WASHINGTON CONSUMER HEALTH DATA PRIVACY POLICY

Effective date: July 17, 2026

1. CATEGORIES OF CONSUMER HEALTH DATA COLLECTED AND PURPOSES OF COLLECTION

• Profile and demographic information, including age, gender, height, weight, physical condition, training experience, fitness goals, dietary goals, and lifestyle preferences. Calorii uses this information to personalize fitness, nutrition, and wellness features.

• Fitness, activity, and connected health information, including steps, distance, calories burned, workouts, exercises, repetitions, sets, training volume, workout duration, heart rate, sleep-related metrics, and other activity information authorized through connected health platforms. Calorii uses this information to track progress, synchronize activity, and generate personalized insights and recommendations.

• Nutrition and dietary information, including meal logs, food intake, calorie and macronutrient information, meal timing, allergies, dietary restrictions, food preferences, meal photos, saved meals, and nutrition goals. Calorii uses this information to provide meal logging, nutrition analysis, food recognition, and personalized meal planning.

• Images, visual information, and derived health information, including progress photos, body photos, before-and-after images, avatar source images, body-analysis inputs, estimated body composition, symmetry or progress indicators, and other visual or analytical outputs. Calorii uses this information to provide body analysis, avatar creation, meal recognition, and visual progress tracking.

• AI interaction and inferred wellness information, including health-, fitness-, activity-, and nutrition-related prompts, questions, progress updates, recommendations, and inferences generated from information submitted by the user. Calorii uses this information to provide AI-assisted responses, meal plans, workout guidance, body analysis, and performance insights.

• Other health, fitness, nutrition, or wellness information that a user voluntarily submits to Calorii. Calorii uses this information to provide the feature or service requested by the user, maintain account continuity, support users, protect platform security, troubleshoot issues, and comply with legal obligations.

2. CATEGORIES OF SOURCES

• The consumer directly, including through account registration, onboarding, profile settings, meal and activity logging, AI interactions, customer support, and uploaded images or other content.

• Devices and health or fitness platforms authorized by the consumer, including Apple Health, Apple HealthKit, Google Fit, Google Health Connect, and similar services.

• The consumer’s interactions with Calorii, including activity records, feature use, saved content, and outputs generated from information submitted by the consumer.

• Service providers and integrations used at the consumer’s direction to support AI, food and nutrition databases, health syncing, storage, processing, support, and related Calorii features.

3. CATEGORIES OF CONSUMER HEALTH DATA SHARED

• Depending on the features used, Calorii may share the minimum consumer health data reasonably necessary to provide the requested service. Categories shared may include profile and demographic information, fitness and activity metrics, connected health-platform data, nutrition and meal information, images and visual data, AI prompts and interaction data, and derived or inferred wellness information.

4. CATEGORIES OF THIRD PARTIES AND SPECIFIC AFFILIATES

• Artificial intelligence service providers, including OpenAI, Anthropic, Google Gemini, and other AI providers used to generate requested outputs.

• Cloud hosting, database, storage, security, and technical infrastructure providers that process data to operate and protect the Calorii platform.

• Health and fitness platform providers, including Apple Health, Apple HealthKit, Google Fit, Google Health Connect, and similar services, when the consumer authorizes an integration.

• Food, nutrition, barcode, ingredient, and recipe database providers used to support food search, meal logging, nutrition analysis, recipe import, food recognition, and meal planning.

• Customer support and operational service providers that process information only as necessary to assist the consumer, troubleshoot the service, or protect platform security.

• Other users, social media platforms, messaging applications, or other recipients selected by the consumer when the consumer voluntarily shares content.

• Government authorities, regulators, courts, or other parties when disclosure is required or permitted by law.

• Affiliates: Calorii LLC does not currently share consumer health data with corporate affiliates.

5. HOW TO EXERCISE CONSUMER HEALTH DATA RIGHTS

• A Washington consumer may request confirmation of whether Calorii is collecting, sharing, or selling consumer health data; access to that data; a list of third parties and affiliates with whom the data has been shared or sold and available contact information for those recipients; withdrawal of consent for collection or sharing; or deletion of consumer health data.

• A request may be submitted through existing account or privacy controls made available by Calorii, including account deletion where applicable, or by emailing support@calorii.com with the subject “Washington Consumer Health Data Request.” The request should identify the right being exercised and include enough information to locate and authenticate the applicable account. Calorii will not require a consumer to create a new account to submit a request, but may require use of an existing account or additional information reasonably necessary to authenticate the request.

• Calorii will respond without undue delay and generally within 45 days after receiving the request. Where reasonably necessary, Calorii may extend the response period once by an additional 45 days and will notify the consumer of the extension and the reason for it. Information provided in response to a request is free of charge up to twice annually, except where applicable law permits a reasonable fee or refusal for manifestly unfounded, excessive, or repetitive requests.

• A consumer may appeal a refusal by emailing support@calorii.com with the subject “Washington Consumer Health Data Appeal” and explaining the decision being appealed. Calorii will respond to the appeal in writing within 45 days. If an appeal is denied, Calorii will provide information about how to submit a complaint to the Washington State Attorney General.