ICO (ico.org.uk) if you believe we have not handled your data lawfully.

This screener is for adults. You must confirm you are 18 or older before you can begin.

We use cookies for essential site function and, with your consent, analytics. See our Cookie Policy for details and how to change your preferences.

Data controller: Liberation Academy Ltd, trading as Aperio Profiles (company number 16087057). Registered office: 20 Wenlock Road, London N1 7GU. Email: enquiries@liberationacademy.co.uk