Washington Consumer Health Data Privacy Policy

Effective Date: May 21, 2026

This Washington Consumer Health Data Privacy Policy (“Policy”) supplements the information in the Cal AI Privacy Policy. It applies solely to Washington consumers who interact with us in an individual or household capacity and applies only to personal information defined as “consumer health data” under the Washington My Health My Data Act. Capitalized terms that are not defined here have the same meaning as in the Cal AI Privacy Policy. This Policy describes what consumer health data we collect, how we collect and use it, who we disclose it to and why, and the choices you may have regarding our use or disclosure of your consumer health data.

1. Categories of Consumer Health Data We Collect

We may collect or receive the categories of consumer health data listed below.

• Health and wellness information submitted as part of your account.
• Survey and questionnaire responses you submit (if you choose to participate in our research), including, but not limited to, information about your demographics and health (such as conditions, diagnoses, medications, or other similar information), if you choose to share such information.
• Food and Activity Data:
  • Dietary habits and dietary restrictions;
  • Fitness activity, fitness goals, and fitness level;
  • Body measurements (e.g., height and weight), Body Mass Index, calorie count, heart rate, and other measurements related to physiological condition.
• Health data from third-party applications and wearable devices that you may connect with your Cal AI account and subject to the permissions you may set on those third-party applications and wearable devices (“Connected Health Device Data”), including:
  • Heart rate and physical activity information;
  • Information about the types of physical activities you engage in, and the duration of your physical activity;
  • Glucose information;
  • Other information about your activity as may be collected from your wearable device and applications (if connected) or self-reported.
• Profile Information that includes health data: such as demographic information, age, gender, image or photo, etc. from your Cal AI account profile, which we may combine with any personal information or other data we have collected.
• Other similar information, as may be requested by us, that is specific to the relevant products or Services you engage with.

2. Categories of Sources From Which We Collect Consumer Health Data

We may obtain consumer health data from different sources, as described in the Information We Collect About You section of the Cal AI Privacy Policy. With respect to consumer health data, we collect that from the following sources:

• Provided directly by you;
• Collected from a device associated with you or a third-party application you have authorized to share information with us;
• Collected from your interactions with our apps, Services, platforms, etc.;
• Received from third parties such as other Cal AI users, business partners, customers, marketing and advertising partners, analytics providers, operating systems, social media platforms, public databases, and service providers.

3. Purposes for Collecting Your Consumer Health Data

We may collect and use consumer health data for one or more of the following purposes:

• Provide, administer, personalize, manage, develop, improve, repair, and maintain our products and Services;
• Communicate with you, including to respond to your questions and requests, to request feedback from you, and to send you administrative information about your account such as information regarding the products and Services you use and the changes to our terms, conditions, and policies;
• Ask you to complete surveys and questionnaires and help us better understand how Cal AI users access and use the Services and for other research and analytics purposes;
• Combine the information collected, including from third-party applications and services, with other information about you or the Cal AI community;
• When we have your consent, such as pursuant to your participation in a study, research, or other program;
• De-identify, tokenize, or aggregate your information (or otherwise render the information so you are not reasonably identifiable), or to create or derive datasets, as part of the Services and for other purposes consistent with the purposes for which the information was collected and Cal AI’s mission;
• Personalize, advertise, and market our products and services to you, including the Services;
• Generate inferences about you, such as your interests or preferences; and
• Comply with our legal obligations and internal policies.

4. Sharing of Consumer Health Data

a. Categories of Consumer Health Data that is Shared

We may share each of the categories of consumer health data described above. In particular, we may share personal data, including consumer health data, with your consent, to complete transactions or provide products or services you have requested, and for the purposes described in this Policy.

b. Categories of Third Parties with Whom Consumer Health Data is Shared

We may share consumer health data with business partners such as those providing advertising and technology services, governmental agencies and legal bodies, and purchasers of or successors to our business or assets.

5. Your Washington Consumer Health Data Rights

Washington residents have the right to (1) request access to their consumer health data; (2) confirm whether we have disclosed or sold their consumer health data; (3) delete their consumer health data; or (4) withdraw their consent or authorization relating to such data. You can submit these requests to privacy@calai.app.

6. How To Submit an Appeal

To appeal our decision on your Washington Consumer Health Data Rights request, you may contact us by using the contact information listed below or by emailing us at privacy@calai.app. In submitting your appeal, please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately review and address it. We will respond in accordance with applicable law.

7. Contact Us

For any questions, complaints, or inquiries regarding this Policy, or our privacy practices, please contact us at:

Cal AI, Inc.
ATTN: Cal AI, Inc., Privacy/Legal
100 Congress Avenue, Suite 400
Austin, TX 78701