1. INTRODUCTION 

​

Unconventional Thinker Ltd. (“Company,” “we,” “us,” “our”), a corporation incorporated under the laws of Ontario, Canada, operating under the registered trade names YQ and Resilience by YQ, is committed to protecting your privacy. 

This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your personal information when you use the Resilience by YQ mobile application (“App”). It applies to all users of the App worldwide, regardless of location. 

We have designed this policy to comply with applicable privacy laws across all major jurisdictions in which the App is available, including: 
 

• Canada: Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25 (Act respecting the protection of personal information in the private sector) 

• European Union and United Kingdom: General Data Protection Regulation (GDPR) and UK GDPR 

• United States: California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) 

• Australia: Privacy Act 1988 and the Australian Privacy Principles (APPs) 

• Brazil: Lei Geral de Proteção de Dados (LGPD) 

• Other jurisdictions: We apply the highest applicable standard of privacy protection to all users globally 
   

Please read this Privacy Policy carefully. By using the App, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please do not use the App. 

 

2. INFORMATION WE COLLECT 

2.1 Information You Provide Directly 

We collect only the information necessary to provide the App’s features and services: 
 

• Account Information: Your email address and password. Passwords are stored exclusively as cryptographic hashes — your plaintext password is never stored or accessible by us. 

• Journal Content: Voice recordings you create within the App, along with the AI-generated transcriptions, summaries, emotional tone analyses, and insight titles derived from them. 

• Pre- and Post-Journal Emotion Selections: The emotion you select before and after each journaling session using the App’s fixed emotion selector. 

• Profile Information: Your display name and account preferences. 

• Notification Preferences: Your preferred reminder time and notification settings. 

• Communication: Any feedback, support requests, or correspondence you send to us. 

• Billing Information: Your subscription tier and Apple-issued transaction identifiers. Payment card details are handled entirely by Apple and never reach our servers. 
   

2.2 Information Collected Automatically 

When you use the App, we automatically collect limited technical information necessary for the App to function securely and reliably: 
 

• Device Information: Device model, operating system version, and hardware identifiers necessary for app functionality and push notifications. 

• Usage Data: Features accessed, actions taken within the App, session duration, and journaling frequency — used to improve the App and generate your personal insights. 

• Log Data: IP address, access times, and error logs — retained for security monitoring and technical troubleshooting only. 

• Analytics Data: Anonymized, aggregated performance metrics and crash reports collected through privacy-respecting tools hosted on our own infrastructure (see Section 13). 

• Apple Health Data (Optional): If you grant permission, we read sleep duration and physical activity data from Apple Health on your device. This data is used solely to generate personal wellness correlations within your App experience. In future releases, the App may also write data to Apple Health, such as Mindful Minutes recorded from completed wellness exercises within the App. Write access requires separate, explicit permission granted through your device’s Privacy and Security settings. Data written to Apple Health contains only the activity type and duration — no journal content, emotional data, sponsor information, or personally identifying information is ever written to Apple Health. You may revoke read or write permissions at any time through your device privacy settings. When you first connect Apple Health, we request access to sleep and activity data together in a single permission step. Independently of your device’s permission setting, we also record your consent for each health metric — sleep, physical activity, and (for body measurements you enter manually) weight and height — separately. You can review and manage each of these individually, distinct from your device’s Health permission, at any time in Settings → Profile → Permissions. 
   

2.3 Information from Third-Party Services 

We receive limited information from the following third-party services that are integral to the App’s operation. Our core AI functionality is delivered by a configurable pool of AI providers — xAI, OpenAI, and Anthropic. One provider capable of the required capability is designated primary and another fallback at any given time; this assignment is based on pricing, availability, and quality of results, and is not fixed to a specific vendor pairing. 
 

• Apple: Transaction identifiers and subscription status from Apple’s in-app purchase system, and push notification tokens from Apple Push Notification Service (APNs). 

