Privacy Policy

This privacy notice from YouQ Enterprises Pty Ltd, operating under the name YouQ AI (referred to as 'YouQ', 'our', 'we', or 'us'), details how and why we may gather, keep, utilize, and/or disseminate ('process') your data when you use our services ('Services'). This may occur when you:

• Browse our website at youq.ai, or any other of our websites that link to this privacy notice
• Interact with us in other associated ways, such as through any sales, marketing, or events

Queries or Worries? Reading this privacy notice will aid in your understanding of your privacy rights and options. If you disagree with our policies and procedures, we kindly ask that you refrain from using our Services. If you still have queries or concerns, please reach out to us at support@youq.ai.

HIGHLIGHTS OF MAJOR POINTS

What personal data do we process? When you visit, use, or navigate our Services, we might process personal data depending on your interaction with YouQ and the Services, the choices you make, and the products and features you utilize.

Do we process any sensitive personal data? We do not process sensitive personal data.

Do we receive data from third parties? We do obtain data from third parties, including social logins such as Google, Apple, and Facebook.

How do we process your data? We process your data to provide, enhance, and administer our Services, communicate with you, for security and fraud prevention, and to comply with laws. We might also process your data for other purposes with your consent. We process your data only when we have a valid legal reason to do so.

In what situations and with which types of parties do we share personal data? We may disseminate data in particular situations and with certain categories of third parties.

How do we ensure the safety of your data? We have organizational and technical procedures and processes in place to safeguard your personal data. However, no electronic transmission over the internet or information storage technology can be guaranteed to be completely secure, so we cannot pledge or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to overcome our security and improperly collect, access, steal, or modify your data.

What rights do you possess? Depending on your geographical location, the applicable privacy law may provide you with certain rights regarding your personal data.

How can you exercise your rights? The simplest way to exercise your rights is by visiting youq.ai/contact, or by contacting us via email on support@youq.ai. We will consider and act upon any request in line with applicable data protection laws.

1. WHAT DATA DO WE COLLECT?

Personal data you disclose to us

In Brief: We gather personal data that you provide to us.

We collect personal data that you voluntarily give to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you partake in activities on the Services, or otherwise when you reach out to us.

Personal Data Provided by You. The personal data we gather depends on the context of your interactions with us and the Services, the choices you make, and the products and features you utilize. The personal data we collect may consist of the following:

• names
• email addresses
• job titles
• usernames
• passwords
• contact preferences
• billing addresses
• debit/credit card numbers
• contact or authentication data

Sensitive Data. We do not process sensitive data. We recommend you do not enter any sensitive data in our system except where necessary.

Payment Data. We might gather data necessary to process your payment if you make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is kept by Stripe. You can find their privacy notice link(s) here: https://stripe.com/en-au/privacy.

Social Media Login Data. We might provide you with the option to register with us using your existing social media account details, like your Facebook, Twitter, or other social media account. If you choose to register in this way, we will gather the information detailed in the section titled 'HOW DO WE HANDLE YOUR SOCIAL LOGINS?' below.

All personal data that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal data.

Data entered into our AI Tutor. We collect the data you enter into our AI tutor in order to provide you with this service. This data may also be shared with a third party provider of the AI technology. We may not manage the servers where this data is stored, and this data may be stored for a period of time after use. We recommend that you do not share any sensitive information with the AI tutor.

Data automatically collected

In Brief: Certain information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically gather specific data when you visit, use, or navigate the Services. This data does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical data. This data is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also gather information through cookies and similar technologies. You can find out more about this in our Cookie Notice: youq.ai/cookie-policy.

The data we gather includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance data our servers automatically gather when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type and settings, and data about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event data (such as system activity, error reports (sometimes called 'crash dumps'), and hardware settings).
• Device Data. We gather device data such as data about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include data such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration data.
• Location Data. We gather location data such as data about your device's location, which can be either precise or imprecise. How much data we gather depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to gather this data either by refusing access to the data or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

2. HOW WE PROCESS YOUR INFORMATION

In Brief: We process your information to provide, enhance, and manage our Services, communicate with you, ensure security and fraud prevention, and comply with the law. With your consent, we may also process your information for other purposes.

We process your personal information for various reasons, depending on your interaction with our Services, including:

• Facilitating account creation and authentication and managing user accounts: We process your information to enable you to create and log in to your account and maintain its functionality.
• Delivering and facilitating the provision of services: We process your information to provide you with the requested services.
• Responding to user inquiries and offering support: We process your information to address your inquiries and resolve any potential issues related to the requested services.
• Sending administrative information: We process your information to send you details about our products and services, changes to our terms and policies, and similar information.
• Fulfilling and managing orders: We process your information to fulfill and manage orders, payments, returns, and exchanges made through the Services.
• Safeguarding individuals' vital interests: We may process your information when necessary to protect an individual's vital interests, such as preventing harm.

