CONSUMER HEALTH DATA PRIVACY POLICY

Effective as of 1 Sep 2026

This Consumer Health Data Privacy Policy describes how SuppFit, operating supp.fit (“supp.fit”, “we”, “us” or “our”), collects, uses, and shares Consumer Health Data.

This policy applies to the extent that the Washington My Health My Data Act, Nevada consumer health data law, or other applicable U.S. consumer health privacy laws (“Consumer Health Data Laws”) apply to our processing of Consumer Health Data.

This policy supplements our general Privacy Policy. If there is a conflict between our Privacy Policy and this Consumer Health Data Privacy Policy regarding Consumer Health Data, this Consumer Health Data Privacy Policy will apply to the extent required by applicable Consumer Health Data Laws.

For purposes of this policy, “Consumer Health Data” means personal information that is linked or reasonably linkable to an individual and identifies, reveals, or may be used to infer information about that individual’s past, present, or future physical or mental health status, as defined by applicable Consumer Health Data Laws.

Not every category described below is collected from every user.

1. Consumer Health Data We Collect

Depending on how you use supp.fit, we may collect the following categories of Consumer Health Data.

1.1. Supplement and Medication Information

This may include information about:

• supplements you use or are considering;
• supplement names or categories;
• ingredients;
• dosages;
• schedules or routines;
• medications or other health-related products you choose to disclose; and
• supplement or medication interactions you ask about.

1.2. Health and Wellness Information

This may include information you choose to provide about:

• health conditions;
• symptoms;
• allergies or sensitivities;
• health and wellness goals;
• dietary information where it relates to your health;
• pregnancy or breastfeeding status;
• physical or mental health status; and
• other health-related information.

1.3. Health-Related Profile Information

Information such as:

• age;
• sex or gender; and
• other characteristics you provide

may constitute Consumer Health Data when we process that information together with health-related information or use it to provide health-related features.

1.4. Health-Related AI Interaction Data

If you use AI-enabled features, Consumer Health Data may include:

• health-related prompts;
• questions;
• messages;
• information you include in free-text inputs;
• supplement or medication questions;
• health-related information included in your request; and
• responses or results associated with your Account that contain or reveal health-related information.

1.5. Health-Related Usage Data

Your activity within the Services may constitute Consumer Health Data when it identifies or may be used to infer information about your health.

This may include:

• health-related searches;
• content you view or save;
• supplements, ingredients, conditions, symptoms, or medications you search for;
• health-related features you use; and
• other interactions that reveal or may be used to infer information about your health.

1.6. Health-Related Inferences

We may create, derive, or infer Consumer Health Data from information you provide or your interactions with the Services where necessary to provide a feature you request.

For example, information you provide may be processed to identify:

• potentially relevant supplement information;
• potential interactions;
• health-related preferences; or
• other health-related information relevant to your request.

2. Sources of Consumer Health Data

We may collect Consumer Health Data from the following categories of sources.

2.1. Directly from You

For example, when you:

• provide supplement information;
• provide health-related information;
• use AI-enabled features;
• perform searches;
• save information;
• contact customer support; or
• otherwise provide information through the Services.

2.2. Automatically Through Your Use of the Services

We may collect information about how you interact with the Services where that information constitutes or reveals Consumer Health Data.

For example, this may include health-related searches, content viewed or saved, or use of particular health-related features.

2.3. Consumer Health Data We Create, Derive, or Infer

We may create or infer Consumer Health Data from other information we collect where necessary to provide functionality you request.

This may include information generated through automated systems or AI-enabled features.

2.4. Third-Party Services You Choose to Use

We may receive Consumer Health Data from a third-party service if you specifically direct or authorize that service to provide such information to supp.fit.

3. How We Use Consumer Health Data

We may collect and use Consumer Health Data for the following purposes.

3.1. Providing the Services You Request

We may use Consumer Health Data to:

• provide requested features;
• respond to your questions;
• provide supplement-related information;
• provide health-related information;
• respond to AI interactions;
• provide information relevant to supplements or medications you identify;
• provide interaction or safety-related information;
• personalize functionality you request;
• maintain information or history that you choose to save; and
• provide customer support.

3.2. Operating and Maintaining the Services

We may process Consumer Health Data where reasonably necessary to:

• operate features you use;
• maintain your Account and saved information;
• diagnose problems affecting a feature you use;
• prevent unauthorized access or abuse; and
• maintain the reliability and security of the Services.

3.3. Legal and Compliance Purposes

We may use Consumer Health Data where permitted or required by law to:

• comply with applicable legal requirements;
• respond to valid legal process;
• establish, exercise, or defend legal claims; or
• protect the rights, safety, or property of supp.fit, our users, or others.

3.4. De-Identified Data

We may de-identify Consumer Health Data in accordance with applicable law.

We may use properly de-identified information for purposes such as:

• analytics;
• statistics;
• improving the Services;
• evaluating features; and
• research and development.

4. Purposes for Which We Do Not Use Consumer Health Data

We do not sell Consumer Health Data.

We do not sell Consumer Health Data to data brokers.

We do not use or disclose identifiable Consumer Health Data for third-party targeted advertising.

5. Consumer Health Data We Share

We may disclose Consumer Health Data where necessary to provide a product or service you request, with your consent where required, or as otherwise permitted or required by applicable law.

