METHODIQ® PRIVACY POLICY

Last Revised: March 25, 2026

INTRODUCTION

Methodiq, Inc., including its affiliates ("Methodiq", "we", "us" or "our") is committed to protecting your privacy. This privacy policy ("Privacy Policy") explains how we collect, use and process Personal Data (as defined below) when you use our websites, including any sub-domains and affiliated sites or mobile applications ("Website(s)"), and our products, tools, subscription programs and any related features we offer through them ("Offering(s)", and together with the Websites, "Services"). It also outlines your rights regarding your Personal Data and how to contact us. This Privacy Policy forms an integral part of our Terms and Conditions ("Terms"). Capitalized terms not otherwise defined in this Privacy Policy have the same meaning as set forth in our Terms.

If you are a resident of Washington State or Nevada, please review the Health Data Privacy Notice at the end of this Privacy Policy for additional information.

Our Services also include connecting you with independent healthcare and pharmaceutical providers ("Third Party Providers") for telehealth consultations and related medical services. Please note that Third Party Providers are independent entities and are not employees or agents of Methodiq. When you engage with Third Party Providers through our Services, they may collect and process your health information subject to their own privacy practices and applicable healthcare privacy laws, including HIPAA, as defined below.

Our Services are intended for individuals at least eighteen (18) years old. In certain jurisdictions, we may, at our discretion, allow users aged thirteen (13) or older, but under eighteen (18), to use the Services with the explicit consent of a parent or legal guardian to our Terms and Conditions.

If you have a disability and need this Privacy Policy in another format, you can contact us either by emailing [email protected] or by sending us mail to: Methodiq Inc., 110 Greene St., Second Floor, New York, NY 10012.

Providing Personal Data is voluntary. However, certain parts of the Services may require specific information, and choosing not to provide it may limit your ability to use those features. If you provide Personal Data, you agree to keep it accurate and up to date.

PLEASE READ THIS PRIVACY POLICY CAREFULLY. Please note that some sections of this Privacy Policy may not apply to you depending on the laws in your jurisdiction.

By accessing or using the Services or Offerings, you confirm that you have read and agreed to this Privacy Policy. If you do not agree, you should not use the Services or Offerings.

Specifically, this Privacy Policy describes -

  1. WHAT TYPES OF DATA WE COLLECT?
  2. COOKIES AND OTHER TRACKING TECHNOLOGIES
  3. WHY WE PROCESS YOUR PERSONAL DATA?
  4. WITH WHOM WE SHARE YOUR PERSONAL DATA
  5. MARKETING AND ADVERTISING
  6. YOUR RIGHTS REGARDING YOUR PERSONAL DATA
  7. OUR SECURITY MEASURES
  8. MINORS' PRIVACY
  9. HOW LONG WE KEEP YOUR PERSONAL DATA?
  10. MODIFICATIONS OF THIS PRIVACY POLICY
  11. CONTACT US

1. WHAT TYPES OF DATA WE COLLECT?

When we refer to "Personal Data" in this Privacy Policy, we mean any information that, either alone or in combination with other information, can identify you through reasonable means, such as your name or email address. This section explains how and when we collect and process Personal Data about you.

1.1. Account information: If you choose to register an account, we collect your full name, email address, password, phone number and birthdate, as well as any optional details you choose to provide. In some cases, we may ask for proof of identity or age verification by requesting a government-issued ID or similar documentation. If you are under the Age of Majority (as defined below) but at least thirteen (13), we may request additional information about your parent or legal guardian to verify their identity and obtain their explicit consent, including copies of identification documents as required by law.

1.2. Health-related information: When you use our Services to connect with Third Party Providers or seek recommendations for skin conditions, we may collect health-related information you provide, including information about your medical history, current health conditions, medications, allergies and other health-related details necessary to facilitate your consultations and product recommendations. This information may constitute "sensitive personal information" under applicable state privacy laws and consumer health data under applicable laws. Please review the Health Data Privacy Notice at the end of this Privacy Policy for additional information.

