Privacy Policy and Consumer Health Data Privacy Notice

Unfold Labs, Inc., a Delaware corporation ("Unfold," "we," "us," or "our"), provides the Unfold mobile application, the website located at tryunfold.ai, and related features and services together referred to as the "Services."

Unfold combines journaling, artificial intelligence, and information from wearable devices to help people better understand patterns in their mental and physical well-being.

This Privacy Policy explains:

• The information we collect
• How we use it
• When and why we disclose it
• How our artificial intelligence features work
• How we handle consumer health data
• The rights and choices available to you

This Privacy Policy also serves as Unfold's Consumer Health Data Privacy Notice for residents of Washington and Nevada.

1. Our privacy commitments

Journal entries, voice recordings, emotional reflections, and health information can be deeply personal. We design Unfold around the following commitments:

• We do not sell your personal information.
• We do not sell your consumer health data.
• We do not use your journal content or health information for advertising.
• We do not share your journal content or health information with data brokers.
• We do not permit OpenAI or Hume AI to use information submitted by Unfold to train their models.
• We ask for permission before sending applicable journal, voice, or health information to our artificial intelligence providers.
• You may withdraw that permission and delete your information.
• We do not attempt to re-identify information that we have de-identified.

Unfold is a wellness product. It is not a substitute for a doctor, therapist, emergency service, diagnosis, or medical treatment.

2. Information we collect

The information we collect depends on which Unfold features you use and which permissions you grant.

2.1 Account and profile information

When you create or manage an account, we may collect:

• Your email address
• Your name or display name, if provided
• Authentication credentials, tokens, or account identifiers
• Profile preferences
• Notification and communication preferences
• Your account creation and last-access dates

Authentication may be managed through Google Firebase or another authentication provider. Unfold does not ordinarily have access to your unencrypted password.

2.2 Journal and conversational content

We collect content you choose to create, submit, or save through the Services, including:

• Written journal entries
• Responses to journaling prompts
• Messages sent to Luma, Unfold's AI journaling and wellness assistant
• Mood entries and emotional check-ins
• Goals, priorities, reflections, and self-reported wellness information
• Voice recordings and their transcripts
• Feedback you provide about AI responses or other features

This content may reveal information about your physical health, mental health, emotions, relationships, beliefs, habits, work, or personal experiences.

We treat journal and conversational content as sensitive information.

2.3 Health and wellness information

With your permission, Unfold may connect to:

• Apple Health through HealthKit
• Health Connect on supported Android devices
• Other wearable or health-data services that we identify before requesting access

Depending on the feature, your device, and the permissions you grant, Unfold may import information such as:

• Heart rate
• Resting heart rate
• Heart rate variability
• Sleep duration, timing, and stages
• Steps and movement
• Exercise and physical activity
• Respiratory rate
• Blood oxygen measurements
• Age-related information
• Other health or fitness measurements that you expressly authorize

Unfold only requests access to health-data categories needed for features offered through the Services.

You may review or revoke these permissions through Apple Health, Health Connect, or your device settings. HealthKit information may not be used for advertising, and Health Connect allows users to manage access on a per-app basis.

2.4 Information derived from your activity

We may use information you provide and information imported with your permission to generate wellness-related measurements and observations, including:

• Stress scores
• Recovery scores
• Sleep scores
• Mood scores
• Trends and changes over time
• Journaling summaries
• Personalized reflections
• Associations between your habits, journal content, and wellness measurements

These results are estimates intended for personal wellness and self-reflection. They are not medical diagnoses.

2.5 Voice information

When you use a voice feature, we may collect and process:

• The audio you submit
• A transcript of the audio
• Technical information needed to transmit and process the recording

The transcript may be stored as part of your journal or conversation history.

Voice recordings may be transmitted to Hume AI as described in Section 5.

2.6 Subscription and purchase information

When you purchase a subscription through the Apple App Store or Google Play, the applicable store processes your payment.

Unfold and RevenueCat may receive information such as:

• Subscription status
• Product or plan purchased
• Purchase and renewal dates
• Expiration or cancellation status
• Trial eligibility and status
• Store transaction or receipt identifiers
• Country, currency, and storefront
• Refund information
• An app-specific user identifier

We do not receive your full payment-card number from Apple, Google, or RevenueCat.

2.7 Device, technical, and usage information

When you use the Services, we may automatically collect:

• Device type and model
• Operating-system and app version
• Browser type
• Internet Protocol address
• Approximate location inferred from your IP address
• Language and time-zone settings
• Device or app identifiers
• Screens viewed and features used
• Session times and interaction events
• Crash reports, diagnostic information, and performance logs
• Security, authentication, and fraud-prevention events

We use this information to operate, secure, troubleshoot, and improve the Services. We do not use health information or journal content to target advertisements.