The categories of Consumer Health Data that may be disclosed include:

• supplement and medication information;
• health and wellness information;
• health-related profile information;
• health-related AI interaction data;
• health-related usage data;
• health-related inferences; and
• information you submit in connection with customer support.

The particular information disclosed depends on the Service or feature you use.

6. Categories of Recipients

Consumer Health Data may be disclosed to the following categories of recipients.

6.1. Cloud and Infrastructure Service Providers

These providers may process Consumer Health Data as necessary to host, store, secure, transmit, or otherwise operate the Services.

6.2. AI and Technology Service Providers

If you use an AI-enabled feature, providers that help us operate that feature may process information necessary to respond to your request.

This may include:

• your prompt or message;
• health-related information you include in it; and
• relevant context necessary to provide the feature.

6.3. Customer Support and Operational Service Providers

Service providers that assist us in responding to support requests or operating the Services may process Consumer Health Data where necessary for those purposes.

6.4. Professional Advisers

We may disclose Consumer Health Data where necessary to professional advisers, such as lawyers, auditors, or insurers, subject to applicable law.

6.5. Government Authorities and Other Legally Required Recipients

We may disclose Consumer Health Data where required or authorized by applicable law or valid legal process.

6.6. Recipients You Direct or Authorize

We may disclose Consumer Health Data to another person or service where you instruct us to do so or provide the consent required by applicable law.

6.7. Affiliates

We do not currently share Consumer Health Data with any affiliates.

If this changes, we will update this policy and obtain any consent required by applicable law before sharing Consumer Health Data with additional affiliates.

7. Collection of Consumer Health Data Across Other Websites or Services

We do not permit third parties to collect Consumer Health Data through supp.fit over time and across unrelated websites or online services for their own targeted advertising or profiling purposes.

8. Consent

Where required by applicable Consumer Health Data Laws, we collect Consumer Health Data only:

• with your affirmative consent for the specified purpose; or
• to the extent necessary to provide a product or service that you request.

Where applicable law requires separate consent before Consumer Health Data is shared, we will obtain that consent separately.

You may withdraw consent to future collection or sharing of Consumer Health Data as described below.

9. Sale of Consumer Health Data

supp.fit does not sell Consumer Health Data.

If our practices change, we will provide any disclosures and obtain any separate written authorization required by applicable Consumer Health Data Laws before selling Consumer Health Data.

10. Your Consumer Health Data Rights

Depending on applicable law, you may have the rights described below.

10.1. Confirm and Access

You may request confirmation of whether we are collecting, sharing, or selling Consumer Health Data relating to you.

You may also request access to Consumer Health Data relating to you.

Where required by law, you may request a list of third parties and affiliates with whom we have shared or sold your Consumer Health Data and available contact information for those recipients.

10.2. Withdraw Consent

Where we rely on your consent to collect or share Consumer Health Data, you may withdraw that consent with respect to future collection or sharing.

Withdrawal of consent may prevent us from providing a feature that requires the Consumer Health Data concerned.

10.3. Correction

You may request correction of inaccurate Consumer Health Data where applicable law provides that right.

10.4. Deletion

You may request deletion of Consumer Health Data relating to you.

Where required by law, we will also notify applicable affiliates, processors, contractors, and third parties that received the Consumer Health Data of your deletion request.

Information stored in archived or backup systems will be deleted within the period required by applicable law.

10.5. Appeal

If we refuse to take action on a Consumer Health Data request and applicable law gives you a right to appeal, you may appeal our decision by contacting:

support@supp.fit

and stating that you wish to appeal a Consumer Health Data privacy request decision.

We will respond to an appeal within the period required by applicable law.

If an appeal is denied, we will provide information about how to contact the applicable state Attorney General where required by law.

10.6. Non-Discrimination

We will not unlawfully discriminate against you for exercising rights provided by applicable Consumer Health Data Laws.

11. How to Exercise Your Rights

You may submit a Consumer Health Data privacy request by emailing:

support@supp.fit

Please state that your request relates to Consumer Health Data and describe the right you wish to exercise.

We may take reasonable steps to authenticate your identity before fulfilling a request.

We may ask you to:

• use the email address associated with your Account;
• confirm information associated with your Account; or
• provide additional information reasonably necessary to authenticate your request.

You are not required to create a new Account to exercise your Consumer Health Data rights.

We will respond without undue delay and within the period required by applicable law.

Where applicable, we may extend the response period as permitted by law and will notify you of the extension and the reason for it.

12. Changes to This Consumer Health Data Privacy Policy

We may update this Consumer Health Data Privacy Policy when our Consumer Health Data practices or applicable legal requirements change.

When we make changes, we will update the Effective date at the top of this policy.

Where required by applicable law, we may also notify you of material changes through:

• the Website;
• the Application;
• email; or
• another appropriate method.

If we intend to collect, use, or share additional categories of Consumer Health Data, use Consumer Health Data for additional purposes, or share Consumer Health Data with additional recipients in circumstances requiring your consent, we will provide the required disclosure and obtain consent before doing so.

13. Contact Us

If you have questions about this Consumer Health Data Privacy Policy or wish to exercise your Consumer Health Data rights, contact:

SuppFit

Email: support@supp.fit