1.3. Preferences information. We collect information related to our Offerings, your product preferences, including the Offerings you have purchased, returned or viewed, product usage preferences and any other profile information you choose to provide when interacting with our Services.

1.4. Visual information and physical characteristics. Certain features in our Services allow you to submit images or photographs ("Photograph") that help us identify skin conditions and properties or analyze physical characteristics. This may include information about your skin conditions. We may use software to detect the general structure of your face ("Structural Data", and together with the Photograph, "Photo Data"). We may also generate de-identified, anonymized or aggregated data derived from your Photo Data ("Delivered Data"), as permitted by law. We may request access to your device's camera or files, which you can allow or deny through your device settings. Some features may not function without these permissions. We use Photo Data and Derived Data to (i) improve our software and algorithms in order to provide the most accurate recommendations of our Offerings, and (ii) for research, product development, general Service improvements, and other lawful purposes. To the extent that Photo Data, Derived Data or other information we collect constitutes "consumer health data" under applicable state laws, we will collect, use, and share such data only with your consent and in accordance with applicable law.

1.5. Billing information. If you purchase Offerings, you must provide billing information such as your credit card number or other payment details, depending on the chosen payment method. Payment information is collected by secure third-party payment processors.

1.6. User-provided information. Some parts of our Services allow you to create a public profile ("Public Profile"), which may include your name and any additional information you choose to include, such a profile photo. Our Services may also offer interactive features (such as our quizzes), questionnaires, product review pages or content upload tools. If you use these features, we collect the Personal Data you submit. Information posted publicly, including interactions with our social media channels, may be visible to others for as long as the relevant pages remain active. We are not responsible for the Personal Data you choose to post - please be aware that any information you post publicly may be visible to others. Social media platforms operate independently from us and have their own privacy and security practices.

1.7. Demographic information: We may collect demographic details such as age and gender.

1.8. Location information. We may provide certain location-based services that rely on your device's geolocation data or precise location. On your mobile device, you can disable location sharing through your mobile device settings. We collect this information to provide relevant location-based content and Offerings.

1.9. Usage information. When you use our Services, we collect technical information about your interaction with our Services. Such information may include statistics, IP address, unique identifiers (e.g., MAC address and UUID), as well as other information that relates to your activity in the Services.

1.10. Contacts' information. If you choose to invite friends to use our Services, we may collect information such as their names, phone numbers, email addresses or public profile details from your device or social media accounts. If you share third-party Personal Data with us, you are responsible for informing them and ensuring you have their permission.

1.11. Communication information: When you email us or contact support, we collect the Personal Data you provide, including your name, email address and any additional information you choose to share. We also collect information you submit when participating in promotions, marketing campaigns or events.

2. COOKIES AND OTHER TRACKING TECHNOLOGIES

When you visit or access our Services, we use cookies, pixels, beacons, local storage and similar technologies ("Tracking Technologies"). These Tracking Technologies allow us to automatically collect information about you, your device, and your online behavior, in order to enhance your navigation in our Services, improve the performance of our Services, perform analytics, customize your experience, and offer you, for example, tailored content and advertisements that better correspond with your interests. For more information, see the following section of this Privacy Policy.

2.1 What types of Tracking Technologies do we use? When you use our Services, we use the following categories of Tracking Technologies:

2.1.1 Strictly necessary Tracking Technologies: These Tracking Technologies are automatically placed on your device when you access our Services or take certain actions on our Services. These Tracking Technologies are essential to enable you to navigate and use the features of our Services. We do not need to obtain your consent in order to use these Tracking Technologies.

2.1.2 Tracking and advertising Tracking Technologies: These Tracking Technologies collect information about your browsing habits in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advertisement, as well as help measure the effectiveness of an advertising campaign. Tracking Technologies remember the websites you visit, and such information is shared with other parties, such as advertisers and/or publishers. Publishers, advertisers, and third-party ad networks may also utilize Tracking Technologies or similar technologies to deliver ads and monitor the performance of such ads. The collection of information through Tracking Technologies by such third parties will be governed by their own privacy policies/cookies policies and principles, which Methodiq does not control.

