Neogogy Human Advantage Assessment
What the Neogogy Human Advantage Assessment collects, why it is collected, how long it is kept, and how to see it, correct it or have it deleted.
In effect from 5 September 2026. Last reviewed 5 September 2026.
The controller of the personal data described here is the International Center for Applied Neogogy (ICAN), ican.ph. Questions, requests and complaints go to info@neogogy.ai.
The assessment is served from assessment.neogogy.ai. This notice covers that site and the reports it produces. It does not cover the other sites linked from it, which publish their own notices.
Three kinds of information. What you type, what your browser sends to any website, and how the sitting went. Nothing here probes your device, draws to a canvas, or builds a covert identifier.
| What | Why it is held |
|---|---|
| First and last name | To address the report and the email that carries it |
| Email address | To send the report, and to recognise you if you take it again so movement can be shown |
| Mobile number, optional | Only if you give it, and only so we can reach you about what you asked for |
| How you heard about it, optional | To understand which routes bring people here |
| Marketing consent, a ticked box | Recorded as given or not given. It is not required to receive your report |
| Your answers, and the two unscored calibration questions | They are the assessment. Without them there is no result |
| Which assessment you took, and your reported use level | They decide which questions apply and how the result is read |
| IP address, and the country, region and city it resolves to | Coarse location for research and for finding your record if you ask us to delete it. City level at best, never a street or a person |
| Internet provider and network organisation | To tell an institution from a home connection when reading aggregate patterns |
| Browser, operating system, device class, screen size, language | To know what the report had to fit into, and to exclude automated visitors from the statistics |
| How long the sitting took, and how it was paced | To read a result honestly. A three-minute completion is not the same evidence as a fifteen-minute one |
Producing and sending your report runs on the contract between us: you asked for the assessment, and this is what delivers it. Under the Data Privacy Act the equivalent basis is the fulfilment of a request you made.
Improving the instrument and reporting aggregate patterns runs on legitimate interest, and only ever on aggregates in which no individual can be identified.
Marketing email runs on consent alone. The box is not pre-ticked, your report arrives whether or not you tick it, and every message carries an unsubscribe link that works.
Your result and the answers behind it are deleted twenty four months after your last completed assessment. Taking it again restarts that period, because the comparison between sittings is the reason the earlier one is kept at all.
De-identified aggregate data may be kept indefinitely for research and benchmarking. It carries no name, no email, no address and no identifier that points back to a person, and it is only ever reported in groups large enough that no individual can be recognised within them.
Marketing consent and the contact details attached to it are kept until you withdraw it, and the withdrawal itself is kept as proof that you asked.
Your report has its own web address, and the address contains a long random token that cannot be guessed. Anyone holding the link can read that report, so treat it the way you would treat the report itself.
The link works for as long as the record does, twenty four months from your last completed assessment, and then both go together.
Two controls sit on the report. "Email me my link" sends it only to the address already on the record, never to one typed at the time. "Get a new link" issues a fresh address and stops the old one working, which is what to use if you have shared a link and want it closed.
Report pages ask search engines not to index them, and they do not pass the address on to any site you click through to. The token is stripped before anything is written to our analytics or our server logs, so the link is not recoverable from either.
Nobody buys it, and nobody is sold it. Three kinds of processor touch it, each under contract and each only to do the thing named:
The Student edition is written for high school as well as college and university, so some of the people answering it are minors. This section says what that means, and it is deliberately blunt about what the product does and does not do about it.
A respondent under eighteen is asked for the same things as everybody else: a name, an email address, an optional mobile number, and the answers themselves. The record also holds the address the request came from and the city it maps to, like every other record. The assessment does not ask anybody how old they are, and nothing about the flow changes for a younger respondent.
If you are under eighteen, ask a parent, a guardian or a teacher before you give us your details. If you are a parent, a guardian or a school and you would rather we did not hold a young person's record, write to us and we will delete it. We will act on that request from a parent or a guardian without asking the young person to confirm it, and we will not ask why.
A school or a teacher who sets this for a class is asking their students to hand personal data to us, and should say so to them and to their parents first. We will answer questions from a school about what is held on its students at info@neogogy.ai.
You can ask for a copy of everything held about you, ask for a correction, ask for deletion, withdraw consent, object to the processing, or ask for your data in a portable file. Write to info@neogogy.ai from the address you used, and we will answer within thirty days.
If you are in the Philippines and are not satisfied with the answer, you may complain to the National Privacy Commission. If you are in the European Economic Area or the United Kingdom, you may complain to your national supervisory authority.
Deleting your record removes the result too. We cannot show you movement over time from data we no longer hold, and we will say so before acting rather than after.
The assessment does not set advertising cookies and does not carry third party trackers. Nothing here is sold, and nothing is shared with an advertising network.
Three things are kept in your own browser. Your progress through the questions is held in session storage, so that a refresh does not cost you your answers; it clears when you close the tab, and it is the only one of the three that never leaves your device.
The other two are kept in local storage and do travel with your submission, which the earlier version of this notice did not say. One is a random identifier for the sitting, which is what lets a start, a completion and a submission be counted as one person rather than three. The other is how you arrived: the site that linked you and any campaign tags on the address you came in on. Neither carries your name, and both stay until you clear your browser data.
If you would rather not leave them, clearing site data for this address removes all three, and the assessment still works.
If any of this changes, this notice changes first, and a consent banner appears before anything non-essential is set.
The assessment is a reflective instrument, not a clinical or psychological test, and the result is not a diagnosis. It is not used to make an automated decision that has a legal or similarly significant effect on anybody.
If your organisation asked you to take it, your individual result is still yours. Organisations receive aggregate readings only, and never below the group sizes that would let an individual be identified.