Consumer Health Data Privacy Statement

Pursuant to the Washington My Health My Data Act and the Nevada Consumer Health Privacy Law, Sachi Health (“we,” “us,” or “our”) is providing the following details regarding the categories of consumer health data that we collect, use, and share about Washington and Nevada consumers. This Consumer Health Data Privacy Statement (the “Privacy Statement”) supplements our Privacy Policy.

Collection of Consumer Health Data

For purposes of this Privacy Statement, consumer health data means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status.

The consumer health data we may collect from you includes:

• Health conditions, treatment, diseases, or diagnosis
• Bodily functions, vital signs, symptoms, or measurements
• Reproductive or sexual health information
• Diagnoses or diagnostic testing, treatment, or medication
• Any inferences of the above categories of health data derived or extrapolated from non-health information

Sources of Consumer Health Data

We collect consumer health data from you and, with your explicit permission, from Apple HealthKit.

How We Use and Share Consumer Health Data

We collect, use, and share consumer health data to operate, manage, and maintain our business, to provide our products and services, and to accomplish our business purposes and objectives, including, for example, to: develop, improve, repair, and maintain our products and services; personalize; aggregate and/or anonymize the data; conduct research, analytics, and data analysis; maintain our facilities and infrastructure; undertake quality and safety assurance measures; conduct risk and security control and monitoring; detect and prevent fraud; perform accounting, audit, and other internal functions, such as internal investigations; comply with law, legal process, and internal policies; maintain records; and exercise and defend legal claims.

We may also use consumer health data and share it with a third party in the context of any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings), to the extent permitted by applicable law. In such cases, we will provide notice before your consumer health data is transferred and becomes subject to a different privacy policy. Any consumer health data transferred in connection with such a transaction will remain subject to applicable privacy and security requirements.

We may share each of the categories of consumer health data listed above with the following categories of third parties:

• Our service providers;

• Our analytics providers;

• Public and governmental authorities; and

• In certain circumstances, it may be necessary to provide consumer health data to other third parties, for example, to comply with applicable law or to protect the rights, safety or property of us, you, and others.

We do not “sell” consumer health data, as defined in the Health Privacy Laws.

Individual Rights

If you are a Washington or Nevada consumer, you may make the following requests regarding your consumer health data, subject to applicable law and certain exceptions:

(1) Request to Know

You may request that we disclose:

• Whether we are collecting or sharing your consumer health data; and

• The third parties to whom we have shared your consumer health data.

(2) Request to Opt out

You may request to opt out of the collection or sharing of your consumer health data.

(3) Request to Delete

You may request that we delete your consumer health data.

(4) Request to Access

If you are a Washington consumer, you may request that we provide you with:

• The email address or other online mechanism you can use to contact the third parties with whom your consumer health data is shared; and

• A copy of your consumer health data.

If you are a Nevada consumer, you may request to review your consumer health data.

(5) Request to Amend

If you are a Nevada consumer, you may request that we make changes to your consumer health data.

To make an Individual Rights request, please contact us at security@sachi-health.com. We will verify and respond to your request consistent with applicable law. We may need to request additional information from you in order to verify your identity and protect against fraudulent requests. If you make a Request to Delete, we may ask you to confirm your request before we delete your consumer health data.

If we refuse to take action on your request, you may appeal this refusal by contacting us at security@sachi-health.com.

Changes to This Privacy Statement

We may change or update this Privacy Statement from time to time. When we do, we will post the revised Privacy Statement on this page with a new “Last Updated” date.