3. LEGAL BASES FOR PROCESSING YOUR INFORMATION

In Brief: We only process your personal information when we have a valid legal basis to do so under applicable law, such as with your consent, to fulfill our contractual obligations, to comply with legal obligations, to protect your rights, or for our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the legal bases we rely on to process your personal information. We may rely on the following legal bases:

• Consent: We may process your information if you have given us specific permission (consent) to use your personal information for a particular purpose. You can withdraw your consent at any time.
• Performance of a Contract: We may process your personal information when it is necessary to fulfill our contractual obligations to you, including providing our Services or prior to entering into a contract with you.
• Legal Obligations: We may process your information when necessary to comply with our legal obligations, such as cooperating with law enforcement or regulatory agencies, defending our legal rights, or disclosing information as evidence in litigation.
• Vital Interests: We may process your information when it is necessary to protect your vital interests or the vital interests of others, such as situations involving potential threats to safety.

If you are located in Canada, this section applies to you.

We may process your information if you have provided us with specific permission (express consent) to use your personal information for a particular purpose or when your permission can be inferred (implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including circumstances such as:

• When collection is clearly in the interests of an individual and consent cannot be obtained promptly
• For investigations, fraud detection, and prevention
• For business transactions, subject to certain conditions
• When information is contained in a witness statement and collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• When there are reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse
• When it is reasonable to expect that collecting and using information with consent would compromise its availability or accuracy, and collection is reasonable for purposes related to investigating a breach of an agreement or violation of Canadian or provincial laws
• When disclosure is required to comply with a subpoena, warrant, court order, or court rules related to record production
• When the information was produced by an individual in the course of their employment, business, or profession, and collection is consistent with the purposes for which the information was produced
• When the collection is solely for journalistic, artistic, or literary purposes
• When the information is publicly available and specified by regulations

4. WHEN AND WITH WHOM WE SHARE YOUR PERSONAL INFORMATION

In Brief: We may share information in specific situations described in this section and with certain categories of third parties.

Vendors, Consultants, and Other Third-Party Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services on our behalf and require access to such information to fulfill their work. In all instances we minimise the information provided to third parties, especially personal identifiable information.

We may also need to share your personal information in the following situations:

• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Affiliates: We may share your information with our affiliates, including our parent company, subsidiaries, joint venture partners, or companies under common control with us, provided they comply with this privacy notice.
• Business Partners: We may share your information with our business partners to offer you specific products, services, or promotions.

5. USE OF COOKIES AND OTHER TRACKING TECHNOLOGIES

In Brief: We may use cookies and similar tracking technologies to collect and store your information.

We may use cookies and other tracking technologies, such as web beacons and pixels, to access or store information. Detailed information on how we use these technologies and how you can refuse certain cookies can be found in our Cookie Notice at youq.ai/cookie-policy.

6. HANDLING SOCIAL LOGINS

In Brief: If you choose to register or log in to our Services using a social media account, we may access certain information about you.

Our Services allow you to register and log in using your third-party social media account details, such as Facebook or Twitter. If you choose this option, we will receive specific profile information about you from your social media provider. The information typically includes your name, email address, friends list, profile picture, and other publicly available information on the social media platform.

We will only use the received information for the purposes described in this privacy notice or as otherwise stated on the Services. Please note that we do not control or assume responsibility for the use of your personal information by your third-party social media provider. We recommend reviewing their privacy notice to understand their collection, use, and sharing practices, as well as privacy preferences available on their platforms.

7. INTERNATIONAL DATA TRANSFERS

In Brief: We may transfer, store, and process your information in countries other than your own.

Our servers are located in Australia and the United States. If you access our Services from outside these countries, please be aware that your information may be transferred to, stored, and processed by us and our third-party providers in the United States and other countries.

If you reside in the European Economic Area (EEA), United Kingdom (UK), or other regions with similar data protection laws, please note that these countries may not have the same comprehensive data protection laws as your country. However, we will take appropriate measures to protect your personal information in accordance with this privacy notice and applicable laws.

European Commission's Standard Contractual Clauses:

We have implemented safeguards to protect your personal information, including using the European Commission's Standard Contractual Clauses for transfers of personal information between our group companies and between us and our third-party providers. These clauses ensure that all recipients protect personal information originating from the EEA or UK in accordance with European data protection laws and regulations. Upon request, we can provide our Standard Contractual Clauses. We have also implemented similar safeguards with our third-party service providers and partners, and further details can be provided upon request.