2.1.3 Functionality Tracking Technologies: These Tracking Technologies allow our Services to remember choices you make when you visit our Services (such as language options) and provide enhanced and personalized features. For example, these Tracking Technologies are used for authentication (to remember when you are logged in) and support other features of our Services.

2.1.4 Performance Tracking Technologies: These Tracking Technologies collect information about your online activity (for example, the duration of your visit to our Services), including behavioral data and content engagement metrics. These Tracking Technologies are used for analytics and research and to perform statistics (based on aggregated information).

The analytics services we use include, but are not limited to:

2.2 How and by whom are Tracking Technologies stored on your device?

We store Tracking Technologies on your device when you visit or access our Services (for example, when you visit our Website). Such Tracking Technologies are called "First Party Tracking Technologies". In addition, Tracking Technologies are stored by other third parties (for example, our analytics service providers, business partners, and advertisers), who run content on our Services. Such Tracking Technologies are called "Third Party Tracking Technologies". Both types of Tracking Technologies may be stored either for the duration of your visit to our Services / Website or for repeated visits.

There are various ways in which you can manage and control your Tracking Technologies settings. You can change your Tracking Technology preferences by changing your browser settings to send a "Do-Not-Track" signal. In such a case, your browser will send us a special signal to stop tracking your activity. However, please note that certain features of the Services may not work properly or effectively if you delete or disable cookies.

To learn more about how you can manage your cookies, below is a list of useful links that can provide you with more information:

You can learn more about how to turn off certain third-party targeting and advertising cookies by visiting the following third-party webpages: The Interactive Advertising Bureau (US).

You can withdraw your consent to personalized advertising experience on your device at any time by using your device settings as follows:

3. WHY WE PROCESS YOUR PERSONAL DATA?

This section explains for what purposes we use your Personal Data and outlines the legal bases or justifications that underlie our usage.

Purpose and Scope of Collected Data Legal Basis
Provision of our Offerings and Services; support, delivery. We use your Personal Data to fulfill the purpose for which such information is provided to us, such as for the process of your orders or for customer service purposes. This includes, for example, providing you with receipts and order updates. The legal bases for processing this data are (i) the performance of our contractual obligations towards you; (ii) your consent (for example, when you provide Personal Data) where required by law; (iii) and our legitimate business interests. Our legitimate business interests in this case are the provision of our Services and supporting our customers.
Facilitating Third Party Providers' services. Depending on the services, we may process your Personal Data, including health-related information, to connect you with Third Party Providers for telehealth consultations and to facilitate communications between you and Third Party Providers regarding your skin conditions and treatment options. The legal bases for processing this data are (i) your consent; (ii) performance of our contractual obligations towards you; and (iii) as necessary to provide healthcare-related services as permitted by applicable law.
Payments. We collect from our third-party payment processors certain information about your payment instruments for the purpose of connecting your payment instrument to your account, and sending you statements, invoices, and payment reminders. The legal bases for processing this data are (i) the performance of our contractual obligations; (ii) the protection of our legitimate business interests, in this case provision of our Services; and (iii) compliance with legal obligations to which we are subject.
Improve our Services. We collect and analyze information about you and your usage of our Services, including Photo Data, for better product match, for research and product development purposes, and to improve our Services, including our software and algorithms. We may also use Personal Data to personalize recommendations, tailor content, save your preferences, shorten your browsing experience and improve our in-Services and online interactions with you. We may use artificial intelligence or machine learning technologies to support these activities, including to analyze preferences, improve our products and services, personalize content and recommendations, and enhance user experience. The legal bases for processing this data are (i) our legitimate business interests, in this case – providing and improving our Services.
Communication with you. We use your Personal Data to communicate with you, including responding to your requests, inquiries, issues or feedback and providing customer support. The legal bases for processing this data are (i) performance of our contractual obligations towards you; (ii) your consent (for example, when you provide Personal Data); and (iii) our legitimate business interests, in this case – providing and improving our Services.
Marketing and advertising. We may use your Personal Data, including information derived from our Tracking Technologies in order to provide you with personalized or non-personalized advertisements when you visit our Services, or as part of your current interaction with us. The legal bases for processing this data are (i) your consent (when required by law); and (ii) our legitimate business interests. Our legitimate business interests in this case are providing you with tailored services, content and advertisements that better correspond with your interests.
Security and integrity. We may process certain information about you and your usage of the Services in order to keep the integrity and security of the Services, validate your identity and enforce our policies. The legal bases for processing this data are (i) your consent (where required by law), (ii) compliance with our legal obligations; and (iii) our legitimate business interests. Our legitimate business interests in this case are keeping the integrity of our Services and the safety of our users.
Compliance with applicable laws. We may process your Personal Data in order to respond to law enforcement requests and comply with our legal obligation under applicable laws. The legal basis for processing this data is (i) compliance with our legal obligations; and (ii) our legitimate business interests. Our legitimate business interests in this case are compliance with our legal obligations and assisting law enforcement agencies.

