Privacy Policy
Last updated: March 2026
ADHDTests.com is operated by MoodHelp Ltd, a company registered in England and Wales. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
1. Data We Collect
We collect only the data necessary to provide our assessment services:
- Email address — provided when you start an assessment, used to save your progress and deliver results.
- Assessment responses — your answers to screening and assessment questions.
- Timing data — how long you spend on each question and section. This helps us ensure result validity and improve our instruments.
- Anonymous analytics — aggregated, non-identifying usage data (e.g. pages visited, completion rates). We do not use third-party tracking pixels or advertising trackers.
2. How We Use Your Data
- Scoring and results — your responses are scored using our psychometric algorithms to generate your personalised results and Brain Profile.
- Brain Profile computation — if you take multiple assessments, your results are combined into a multi-dimensional Brain Profile. This happens automatically for your benefit.
- Service emails — we send you your results, assessment progress reminders, and occasional educational content about topics related to your assessments. You can unsubscribe at any time.
- Research (opt-in only) — if you explicitly opt in during an assessment, your anonymised responses may be included in aggregated research analyses. You can withdraw this consent at any time.
3. Data Storage and Security
Your data is stored on Supabase (EU region) with PostgreSQL as the underlying database. All data is:
- Encrypted at rest using AES-256 encryption
- Encrypted in transit using TLS 1.2+
- Protected by row-level security (RLS) policies ensuring you can only access your own data
- Backed up regularly with point-in-time recovery
4. Data Sharing
We never sell your data. We do not share your personal information with third parties for marketing purposes. The only circumstances in which data may be shared:
- Anonymised research — only with your explicit opt-in consent. No personally identifiable information is ever included in research outputs.
- Payment processing — Stripe processes your payment details. We never see or store your full card number.
- Legal obligation — if required by law or court order.
5. Cookies
We use essential cookies only. These are required for Supabase authentication (keeping you logged in) and basic session management. We do not use:
- Tracking cookies
- Third-party advertising cookies
- Social media tracking pixels
- Cross-site tracking of any kind
Because we only use strictly necessary cookies, no cookie consent banner is required under UK GDPR.
6. Your Rights (UK GDPR)
Under the UK General Data Protection Regulation, you have the following rights:
- Right of access — request a copy of all data we hold about you.
- Right to deletion — request that we delete your account and all associated data. We will comply within 30 days.
- Right to portability — receive your data in a structured, machine-readable format.
- Right to rectification — request correction of any inaccurate personal data.
- Right to restrict processing — request that we limit how we use your data.
- Right to withdraw consent — for any processing based on consent (e.g. research opt-in, marketing emails), you can withdraw at any time.
To exercise any of these rights, contact us at hello@adhdtests.com. We will respond within 30 days.
7. Data Retention
- Assessment data — kept until you request deletion. Your Brain Profile and assessment results remain available to you indefinitely.
- Anonymous analytics — retained for up to 2 years, then automatically purged.
- Account data — retained while your account is active. If you request deletion, all data is removed within 30 days.
- Research data — anonymised research data (where you have opted in) is retained indefinitely as it contains no personally identifiable information.
8. Children and Young People
ADHDTests.com does not knowingly collect personal data from anyone under the age of 16 without parental consent. If you are under 16, please ask a parent or guardian to register on your behalf. If we become aware that we have collected data from a child under 16 without appropriate consent, we will delete it promptly.
9. Third-Party Services
We use the following third-party services:
- Supabase (EU region) — database and authentication
- Vercel — website hosting
- Stripe — payment processing
Each of these services has its own privacy policy and GDPR compliance measures. We have selected providers that meet our standards for data protection.
10. Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be communicated via email to registered users. The “last updated” date at the top of this page will always reflect the most recent version.
11. Contact and Complaints
For questions about this privacy policy or to exercise your data rights, contact us at: hello@adhdtests.com
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
See also our Terms of Service and Clinical Disclaimer.