• xAI (x.ai): Processed outputs from your journal content (transcriptions, sentiment scores, topics) returned after AI processing. xAI does not retain your data beyond what is necessary for processing. xAI’s Data Processing Addendum: https://x.ai/legal/data-processing-addendum 

• OpenAI (Whisper): Audio processing to text (STT) and processed outputs from journal context. OpenAI does not retain audio or transcription data — neither for abuse monitoring nor application state — beyond what is necessary to return the result. For other processing that does not use the transcription endpoint (for example, comparing health-derived aggregates against self-reported mood, if you grant Health Data & AI consent), OpenAI retains data for up to 30 days for abuse-monitoring purposes only; this data is never used to train its models. OpenAI’s Data Processing Addendum: https://openai.com/policies/data-processing-addendum/ 

• Anthropic (anthropic.com): Text-based processing of your already-transcribed journal content — sentiment analysis, topic identification, and summarization. Anthropic’s API does not offer speech-to-text or text-to-speech, so it never receives raw audio. Anthropic does not use your content to train its models by default. Anthropic’s Data Processing Addendum: https://www.anthropic.com/legal/data-processing-addendum 
   

We do not receive personal data from marketing partners, advertising networks, or social media platforms. We do not integrate with or accept data from any such sources. 
 

2.4 Location Data (Optional) 

We handle two optional types of location data. (1) Profile location preference: the city and country you set in your account preferences, used to provide weather context when no entry location is available. (2) Per-entry location: if you provide location consent in the App and enable location permission on your device, we collect the precise coordinates of where you create a journal entry, only at the time of creation. We never collect this information in the background or in real time. Coordinates are encrypted at rest and used only to group entries into places you can name and to provide accurate weather context. We never send precise coordinates to our AI processing partners or to any advertising or marketing service. Precise coordinates are automatically deleted 12 months after capture; named places and visit statistics remain without the underlying coordinates. You may decline or revoke this consent at any time in Settings → Privacy; revocation deletes all stored coordinates and places. 
 

We do not receive personal data from marketing partners, advertising networks, or social media platforms. We do not integrate with or accept data from any such sources. 

 

3. HOW WE USE YOUR INFORMATION 

3.1 Service Delivery 

We use your information to operate and deliver the App’s core features, including: 
 

• Creating and managing your account 

• Processing and storing your voice journal entries 

• Transmitting journal content to our AI provider pool (xAI, OpenAI, and Anthropic) for AI transcription, summarization, and emotional tone analysis 

• Generating personal insight cards and wellness correlations 

• Syncing and correlating optional Apple Health data with your journaling patterns 

• Tracking journaling streaks and milestone achievements 

• Delivering push notifications and journaling reminders 

• Processing your subscription through Apple 

• Providing customer support 
   

3.2 AI Processing of Journal Content 

Resilience by YQ uses a configurable pool of AI providers — xAI, OpenAI, and Anthropic — to deliver its core AI functionality, including transcription of voice recordings, generation of journal summaries, sentiment analysis, emotional tone identification, and text-to-speech. Not every provider performs every function: xAI and OpenAI handle voice transcription and text-to-speech, while all three may perform text-based analysis of your already-transcribed journal content. This processing is an integral part of how the Service works and is not optional. 
 

Your journal content is transmitted to one or more of xAI, OpenAI, or Anthropic for processing. This transmission is secured via encrypted connections (TLS/HTTPS). Each provider processes your content solely to return results to our system and does not use your journal content for training AI models or any other commercial purpose beyond processing your request. If we add or change AI processing partners in the future, we will update this Privacy Policy and, where health-derived data is involved, we will ask for your explicit consent through a dedicated in-app consent screen before any health-derived data is sent to our AI processing partners. 