4. WITH WHOM WE SHARE YOUR PERSONAL DATA

4.1. We share and disclose Personal Data as permitted by law, as described below:

4.1.1 Affiliated companies: We may share Personal Data internally within our parent company, affiliated companies and subsidiaries, for the purposes described in this Privacy Policy.

4.1.2 Payment processors: We share your payment information with third-party payment processors, for the purpose of facilitating your payments when using our Services. These third parties may have access to your Personal Data so they are able to perform these tasks on our behalf.

4.1.3 Third Party Providers: We may share your Personal Data, including health-related information, with Third Party Providers to facilitate telehealth consultations and related medical services. Third Party Providers are independent entities and will process your information in accordance with their own privacy practices and applicable healthcare privacy laws.

4.1.4 Service providers: We may share your Personal Data with our service providers that provide services on our behalf or help us operate our Services. These companies include those we have hired to provide customer service support, operate the technical infrastructure that we need to provide the services, cloud storage vendors, payment processors, and providers of analytics, email delivery, marketing, and database management services.

4.1.5 Third-party advertisers: We may partner with third parties to either display advertising on our Services or to manage our advertising on other websites or apps. Our third-party advertisers may use Tracking Technologies to gather information about your activities on our Services and other websites and apps in order to provide you with advertising based on your browsing activities and interests. We do not share or sell health-related information or consumer health data with third-party advertisers.

4.1.6 Third-party integrations: The Services allow you to integrate with certain third party services, such as in order to connect your Facebook or Apple account to our Website or to place purchases, in which case you will be bound by the terms and conditions and privacy notices of said third parties (e.g., Apple, Google or Facebook) – so please make sure that you read and accept them in advance. We do not receive or store your passwords for any of these third-party services.

4.1.7 Compliance with laws and law enforcement entities: We may disclose relevant Personal Data about you to the government or law enforcement officials or private parties when we reasonably believe such disclosure is necessary or appropriate to respond to claims and legal procedures (including but not limited to subpoenas), to protect our or a third party's property and rights, to protect the safety of the public or any person, or to prevent or stop any activity we may consider to be or to pose a risk of being, illegal, unethical or legally actionable. We may also be required to disclose an individual's Personal Data in response to a lawful request by public authorities, including meeting national security or law enforcement requirements.

4.1.8 Auditors and advisers: We may share your data with our external auditors, advisors and professional service providers (e.g., lawyers, accountants, insurers) to ensure our compliance with regulatory requirements and industry standards.

4.1.9 Mergers and acquisitions: We may transfer, sell or otherwise share your data, only as necessary, in case of entering into a business transaction such as a merger, acquisition, reorganization, bankruptcy, or sale of some or all of our assets. In the event of such a transaction involving consumer health data, we will provide you with notice and obtain your consent as required by applicable law.

4.2. The following summarizes our Personal Data disclosure practices during the preceding 12 months, including the categories of Personal Data we collect and how we use them.

As part of our advertising activities, we work with other companies and businesses to deliver behavioral advertising to you on other sites and services. In doing so, we disclose personal information in a manner that constitutes a "sell" or "sharing" of personal information as defined under applicable US data protection laws.

