Pepjoy Consumer Health Data Privacy Policy

1. Scope

This policy applies to consumer health data as defined by the Washington My Health My Data Act (the "MHMDA") when you use the Pepjoy mobile application and related services (the "Services"), operated by Kythe LLC ("Kythe," "we," "us," or "our"). It supplements the Pepjoy Privacy Policy. If this policy and the Pepjoy Privacy Policy conflict with respect to consumer health data covered by the MHMDA, this policy controls.

2. Consumer Health Data We Collect

Under the MHMDA, "collect" includes accessing, retaining, receiving, acquiring, deriving, or otherwise processing consumer health data. We collect the following categories of consumer health data that you choose to provide or create through Pepjoy:

• Medication details you enter, including medication name, prescribed dose, dose schedule, and, for compounded medications, vial details you record such as concentration, pharmacy name, and lot number.
• Dose logs, including injection site selections and notes.
• Weight entries you log over time.
• Nutrition entries: water, protein, and fiber.
• Feeling entries, including free-text notes.
• Onboarding and goal information you enter, including first name, current and goal weight, target date, and goal selections.
• Optional photos you capture or attach.
• Optional profile details such as height and sex.
• Consumer health information you choose to include in a support request or other communication with us.

3. Sources

You are the source of the consumer health data you enter, select, capture, or otherwise provide in the App or in communications with us. We do not currently collect consumer health data about you from data brokers, advertising networks, Apple Health, or other unrelated third parties. If you enable Apple Health functionality, Pepjoy writes weight entries that you log in Pepjoy to Apple Health; the current version does not request or read data from Apple Health.

4. Why We Collect It

We collect and use consumer health data to provide the Pepjoy features you request, including recording and displaying your entries, generating your history and reports, syncing Pepjoy data across your devices through your private iCloud, supporting optional Apple Health functionality, responding to support requests, and protecting the security and integrity of the Services. We do not use consumer health data for advertising, sell it, or use it to train artificial intelligence or machine-learning models.

We collect consumer health data only with your consent or to the extent necessary to provide a product or service you request, as permitted by the MHMDA. Where the MHMDA requires consent for collection or sharing, we will obtain that consent before the collection or sharing occurs. We will not collect, use, or share additional categories of consumer health data, or use consumer health data for additional purposes, without first updating this policy and obtaining affirmative consent where required by law.

5. How We Share It

We do not sell consumer health data, and we do not share it for advertising. The categories of consumer health data that may be disclosed or shared are the data described below. The categories of third parties that can process it are:

• Apple, which provides the iCloud, CloudKit, and HealthKit infrastructure used by the App. Pepjoy data included in the synced store—including medication information, dose logs, weight, nutrition, feelings, photos, and related entries—syncs through Apple's CloudKit service to your private iCloud. If you enable Apple Health functionality, Pepjoy also writes the weight entries you log to Apple Health.
• Our email or customer-support service provider, if you contact us and choose to include consumer health data in your message, as needed to respond to your request.

We have no affiliates with whom we share consumer health data.

6. Your Rights

If the MHMDA applies to you, you have the right to:

• Confirm whether we collect, share, or sell consumer health data concerning you, and access it, including a list of third parties and affiliates with whom we have shared or sold it and an active email address or other online contact mechanism for those recipients. Your Pepjoy data is also visible in the App at any time.
• Withdraw consent from future collection or sharing of your consumer health data where consent is the basis for processing; you may also stop logging, delete individual entries, or revoke Apple Health access in iOS Settings.
• Delete your consumer health data. Open the Profile tab, scroll to the bottom, tap "Delete all my data," and confirm "Delete everything." This removes your Pepjoy data from your device and, via CloudKit, from your private iCloud. It does not delete weight entries that Pepjoy previously wrote to Apple Health; those entries are managed through Apple Health. You may also submit a deletion request using the method in Section 7.
• Not be discriminated against for exercising these rights.

7. How to Exercise Rights and Appeals

Most rights work directly in the App with no request needed. For anything else, email [email protected]. We may take reasonable steps to verify your request and will respond without undue delay and within 45 days, subject to one additional 45-day extension when reasonably necessary and with notice to you. If we decline a request, you may appeal by replying to our decision with the word "Appeal." We will respond to the appeal within 45 days. If we deny the appeal, we will provide a method for you to contact the Washington Attorney General to submit a complaint.

8. Changes

If we materially change this policy, we will update the "Last Updated" date and provide notice as appropriate. Before we collect, use, or share additional categories of consumer health data, or use consumer health data for additional purposes not disclosed here, we will update this policy and obtain affirmative consent where required by the MHMDA.

9. Contact

Kythe LLC 210 Lakeside Dr Newnan, GA 30263 USA Email: [email protected]