This AI processing is distinct from your data analytics consent preference, which controls only whether anonymized behavioral data is written to our internal analytics storage. Declining analytics does not affect or prevent AI processing of your journal entries, as that processing is necessary to deliver the core service. If you enable Apple Health integration and the App offers features that transmit health-derived data to an AI provider, we will obtain your separate, explicit consent through a dedicated in-app consent screen before any health-derived data is sent. This consent screen will name each AI provider receiving health-derived data, explain in plain language what data is transmitted, and provide a revocable toggle in Settings. This health-derived AI consent is separate from the general AI processing described above, which is a required part of using the Service rather than a separately granted consent. 
 

3.3 App Improvement and Analytics 

We use anonymized, aggregated data to understand how users interact with the App, identify technical issues, and improve features. This analytics data does not identify you personally and is processed using privacy-respecting tools hosted on our own infrastructure. 

You may opt out of anonymized behavioral analytics at any time through account settings. Opting out triggers immediate anonymization of any previously collected behavioral data associated with your account. 
 

3.4 Security and Fraud Prevention 

We use technical data, log data, and access patterns to detect and prevent unauthorized access, fraud, abuse, and security threats, and to enforce our Terms of Service. 
 

3.5 Legal Compliance 

We process and retain certain data as required by applicable law, to respond to lawful requests from government authorities, and to protect the rights, safety, and property of Unconventional Thinker Ltd. and our users. 
 

3.6 Communications 

We use your email address to send: 
 

• Service-critical communications: account verification, password reset, subscription confirmations, and security alerts — these cannot be opted out of as they are necessary for account security 

• App notifications: journaling reminders and insight-ready notifications (controllable through in-app notification preferences) 

• Policy updates: material changes to these Terms or this Privacy Policy 

• Optional marketing communications: newsletters and feature announcements, sent only with your explicit consent and unsubscribe at any time 

 

4. HOW WE SHARE YOUR INFORMATION 
 

4.1 Our Commitment: We Do Not Sell Individual Data 

Unconventional Thinker Ltd. does not sell, rent, trade, or otherwise transfer information that identifies you, or that could be used to target, profile, or re-identify you individually, to third parties for advertising, marketing, or commercial purposes. This commitment is unconditional and applies to all users globally. 
 

With your separate, explicit consent (the Data Sales preference in the App’s privacy settings, off by default), we may include your information in group-level, anonymized, and aggregated datasets offered to third parties for legitimate commercial purposes — for example, cohort-level trends in emotional patterns or topics discussed across many users. These datasets never include raw journal content, transcripts, or any information capable of identifying an individual, and are subject to minimum group-size thresholds designed to prevent re-identification. Enabling the Data Sales preference does not grant any third party access to your individual data — it only permits your anonymized data to be included within such group-level outputs. You may withdraw this consent at any time through the same setting, which stops your data from being included in future outputs. 
 

4.2 Service Providers 

We share information with a limited number of trusted third-party service providers who assist us in operating the App. Each provider is contractually bound to protect your data, use it only as instructed by us, and not use it for any independent commercial purpose. 

Provider 

Purpose 

Data Shared 

xAI (x.ai) 

AI transcription, summarization, sentiment analysis, text-to-speech, and speech-to-text 

Voice recordings, journal text, insights, and analytics; health-derived data (steps, sleep, weight, height) only if you grant Health Data & AI consent 

OpenAI (openai.com) 

AI transcription, summarization, sentiment analysis, text-to-speech, and speech-to-text 

Voice recordings and journal text, insights, and analytics; health-derived data (steps, sleep, weight, height) only if you grant Health Data & AI consent 

Anthropic (anthropic.com) 

Text-based AI summarization and sentiment analysis of already-transcribed journal content — no speech-to-text or text-to-speech capability 

Journal text, insights, and analytics; health-derived data (steps, sleep, weight, height) only if you grant Health Data & AI consent 