Data Categories Collected How We Collect Primary Purposes of Processing Key Recipients/Disclosures
Internet or other electronic network activity information, including but not limited to browsing history and search history When you use our Services; from third-party sites or services To provide our Services; to improve, monitor, and personalize our Services; for research and development; to communicate with you; for marketing and advertising Service providers; Affiliated companies; Advertising partners
Commercial information, including but not limited to records of personal property, products or services purchased, obtained or considered When you use our Services; from third-party sites or services To provide our Services; to improve, monitor, and personalize our Services; for research and development; to communicate with you; for marketing and advertising Service providers; Affiliated companies; Advertising partners
Personal information categories listed in the California Customer Records Statute (e.g., name, contact details) When you use our Services; from third-party sites or services To provide our Services; to improve, monitor, and personalize our Services; to communicate with you; for marketing and advertising Service providers; Affiliated companies; Advertising partners
Geolocation data When you use our Services To provide our Services; to monitor our Services Service providers; Affiliated companies
Audio, electronic, visual, thermal, olfactory data When you use our Services To provide our Services; to improve, and personalize our Services Service providers; Affiliated companies
Protected classification characteristics under California or federal law When you use our Services To provide our Services; to improve, and personalize our Services Service providers; Affiliated companies
Sensitive personal information (as defined in CA Civil Code 1798.140 (ae)), such as Account log-in information and credit card numbers, information that may reveal a consumer's racial, ethnic origin or health condition When you use our Services To provide our Services; to improve, monitor, personalize our Services; and to facilitate Third Party Providers consultations Service providers; Affiliated companies; and Third Party Providers (for health-related information only)
Consumer health data When you use our Services; when you interact with Third Party Providers To provide our Services; to facilitate Third Party Provider consultations; to provide product recommendations Service providers; Affiliated companies; Third Party Providers

We do not sell or share any of your sensitive personal information, including consumer health data, and we do not sell or share the personal information of consumers under 18 years of age. We use sensitive personal information, including health-related data, only for the purposes of providing our Services, facilitating your interactions with Third Party Providers, and as otherwise permitted under applicable law.

4.3. We obtain the categories of personal information listed above from the following categories of sources (with the specific categories of personal information indicated in parentheses):

5. MARKETING AND ADVERTISING

We may use your Personal Data ourselves or by using our third-party service providers for the purpose of providing you with in-app promotional materials concerning the Services as well as products, websites and applications which relate to: (i) affiliated companies, or (ii) Methodiq's business partners and affiliates (collectively, "Marketing Affiliates"), which we believe may interest you. We do not use health-related information or consumer health data for marketing or advertising purposes.

You may choose not to receive future promotional, advertising, or other Website-related emails from us by sending us an email to: [email protected], or selecting an unsubscribe link at the bottom of each email that we send. Please note that even if you opt out of receiving the foregoing emails, we may still send you a response to any "Contact Us" request as well as administrative emails (for example, in connection with a password reset request) that are necessary to facilitate your use of our Services and notifications regarding your orders. Please note that even if you unsubscribe from our marketing mailing list, we may continue to send you in-app service-related updates and notifications.

At times, we may want to contact you via telephone regarding your use of the Offerings. By submitting your Personal Data by and through the Services, you agree that such act constitutes an inquiry and/or application for purposes of the Amended Telemarketing Sales Rule (16 CFR §310 et seq.), as amended from time to time (the "Rule") and applicable state do-not-call regulations. As such, notwithstanding that your telephone number may be listed on the Federal Trade Commission's Do-Not-Call List, and/or on applicable state do-not-call lists, we retain the right to contact US residents via telemarketing in accordance with the Rule and applicable state do-not-call regulations.

At times, we may want to contact you via your mobile device regarding your use of the Offerings. Where you provide "prior express consent" within the meaning of the Telephone Consumer Protection Act (47 USC § 227), and its implementing regulations adopted by the Federal Communications Commission (47 CFR § 64.1200), as amended from time-to-time ("TCPA"), you consent to receive telephone calls, including artificial voice calls, pre-recorded messages and/or calls (including SMS text messages) delivered via automated technology, to the telephone number(s) that you provided.

