Supplemental Privacy Notice

Matriarch – Supplemental Consumer Health Data Privacy Notice

Last Updated: January 1, 2025

Matriarch Health Inc., a Delaware corporation (collectively “Matriarch,” “we,” “us,” or “our”) is committed to respecting your privacy. This Consumer Health Data Privacy Notice (“Notice”) supplements our Privacy Policy and applies to the collection of “Consumer Health Data” as defined in relevant comprehensive consumer health data privacy laws, including Washington’s My Health My Data Act and Nevada’s Consumer Health Data Privacy Law.
Revisions to this Notice
We may revise this Notice from time to time. If we make any material changes to this Notice, we’ll notify you of those changes by posting them within the Services (as defined in the Privacy Policy) or by sending you an email or other notification, and we’ll update the “Last Updated” date above to indicate when those changes become effective.
In the event of a conflict between any other policy, statement, or notice and this Notice, this Notice will prevail as to Consumer Health Data collected any comprehensive state consumer health data privacy law.
Scope of Notice
This Notice applies to users of our Services in states with laws pertaining to Consumer Health Data the specifically require Consumer Health Data Policies. For purposes of this Notice, “Consumer Health Data” means personal information that (1) is linked or is reasonably linkable to a consumer and (2) that identifies past, present, or future physical or mental health status. Consumer Health Data includes information about medical conditions, as well as non-medical information such as biometric data, information about use of non-prescription health-related products, and attempts to access reproductive or gender-affirming care. This Notice does not apply to any personal information that does not fall under this definition.
Categories and Uses of Consumer Health Data We Collect
Matriarch only collects your Consumer Health Data as needed to provide you with the Services or with your explicit consent.

Matriarch may collect the following categories of Consumer Health Data:

Individual health condition, treatment, disease, or diagnosis information;
Social, psychological, behavioral, and medical intervention information;
Health-related surgery or procedure information;
Use or purchase of prescribed medication information;
Bodily function, vital sign, symptoms, or measurement of health information;
Diagnosis or diagnostic testing, treatment, or medication information;
Biometric data;
Information about your access to healthcare, including precise location information that could reasonably indicate an attempt to acquire or receive health services or supplies;
Information processed to associate or identify an individual with the data listed above that is derived or extrapolated from non-health information;
Information that could identify your attempt to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person’s health. For example, we collect your search queries or quiz responses on the Services, which may include information concerning your health and wellbeing, mental health, medical conditions, or other health-related topics;
Reproductive or sexual health information; or
Information about gender-affirming care.

Matriarch may process the categories of Consumer Health Data described above to the extent necessary to provide the Services, or with your consent, including:

To determine and verify eligibility for the Services;
To provide the Services to you;
To administer, manage, analyze, and improve the Services;
To analyze and better understand your needs, preferences, and interests, as well as those of other consumers;
To conduct internal business analysis and market research; or
To comply with legal and regulatory obligations.

Sources of Consumer Health Data

Matriarch collects Consumer Health Data from the following sources:

Directly from you, if you:

request health-related products and services;
enroll in our biometric access programs;
register to use the Services;
join our email lists or loyalty programs; or
volunteer the information via the Services, or in connection with surveys or promotions.

Indirectly from you (gathered directly by social media, other websites, or apps) if you:

interact with us by using the Services;
enable certain App (as defined in the Terms of Use) functions, such as location tracking; or
like, follow, or comment about health-related products on our social media sites.

From our vendors, suppliers, consultants, professional advisers, and other third parties, when such data is necessary for the purpose of managing and operating our business.
From third parties who provide program enrollment, benefit verification, or product fulfillment services.
From health insurance companies or other payors, when:

Information is necessary for the purpose of providing our Services;
Information is necessary to determine program eligibility; or
Information is necessary to comply with legal and regulatory obligations.

From your authorized legal representatives, family members, or caregivers.

Why We Collect and Use Consumer Health Data
We collect and use Consumer Health Data for the purposes and in the manner described in the “Information That We Collect” and the “How We Use the Information” sections of our Privacy Policy. Primarily, we collect and use Consumer Health Data as reasonably necessary to provide you with the Services you have requested or authorized. This may include delivering and operating the Services and their features, personalization of certain Services features, ensuring the secure and reliable operation of the Services and the systems that support them, troubleshooting and improving the Services, and other essential business operations that support the provision of the Services (such as analyzing our performance and meeting our legal obligations). We may also use Consumer Health Data for other purposes for which we give you choices and/or obtain your consent as required by law.
Consumer Health Data that We Share with Third Parties
Matriarch only shares or discloses your Consumer Health Data as needed to provide you with the Services or with your explicit consent. We may share or disclose any or all the above categories of Consumer Health Data listed in the Categories and Uses of Consumer Health Data We Collect section of this Notice to the following entities, who shall use the data only as permitted for the purposes set forth above, and within the bounds of our contracts with them:

Business collaborators;
Promotion partners;
Development partners;
Marketing and advertising agencies;
Social media companies and platforms;
Service providers (including those hosting or analyzing data on our behalf, those assisting with fraud prevention, those assisting in program administration, and those who assist with our information technology and security programs);
Emergency personnel;
Authorized/legal representatives, family members, and caregivers;
Third parties (including those with whom Matriarch has joint marketing and similar arrangements, those who provide marketing and data analytics services, those who provide program enrollment or product fulfillment, payment, and authorization, other third parties as necessary to complete transactions and provide products/services, or where required by law);
Other users of the Services;
Matriarch lawyers, auditors, and consultants; or
Legal and regulatory bodies.

In addition, we may share or disclose Consumer Health Data as permitted or required by law, such as (i) to an acquiring organization if we are involved in a sale or a transfer of our business, (ii) in situations that may involve violations of our terms of use or other rules, (iii) to protect our rights and the rights and safety of others, (iv) as needed to support external auditing, compliance and corporate governance functions, (v) as needed to preserve the integrity or security of our systems, or (vi) to investigate, report, or prosecute those responsible for any action that is illegal under applicable state or federal law.
Your Consumer Health Data Privacy Rights
Subject to certain legal limitations and exceptions, you have the following rights with respect to any Consumer Health Data we may collect about you:

To confirm whether we are collecting, sharing, or selling your Consumer Health Data;
To access such data, including to receive a list of affiliates or specific third parties with whom we have shared or sold your information, along with contact information such as an active email address for each third party;
To review and request corrections to your Consumer Health Data;
To withdraw consent from our collection or sharing of your Consumer Health Data; and
To request that we delete your Consumer Health Data.

You may submit a request pursuant to any of these rights by contacting us at support@matriarchapp.com.
You are entitled to exercise the rights described above free from discrimination. We will not discriminate against you because you exercise your rights. We will make reasonable efforts to respond promptly to your requests in accordance with applicable laws. Please allow 45 days for a response. We may, after receiving your request, require additional information from you to authenticate your request and verify your identity. Please be aware that we may be unable to afford these rights to you under certain circumstances, such as if we are legally prevented from doing so.
If we deny your request, you have the right to appeal that denial by contacting us at support@matriarchapp.com. We will process and respond to your appeal within the time permitted by applicable law. If you are a Washington resident and your appeal is unsuccessful, you may file a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

Review and Revision of Consumer Health Data
If you would like to review and/or revise your Consumer Health Data, you may submit a request to us via any of the methods listed in this Notice.