Neon 

Serverless PostgreSQL database hosting for account and journal data 

Account data, journal entries, health metadata 

Amazon Web Services 

Encrypted cloud storage for audio recordings and analytics data 

Audio files, anonymized analytics 

Resend 

Email delivery for password reset and account notifications 

Email address, notification content 

Apple WeatherKit 

Weather context for journal entries 

Approximate coordinates (rounded to ~1 km) or your profile city — never your identity, journal content, or precise location 

Apple 

In-app purchase processing and push notifications 

Subscription identifiers, push notification tokens 

Amazon CloudWatch 

App performance monitoring and crash/error monitoring, hosted on our own AWS infrastructure 

Anonymized performance metrics and error logs 

Data Processing Addendums: AWS (https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf), Neon (https://neon.com/dpa), Resend (https://resend.com/legal/dpa). xAI, OpenAI, and Anthropic’s DPAs are linked in Section 2.3 above. 
 

4.3 Legal Compliance and Protection 

We may disclose your information where required by law, court order, or government authority, or where we reasonably believe disclosure is necessary to: protect the rights, safety, or property of Unconventional Thinker Ltd. or our users; detect, investigate, or prevent fraud or illegal activity; or comply with applicable legal obligations. 

Where permitted by law, we will notify you of such requests before disclosing your information. 
 

4.4 Business Transfers 

If Unconventional Thinker Ltd. undergoes a merger, acquisition, reorganization, or sale of all or substantially all its assets, your personal information may be transferred as part of that transaction. We will notify you via email or in-app notification before your information is transferred and becomes subject to a different privacy policy. You will have the opportunity to request deletion of your data prior to any such transfer. 
 

4.5 Aggregated and Anonymized Data 

We may share anonymized, aggregated data that does not identify any individual user for research, industry analysis, or business development purposes. This data cannot be used to identify you. 
 

4.5a Sponsored Content Data 

The App may include wellness content or features supported by third-party sponsors. Our commitment to your privacy governs all sponsored content: (a) Sponsor selection and delivery are never driven by your emotional state, health data, journal content, or any personally identifying information. Sponsors attach to the content we create, not to what you feel. (b) Sponsors receive only aggregate, anonymized impression data, such as the total number of times a sponsored feature was viewed. Sponsors never receive data that identifies you, reveals your emotional state, or discloses your health information. (c) No sponsor data, branding, or identifiers are ever written to Apple Health or any health data integration. (d) Your mood and health data are never shared with, disclosed to, or used to select sponsors under any circumstances. 
 

4.5b Location Data 

Location data, including precise coordinates, place references, and user-assigned place names, is never shared with AI processing partners, sponsors, advertisers, weather services, or any third party under any circumstances. Weather services receive only approximate coordinates (rounded to ~1 km) or your profile city as described in Section 4.2. Location data is stored exclusively in our encrypted database and is used solely to generate your personal location-based wellness insights within the App. 
 

4.6 Affiliated Trade Names 

Unconventional Thinker Ltd. operates under the registered trade names YQ and Resilience by YQ in Ontario, Canada. These trade names are not separate legal entities. Data shared between operational functions of Unconventional Thinker Ltd. under these trade names remains governed by this Privacy Policy at all times. 

 

5. DATA RETENTION 
 

5.1 Retention Periods 

Data Type 

Retention Period 

Basis 

Active account data 

While account is active 

Service delivery 

Journal entries and audio 

While account is active; deleted within 30 days of account deletion 

Service delivery / user control 

Health data 

While account is active; deleted within 30 days of account deletion 

Service delivery / user control 

Per-entry location coordinates 

12 months from capture, or immediately on consent revocation or entry deletion 

Storage limitation / user control 

Named places and visit statistics 

While account is active; deleted on consent revocation or account deletion 

Service delivery / user control 

Backup data 

30 days from creation 

Operational resilience 

Security and log data 

90 days 

Security and fraud prevention 

Legal compliance data 

As required by applicable law 

Legal obligation 
 

5.2 Account Deletion 

Upon account deletion, we remove your personal data from all active systems within 30 days. Anonymized, aggregated data that does not identify you may be retained for analytical purposes. Backup copies are purged within 30 days of the deletion request. Certain data may be retained longer where required by applicable law. 
 