To stop receiving mobile text messages from Methodiq, please reply "STOP" to the text message that you received from us. Please note that preference will only apply to the phone number that received the text message. Please reply "HELP" to receive help information. Please note that you are not required to provide this consent in order to obtain access to the Offerings, and your consent simply allows Methodiq to contact you via these means. The frequency of SMS text messages that you receive from us may vary. Standard message and data rates may apply. Where you provide your consent as set forth above, you represent that you are the line subscriber and primary user of the telephone number that you provided ("Active Telephone Number") and, as such, have the authority to agree to receive SMS text messages on the Active Telephone Number. Please be advised that by agreeing to this Privacy Policy, you are obligated to immediately inform us if and when your Active Telephone Number changes. Without limiting the foregoing, if you: (a) have your Active Telephone Number reassigned to another person or entity; (b) give up your Active Telephone Number so that it is no longer used by you; (c) port your Active Telephone Number to a landline or vice versa; or (d) otherwise stop using your Active Telephone Number for any reason (collectively "Phone Number Change"), you agree that you shall promptly notify Methodiq of the Phone Number Change via e-mail at: [email protected], or by using one of the methods set forth in the "Contact Us" section below.

6. YOUR RIGHTS REGARDING YOUR PERSONAL DATA

6.1. Depending on the jurisdiction in which you reside, you may have certain rights under relevant applicable laws regarding the collection and processing of your Personal Data. To the extent these rights apply and concern you, you can contact us via the contact details available below and ask to exercise the following rights.

6.1.1. Rights of access to your Personal Data: You have the right to receive confirmation as to whether or not Personal Data concerning you is being processed, and access your stored Personal Data, together with supplementary information.

6.1.2. Right of data portability: You have the right to request us to move, copy and transfer your Personal Data easily from one IT environment to another, in a safe and secure way, without affecting its usability.

6.1.3. Right of rectification: You have the right to request rectification of your Personal Data in our control in the event that you believe the Personal Data held by us is inaccurate, incomplete or outdated.

6.1.4. Right of deletion/erasure: You have the right to request that Methodiq erase or delete Personal Data held about you at any time. Please note that we may not be able to completely remove Personal Data from our systems in certain circumstances. This will be true if one of the exceptions for data erasure under applicable law applies. During the period of retention, we will ensure that such data continues to be stored securely.

6.1.5. Right to restriction or objection to processing: You have the right to request that we restrict or cease to process Personal Data.

6.1.6. Right to withdraw your consent: To the extent we process Personal Data based on your consent, you have the right to withdraw your given consent at any time.

6.1.7. Right not to be subject to automated decision making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significant effects to you.

6.1.8. Right to opt-out of sale or share of Personal Data: In the event that we sell or share your Personal Data for behavioral advertising purposes, you have the right to submit a request to opt-out of the sale or share of your Personal Data via the webform available here. After you opt-out, we may continue disclosing some Personal Data to our partners to help us perform business-related functions such as, but not limited to, providing the Services, ensuring that the Services are working correctly and securely, providing aggregate statistics and analytics and preventing fraud.

6.1.9. Right to limit the use and disclosure of sensitive Personal Data: You have the right to request to limit the collection of your sensitive Personal Data, as applicable, to only such data that is necessary to perform our Services. You have the right to request that we limit our use and disclosure of Sensitive Personal Information we maintain about you only as necessary to perform the services or provide the goods reasonably expected, or as otherwise permitted by applicable US data protection laws.

6.1.10. Right to non-discrimination: You have the right to be free from any discrimination for exercising your rights, such as offering you different pricing or products, or providing you with a different level or quality of services, based solely upon your request.

6.1.11. Right to content removal: If you are a California resident under the Age of Majority and over the age of thirteen (13), you have the right to request the removal of any content you have submitted to the Services. You can exercise this right by contacting us at [email protected].

6.1.12. California Shine the Light. Our customers who are California State residents can request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes, as applicable. To make such a request, please send an email to [email protected]. Please note that we are only required to respond to one request per customer each year.