8. DATA RETENTION

In Brief: We retain your information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless otherwise required by law.

We will keep your personal information only for the period necessary to fulfill the purposes stated in this privacy notice, unless a longer retention period is required or permitted by law (such as for tax, accounting, or legal obligations). No purpose mentioned in this notice will require us to retain your personal information for a longer period than the duration of your account with us.

Once we no longer have a legitimate business need to process your personal information, we will either delete or anonymize it. In situations where deletion is not possible (e.g., if the information is stored in backup archives), we will securely store your personal information and isolate it from further processing until deletion becomes feasible.

9. INFORMATION SECURITY

In Brief: We employ organizational and technical security measures to protect your personal information.

We have implemented reasonable technical and organizational security measures to protect the security of your personal information. However, despite our efforts and safeguards, no transmission over the internet or storage technology can be guaranteed to be 100% secure. Therefore, we cannot guarantee that unauthorized third parties, such as hackers or cybercriminals, will be unable to bypass our security measures and collect, access, steal, or modify your information. While we strive to protect your personal information, the transmission of such information to and from our Services is at your own risk. It is advisable to access the Services within a secure environment.

10. COLLECTION OF INFORMATION FROM MINORS

In Brief: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to individuals under 18 years of age. By using our Services, you confirm that you are at least 18 years old or that you are the parent or legal guardian of a minor using the Services with your consent. If we become aware that we have collected personal information from individuals under 18 years of age, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you believe that we have collected personal information from a minor under the age of 18, please contact us at support@youq.ai.

11. YOUR PRIVACY RIGHTS

In Brief: In certain regions, such as the EEA, UK, and Canada, you have rights to access and control your personal information. You can review, change, or terminate your account at any time.

In some regions, you have specific rights under applicable data protection laws, such as:

• The right to access and obtain a copy of your personal information.
• The right to request correction or erasure of your personal information.
• The right to restrict the processing of your personal information.
• The right to data portability, if applicable.
• The right to object to the processing of your personal information in certain circumstances.

To exercise these rights, you can contact us via email at support@youq.ai. We will respond and take appropriate action in accordance with applicable data protection laws.

If you are located in the EEA, UK, or Switzerland, and you believe that we are processing your personal information unlawfully, you have the right to lodge a complaint with your local data protection authority.

If you wish to withdraw your consent to the processing of your personal information (where applicable), you can do so at any time by contacting us using the contact details provided. Please note that withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can also opt out of receiving marketing and promotional communications by following the unsubscribe link in our emails or contacting us using the provided contact details. However, you may still receive non-marketing messages necessary for the administration and use of your account.

For account information, you can review or make changes to your account details or request account termination by contacting us using the contact information provided. Upon termination, we will deactivate or delete your account and information, except as required for legal or legitimate business purposes.

Cookies and Similar Technologies: Most web browsers are set to accept cookies by default. You can usually choose to remove or reject cookies through your browser settings, although doing so may affect certain features or services on our Services. You can also opt out of interest-based advertising by advertisers on our Services. For more information, please refer to our Cookie Notice at youq.ai/cookie-policy.

If you have any questions or comments regarding your privacy rights, please email us at support@youq.ai.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and applications have a Do-Not-Track (DNT) feature or setting that allows you to express your preference not to have your online browsing activities monitored and collected. Currently, there is no universally accepted technology standard for recognizing and implementing DNT signals. Therefore, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is established in the future, and we are required to follow it, we will update this privacy notice to inform you about that practice.

13. PRIVACY RIGHTS OF CALIFORNIA RESIDENTS

In Brief: Yes, if you are a resident of California, you have specific rights regarding access to your personal information.

Under California Civil Code Section 1798.83, also known as the "Shine The Light" law, California residents have the right to request and obtain, once a year and free of charge, information about the categories of personal information, if any, that we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the preceding calendar year. If you are a California resident and would like to make such a request, please submit a written request to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with our Services, you have the right to request the removal of unwanted data that you publicly post on our Services. To request the removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California. We will ensure that the data is no longer publicly displayed on our Services, although please note that it may not be completely or comprehensively removed from all our systems (e.g., backups, etc.).

CCPA Privacy Notice

The California Code of Regulations defines a "resident" as:

(1) every individual who is in the State of California for other than a temporary or transitory purpose, and

(2) every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose.

All other individuals are defined as "non-residents."

If you are a resident of California, we must adhere to certain rights and obligations regarding your personal information.