5.3 Individual Journal Entry Deletion 

You may delete individual journal entries at any time within the App. Deletion removes the audio recording, transcript, and AI insights from active systems immediately and from backup systems within 30 days. 

 

6. YOUR PRIVACY RIGHTS 

You have the following rights regarding your personal information, subject to applicable law in your jurisdiction: 
 

6.1 Right to Access 

You may request a copy of the personal information we hold about you. Contact privacy@thinkyq.com to make a data access request. We will respond within 30 days. 
 

6.2 Right to Correction 

You may update or correct your account information at any time through account settings, or by contacting support@thinkyq.com. 
 

6.3 Right to Deletion 

You may request deletion of your account and all associated personal data. We will fulfill deletion requests within 30 days, except where we are legally required to retain certain data. To delete your account, go to account settings and select “Delete Account,” or contact support@thinkyq.com. 
 

6.4 Right to Data Portability 

You may request a copy of your personal data in a portable, machine-readable format. Contact privacy@thinkyq.com to make a portability request. Data exports include your place references and user-assigned place names. Raw coordinates and on-device geographic hints are not included in exports. 
 

6.5 Right to Opt Out 

You may opt out of the following at any time through account settings (Settings → Privacy): 

• Anonymized behavioral analytics — opting out triggers immediate anonymization of existing behavioral data 

• Optional marketing communications — unsubscribe at any time via the link in any marketing email or through account settings 

• Location capture for journal entries — revocable at any time (Settings → Privacy); revoking deletes all stored coordinates and named places 

• Health data sharing — sleep, physical activity, and body measurements can each be reviewed and revoked individually in Settings → Profile → Permissions, separately from your device’s Apple Health permission 
   

6.6 Right to Non-Discrimination 

We will not discriminate against you for exercising any of your privacy rights. Exercising your rights will not affect the quality or availability of the App’s features, except where the data in question is strictly necessary to deliver a specific feature. 
 

6.7 How to Exercise Your Rights 

To exercise any of the rights above, contact our Privacy Officer at privacy@thinkyq.com with the subject line “Privacy Rights Request.” We will respond within 30 days. We may ask you to verify your identity before processing your request. 

 

7. SECURITY 
 

7.1 Security Measures 

We implement industry-standard technical and organizational security measures to protect your personal information, including: 
 

• Encryption in transit: All data transmitted between the App and our servers is encrypted using TLS/HTTPS 

• Encryption at rest: Journal entries, audio recordings, and personal data stored in our database and cloud storage infrastructure are encrypted at rest 

• Access controls: Access to personal data is restricted to personnel who require it to perform their job functions, and is protected by authentication controls 

• Infrastructure security: Our backend infrastructure runs on cloud infrastructure with network-level access controls, private networking, and regular security patching 

• Password security: User passwords are stored exclusively as cryptographic hashes using industry-standard hashing algorithms 
   

7.2 Data Breach Response 

In the event of a data breach that creates a real risk of significant harm to you, we will notify you and applicable regulatory authorities within the timeframes required by law in your jurisdiction (72 hours under GDPR; as soon as feasible under PIPEDA; without unreasonable delay under CCPA). 
 

7.3 Limitations 

While we take security seriously and implement reasonable measures, no system is completely secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the security of your account credentials. 

 

8. INTERNATIONAL DATA TRANSFERS 
 

Unconventional Thinker Ltd. is based in Ontario, Canada. Your personal information may be transferred to, stored in, and processed in countries outside your country of residence, including the United States (where our cloud infrastructure and AI processing partners are located). These countries may have different data protection laws than your jurisdiction. 