6.1.13. Authorized agent: Depending on your residence state, you may designate an authorized agent to submit privacy requests on your behalf, subject to identity and authorization verification.

Prior to responding to your requests, we may verify your identity by matching any identifying information you provide against the information we have about you. We will respond to verifiable consumer requests within the applicable timeframe, except if local law requires otherwise. If we require more time, we will inform you of the reason and extension period in writing.

Please note that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements. You are welcome to contact us with any questions or requests through our contact details below. We will make an effort to reply within a reasonable timeframe. If we deny your privacy request, you have the right to appeal our decision. To submit an appeal, please contact us at [email protected] with the subject line "Privacy Request Appeal" within a reasonable time after receiving our denial. We will respond to your appeal within the applicable timeframe (or such other timeframe as required by applicable law). If you are unsatisfied with our response, you can lodge a complaint with the applicable data protection supervisory authority or appeal our denial of your request by contacting us as set out in the "Contact Us" section below.

7. OUR SECURITY MEASURES

We have implemented administrative, technical, and physical safeguards to help prevent unauthorized access, use, or disclosure of your Personal Data. While we seek to protect your information to ensure that it is kept confidential, we cannot guarantee the security of any information. You should be aware that there is always some risk involved in transmitting information over the internet and that there is also some risk that others could find a way to thwart our security systems. Such breaches can lead to things such as reputational harm, fraud or identity theft. Therefore, we encourage you to exercise discretion regarding the Personal Data you choose to disclose. If you feel that your privacy was treated not in accordance with our Policy, or if any person attempted to abuse the Services or acted in an inappropriate manner, please contact us directly via our contact details available below.

8. MINORS' PRIVACY

Our Services are intended solely for users who are at least eighteen (18) years of age and can form a legally binding contract under applicable law ("Age of Majority") or are at least thirteen (13) years of age, provided that their parent or legal guardian consents to our Terms of Use and this Privacy Policy. Additionally, in specific jurisdictions, we may, at our sole discretion, implement further measures or requirements to ensure compliance with applicable laws and regulations regarding consent or age restrictions.

Under no circumstances are users under the age of thirteen (13) permitted to use the Services. Any registration, use, or access to the Services by anyone under the Age of Majority without appropriate parental or guardian consent is unauthorized and constitutes a violation of our Terms of Use. We reserve the right to request proof of age or parental/legal guardian consent at any time. We may suspend or block access to the Services if we suspect that a user does not meet the applicable age requirements.

If we learn that we have inadvertently collected Personal Data from a person under the Age of Majority without proper consent (other than as expressly permitted in the relevant jurisdiction), we will deactivate the account and delete that information as quickly as possible. If you believe that we might have any such information, please contact us at: [email protected]. We encourage all parents, guardians, and adults to guide individuals under the Age of Majority in understanding the importance of not sharing Personal Data online without permission.

9. HOW LONG WE KEEP YOUR PERSONAL DATA?

We generally keep your Personal Data for as long as necessary to provide our Offerings and Services, and as necessary to comply with our legal obligations, to resolve disputes, or defend against legal claims. Retention periods will be determined to take into account factors such as the type of personal data that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time.

For consumer health data, we retain such data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. Upon your request to delete your consumer health data, we will delete such data within thirty (30) days, except as otherwise required by law.

10. MODIFICATIONS OF THIS PRIVACY POLICY

Methodiq reserves the right to change or update this Privacy Policy at any time by posting a notice on the Services that we are changing our Privacy Policy. The most current version will always be posted on our Services (as reflected in the "Last Updated" heading). You are advised to check for updates regularly. By continuing to access or use our Services after any revisions become effective, you agree to be bound by the updated Privacy Policy.

11. CONTACT US

If you have any questions or comments regarding this Privacy Policy, the Services or how we process or use your Personal Data, please contact us as follows: [email protected].