Categories of Personal Information We Collect

In the past twelve (12) months, we have collected the following categories of personal information:

• Category A: Identifiers (e.g., name, address, email address, phone number, unique personal identifier, IP address, account name)
• Category B: Personal information categories listed in the California Customer Records statute (e.g., name, contact information, education, employment, financial information)
• Category C: Protected classification characteristics under California or federal law (e.g., gender, date of birth)
• Category D: Commercial information (e.g., transaction information, purchase history, payment information)
• Category F: Internet or other similar network activity (e.g., browsing history, search history, interactions with websites or advertisements)
• Category G: Geolocation data (e.g., device location)
• Category I: Professional or employment-related information (e.g., job title, work history)
• Category J: Education information (e.g., student records)
• Category K: Inferences drawn from other personal information (e.g., user preferences, characteristics)
• Category L: Sensitive Personal Information

We use and retain the collected personal information as needed to provide the Services and for the specific purposes mentioned in the privacy notice.

How We Use and Share Your Personal Information

For information about our data collection and sharing practices, please refer to our privacy notice and Cookie Notice: youq.ai/cookie-policy.

You can opt out of the sale or sharing of your personal information by disabling cookies in your browser settings.

For any questions or concerns regarding your privacy rights, you can contact us by email at support@youq.ai or by referring to the contact details at the bottom of this document.

Your Rights with Respect to Your Personal Data

You have the following rights under the CCPA:

• The right to request deletion of your personal information.
• The right to request information about the categories of personal information we collect, the purposes for which it is used, and the categories of third parties with whom we share it.
• The right to opt-out of the sale of your personal information.
• The right to non-discrimination for exercising your privacy rights.
• The right to limit the use and disclosure of your sensitive personal information.

To exercise these rights, you can contact us by email at support@youq.ai or by referring to the contact details at the bottom of this document. We may need to verify your identity before processing your request.

Other Privacy Rights

You may also have the right to:

• Object to the processing of your personal information.
• Request the correction or restriction of your personal data if it is inaccurate or no longer relevant.
• Designate an authorized agent to make requests on your behalf.

We will not discriminate against you for exercising your privacy rights.

14. VIRGINIA RESIDENTS' SPECIFIC PRIVACY RIGHTS

In Short: Yes, if you are a resident of Virginia, you have specific rights regarding access to and use of your personal information.

Under the Virginia Consumer Data Protection Act (CDPA), residents of Virginia have certain rights related to their personal data.

• Consumer: A natural person who is a resident of Virginia acting in an individual or household context, excluding those acting in a commercial or employment context.
• Personal data: Any information linked or reasonably linkable to an identified or identifiable natural person. It does not include de-identified data or publicly available information.
• Sale of personal data: The exchange of personal data for monetary consideration.

As a consumer, you have the following rights with respect to your personal data:

• The right to be informed whether or not we are processing your personal data.
• The right to access your personal data.
• The right to correct inaccuracies in your personal data.
• The right to request the deletion of your personal data.
• The right to obtain a copy of the personal data you previously shared with us.
• The right to opt out of the processing of your personal data for targeted advertising, sale of personal data, or profiling for decisions with legal or similarly significant effects ("profiling").

We have not sold any personal data to third parties for business or commercial purposes, and we will not sell personal data belonging to website visitors, users, and other consumers in the future.

To exercise your rights under the Virginia CDPA, you can contact us by email at support@youq.ai, by visiting youq.ai/contact, or by referring to the contact details at the bottom of this document. If you are using an authorized agent to exercise your rights, we may require proof of authorization.

Verification Process: We may request additional information to verify your identity and the validity of your request. If you submit a request through an authorized agent, we may need to collect additional information to verify your identity before processing the request.

We will respond to your request without undue delay and within forty-five (45) days of receipt. In certain cases, this response period may be extended once by an additional forty-five (45) days when reasonably necessary, and we will inform you of any such extension.

Right to Appeal: If we decline to take action on your request, we will inform you of our decision and the reasons behind it. If you wish to appeal our decision, you can email us at support@youq.ai. We will provide a written explanation of the reasons for our decision within sixty (60) days of receiving your appeal. If your appeal is denied, you may contact the Attorney General to submit a complaint.

15. UPDATES TO THIS NOTICE

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice periodically to ensure compliance with relevant laws and regulations. The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible. If there are material changes to this notice, we may notify you through prominent posting or direct notification. We encourage you to review this privacy notice frequently to stay informed about how we protect your information.

16. CONTACT US

If you have any questions or comments about this notice, you can email us at support@youq.ai.

17. REVIEW, UPDATE, OR DELETE YOUR DATA

Based on the applicable laws of your country, you may have the right to request access to, correction of, or deletion of the personal information we collect from you. To make such a request, please email support@youq.ai.