We ensure that all international transfers of personal data are protected by appropriate safeguards, including: 
 

• Standard Contractual Clauses (SCCs) for transfers to processors located outside the EU/UK, as required under GDPR and UK GDPR 

• Data processing agreements with all service providers that impose obligations equivalent to those in this Privacy Policy 

• Reliance on Canada’s recognition as a jurisdiction providing adequate data protection under GDPR (European Commission adequacy decision) 
   

Your data may be transferred internationally in accordance with the safeguards described above. 

 

9. CHILDREN’S PRIVACY 
 

Resilience by YQ is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. 

If we become aware that we have collected personal information from a user under 18, we will delete that information from our systems promptly and terminate the associated account. If you believe we may have collected information from a minor, please contact us immediately at privacy@thinkyq.com. 

For users in the European Union, we apply the age threshold of 16 years for consent-based data processing, in accordance with GDPR Article 8, except in member states where national law specifies a lower threshold (minimum 13 years). Our general minimum age of 18 exceeds these thresholds and applies globally. 

 

10. ANALYTICS AND TRACKING 
 

10.1 Our Approach to Analytics 

Consistent with our privacy-first design, we do not use third-party advertising analytics platforms such as Google Analytics. We do not allow third-party advertising networks to track your behavior within the App. 

We use the following privacy-respecting analytics tools, all hosted on our own AWS infrastructure: 
 

• Usage analytics: anonymized data about how you use the App — entry activity and timing, subscription tier, AI-derived sentiment/tone/topic signals, and streak/engagement metrics (subject to your Data Analytics consent preference) — stored in our own cloud storage infrastructure and used to understand usage patterns and improve the App. Not shared with any third party. 

• Infrastructure-level performance monitoring: basic server logs and metrics. Does not process personal data. 

• App performance monitoring and crash/error monitoring: anonymized performance data and error logs, used to detect and resolve technical issues. Stored on our own infrastructure and not shared with any third party. 
   

10.2 Opt Out of Analytics 

You may opt out of anonymized behavioral analytics at any time through account settings (Settings → Privacy → Data Analytics). Opting out stops all behavioral data collection and triggers anonymization of previously collected data associated with your account. 
 

10.3 Do Not Track 

As an iOS application, Resilience by YQ does not engage in cross-app tracking and does not participate in any advertising tracking frameworks. We do not use Apple’s App Tracking Transparency (ATT) framework because we do not track users across other apps or websites. If we detect a Do Not Track (DNT) signal from any connected service, we will honor it by not collecting behavioral analytics data for that session. 

 

11. JURISDICTION-SPECIFIC PRIVACY RIGHTS 
 

11.1 Canada — PIPEDA and Quebec Law 25 

If you are a Canadian resident, your personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and, if you are a Quebec resident, by Quebec’s Act respecting the protection of personal information in the private sector (Law 25). 

Under these laws, you have the right to: 
 

• Know what personal information we hold about you and how it is used 

• Access your personal information and request corrections 

• Withdraw consent to the collection, use, or disclosure of your personal information (subject to legal and contractual obligations) 

• Request deletion of your personal information 

• Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca, or with the Commission d’accès à l’information (CAI) if you are a Quebec resident 
   

Privacy Officer: Our Privacy Officer oversees compliance with Canadian privacy law and can be contacted at privacy@thinkyq.com. Our Privacy Officer holds the title of Head of Operations. 

Privacy Impact Assessments: In accordance with Quebec Law 25, we conduct privacy impact assessments for projects involving cross-border transfers of personal information, including transfers to xAI (United States), OpenAI (United States), Anthropic (United States), and AWS (United States), and for new processing of sensitive personal information, including the App’s optional per-entry location feature. 
 

11.2 European Union and United Kingdom — GDPR and UK GDPR 

If you are located in the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) and, for UK residents, the UK GDPR. 