METHODIQ® PRIVACY POLICY

Last Revised: March 25, 2026

HEALTH DATA PRIVACY NOTICE FOR WASHINGTON AND NEVADA RESIDENTS

This Health Data Privacy Notice ("Health Notice") supplements the Privacy Policy above and applies to residents of Washington State (under the My Health My Data Act, "MHMDA") and Nevada (under the Nevada Health Data Privacy Act, "HHDPA"), as well as any other applicable state law that applies to the collection of health data. In the event of any conflict between this Health Notice and the Privacy Policy, this Health Notice shall control with respect to consumer health data.

1. WHAT IS CONSUMER HEALTH DATA?

Under the MHMDA and NHDPA, "consumer health data" is defined broadly and may include:

1.1. Information about your health-related conditions, symptoms, status, diagnoses, testing, or treatments, including surgeries, procedures, medications, or other interventions.

1.2. Measurements of bodily functions, vital signs, or physical characteristics, including photographs, which may also constitute biometric information under applicable law.

1.3. Precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies.

1.4. Information that could identify your attempt to seek health care services or information, including services that assess, measure, improve, or provide information about your health.

1.5. Other information that may be used to infer or derive health-related data.

Because these definitions are broad, many categories of data described in Section 1 of the Privacy Policy may also constitute consumer health data.

2. HOW WE COLLECT CONSUMER HEALTH DATA

We obtain the categories of personal information listed above from the following categories of sources (with the specific categories of personal information indicated in parenthesis):

3. PURPOSES FOR COLLECTING AND USING CONSUMER HEALTH DATA

We collect and use consumer health data as reasonably necessary to:

3.1. Provide you with the Services and Offerings you have requested or authorized, including facilitating telehealth consultations with Third Party Providers.

3.2. Deliver and operate our Services and their features.

3.3. Ensure the secure and reliable operation of our Services and support our systems.

3.4. Troubleshoot issues, improve our Services and conduct research and development.

3.5. Meet our legal obligations and conduct essential business operations.

We will not use consumer health data for advertising or marketing purposes.

4. HOW WE SHARE CONSUMER HEALTH DATA

We may share consumer health data with your consent or as reasonably necessary to provide the Services you have requested. We share consumer health data with the following categories of recipients:

Category Purpose
Service providers To assist in providing and securing our Services (e.g., customer support, cloud hosting, analytics)
Third Party Providers To facilitate telehealth consultations and related medical services
Payment processors For payment processing, fraud prevention, and related financial services
Affiliates To operate our business and provide Services across our corporate family
Business partners Where you use co-branded services or interact with another company through our Services
Parties to corporate transactions In connection with mergers, acquisitions, or other business transactions, with prior notice and consent as required by law
Government agencies To comply with applicable law or respond to valid legal process

We do not sell consumer health data. We do not share consumer health data for advertising purposes.

5. YOUR CONSUMER HEALTH DATA RIGHTS

If you are a Washington or Nevada resident, you have the following rights regarding your consumer health data:

5.1. Right to confirm: You may confirm whether we are collecting, sharing or selling your consumer health data.

5.2. Right to access: You may request access to your consumer health data.

5.3. Right to delete: You may request deletion of your consumer health data. Upon receiving a valid request, we will delete such data within thirty (30) days, except as otherwise required by law.

5.4. Right to withdraw consent: You may withdraw your consent to the collection, sharing, or sale of your consumer health data at any time.

5.5. Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

6. HOW TO EXERCISE YOUR RIGHTS?

To exercise your consumer health data rights, you may:

6.1. Contact us at [email protected] with the subject line "Consumer Health Data Request".

6.2. Use the privacy controls available through your account settings, where applicable.

7. APPEALS PROCESS

If we deny your request to exercise a right, you may appeal that decision by contacting us at [email protected] with the subject line "Consumer Health Data Appeal." We will respond to your appeal within regulatory timeframes.

If your appeal is unsuccessful, you may file a complaint with:

7.1. Washington State: Attorney General at www.atg.wa.gov/file-complaint

7.2. Nevada: Attorney General at ag.nv.gov/complaints/file_complaint

8. CONTACT INFORMATION

For questions about this Health Notice or our consumer health data practices:

Methodiq Inc., 110 Greene St., Second Floor, New York, NY 10012
Email: [email protected]