Legal Basis for Processing: We process your personal data on the following legal bases: 
 

• Contract performance (Article 6(1)(b) GDPR): Core service delivery including account management, journal storage, AI transcription and summarization via our AI provider pool (xAI, OpenAI, and Anthropic), Apple Health correlations, streak tracking, and push notifications 

• Legitimate interests (Article 6(1)(f) GDPR): Security monitoring, fraud prevention, crash reporting, and app performance improvement — where our interests do not override your fundamental rights 

• Your consent (Article 6(1)(a) GDPR): Anonymized behavioral analytics and optional marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing 

• Legal obligation (Article 6(1)(c) GDPR): Data retention required by applicable law 

Your GDPR Rights: In addition to the rights described in Section 6, EU/UK residents have the right to: 

• Object to processing based on legitimate interests 

• Request restriction of processing in certain circumstances 

• Lodge a complaint with your national data protection supervisory authority 
   

Data Protection Officer: For GDPR-related inquiries, contact our Data Protection Officer at dpo@thinkyq.com. 

Supervisory Authority: EU residents may lodge complaints with their national supervisory authority. UK residents may lodge complaints with the Information Commissioner’s Office (ICO) at ico.org.uk. 
 

11.3 United States — CCPA and CPRA (California) 

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA): 
 

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell about you 

• Right to Delete: You may request deletion of personal information we have collected about you, subject to certain exceptions 

• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is required, but you may confirm this at any time by contacting privacy@thinkyq.com 

• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of sensitive personal information to purposes necessary to provide the App 

• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights 
   

To exercise CCPA rights, contact privacy@thinkyq.com with “CCPA Request” in the subject line. We will respond within 45 days. You may designate an authorized agent to make requests on your behalf. 

Sensitive Personal Information: Journal content and emotional analysis data may constitute sensitive personal information under CPRA. We use this data exclusively to deliver your personal App experience and do not use it for inferring characteristics unrelated to the App’s purpose. 
 

11.4 Australia — Privacy Act 1988 

If you are an Australian resident, your personal information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). 

You have the right to access and correct your personal information, and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached the APPs. Contact privacy@thinkyq.com to exercise your rights or raise a concern. We will respond within 30 days. 
 

11.5 Brazil — LGPD 

If you are a Brazilian resident, your personal information is processed in accordance with the Lei Geral de Proteção de Dados (LGPD). You have the right to access, correct, delete, and port your personal data, to revoke consent, and to lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). Contact privacy@thinkyq.com to exercise your rights. 
 

11.6 All Other Jurisdictions 

Regardless of your location, we apply the standards described in this Privacy Policy globally. We are committed to honoring reasonable privacy requests from users in all jurisdictions. If your jurisdiction has specific privacy laws not addressed above, please contact privacy@thinkyq.com and we will make reasonable efforts to accommodate your rights under applicable local law. 

 

12. THIRD-PARTY LINKS AND SERVICES 

 

The App may reference or link to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with the App. 

 

13. CHANGES TO THIS PRIVACY POLICY 

 

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email to your registered address or through an in-app notification at least 30 days before changes take effect. 

The “Last Updated” date at the top of this document reflects the date of the most recent revision. Your continued use of the App after changes take effect constitutes your acceptance of the updated Privacy Policy. 

 

14. CONTACT INFORMATION 

 

For privacy questions, concerns, or to exercise your rights: 

Privacy Officer 

Unconventional Thinker Ltd. 

Operating as: YQ | Resilience by YQ 

2482 Yonge Street #1478 

Toronto, ON M4P2H5 

Canada 

Email: privacy@thinkyq.com 

Website: resiliencebyyq.com 

Data Protection Officer (EU/UK) 

2482 Yonge Street #1478 

Toronto, ON M4P2H5 

Canada 

Email: dpo@thinkyq.com 

 

© 2026 Unconventional Thinker Ltd. All rights reserved. 

YQ and Resilience by YQ are registered trade names of Unconventional Thinker Ltd. in Ontario, Canada.