2.8 Communications and support

When you contact us, participate in a survey, report a problem, or request support, we may collect:

• Your contact information
• The contents of your communication
• Screenshots, attachments, or diagnostic details you provide
• Records of how we handled your request

Please avoid including sensitive information that is not necessary for us to address your request.

2.9 Website information

When you visit tryunfold.ai, we may collect:

• IP address
• Browser and device information
• Pages viewed
• Referral source
• Website interactions
• Cookie and analytics information
• Information submitted through forms, quizzes, waitlists, or newsletter signups

If you provide your email address to receive quiz results or another requested resource, we use it to provide that resource.

We send promotional emails only where permitted by law and where you have opted in or otherwise agreed to receive them. You may unsubscribe through the link in any promotional email.

3. Where information comes from

We obtain information from the following categories of sources:

• Directly from you
• From your device
• From Apple Health or Health Connect, with your permission
• From wearable devices or services you connect
• From your interactions with Unfold
• From Apple, Google, and RevenueCat in connection with subscriptions
• From authentication, infrastructure, security, and analytics providers
• From customer-service communications
• From publicly available information when you intentionally provide a public link, such as a link included in a journal entry

We do not purchase sensitive journal or health information about you from data brokers.

4. How we use information

We use personal information for the following purposes.

4.1 Providing the Services

We use information to:

• Create and maintain your account
• Store and display journal entries
• Provide journaling prompts and reflections
• Import authorized health information
• Calculate stress, recovery, sleep, mood, and other wellness measurements
• Provide voice transcription
• Deliver AI-guided journaling and personalized insights
• Maintain continuity across your conversations with Luma
• Manage subscriptions and paid access
• Synchronize information across supported devices

4.2 Personalization

With your permission, we may use journal content, health information, wellness scores, and relevant prior interactions to personalize:

• Journaling prompts
• AI responses
• Wellness observations
• Trends and summaries
• Recommendations about reflective or wellness-related activities

You may turn off applicable AI personalization as described in Section 5.

4.3 Communications and support

We use information to:

• Respond to questions and requests
• Provide customer support
• Send security and account notices
• Send subscription and service communications
• Inform you about material changes
• Send promotional communications where permitted

4.4 Safety, security, and legal compliance

We use information as reasonably necessary to:

• Secure accounts and systems
• Detect fraud, abuse, unauthorized access, and malicious activity
• Investigate technical or security incidents
• Enforce our agreements
• Protect Unfold, our users, and others
• Comply with applicable legal obligations

4.5 Improving Unfold

We may use usage information, diagnostics, feedback, and aggregated or de-identified information to:

• Correct errors
• Improve performance and reliability
• Evaluate feature usefulness
• Develop new features
• Conduct internal analytics
• Understand general usage patterns

We do not use identifiable journal content or health information to train publicly available or general-purpose artificial intelligence models.

4.6 Legal bases for users in the EEA, United Kingdom, and Switzerland

Where applicable, we rely on one or more of the following legal bases:

• Consent: For importing health information, processing special-category information, sending applicable information to AI providers, and certain marketing activities
• Performance of a contract: To create your account and provide features you request
• Legitimate interests: To secure, maintain, troubleshoot, and improve the Services, where those interests are not overridden by your rights
• Legal obligations: To comply with applicable laws, legal requests, accounting requirements, and regulatory obligations
• Protection of vital interests: In limited circumstances involving an immediate threat to an individual's safety

You may withdraw consent at any time. Withdrawal does not affect processing that lawfully occurred before consent was withdrawn.

5. Artificial intelligence and voice features

5.1 Luma

Luma is Unfold's AI journaling and wellness assistant. You can interact with Luma in writing or through spoken voice conversations.

Luma may use information you provide to:

• Respond to journal entries
• Ask reflective questions
• Summarize patterns
• Generate personalized wellness insights
• Maintain relevant conversational context
• Help you reflect on your goals, emotions, sleep, activity, or stress

Luma does not independently access all information in your account. Unfold determines which information is relevant and permitted to be sent for a requested feature.

5.2 OpenAI

Unfold uses services provided by OpenAI, L.L.C. to support AI-guided journaling, responses, summaries, and personalized insights.

Depending on the feature you use and the permission you provide, Unfold may send OpenAI:

• Journal entries
• Messages and prompts submitted to Luma
• Voice transcripts
• Relevant prior conversation or journal context
• Mood or self-reported wellness information
• Summaries of wellness measurements, such as stress scores, sleep, resting heart rate, or heart rate variability
• Instructions needed to generate the response you requested

We configure requests so that they do not intentionally include your name, email address, or direct Unfold account identifier. However, text you write or speak may itself contain identifying or sensitive information.

OpenAI states that business API data is not used to train its models by default. OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring and security unless a different retention control, product configuration, endpoint rule, or legal obligation applies.

5.3 Hume AI

Unfold uses Hume AI, Inc. to process audio for voice transcription and for real-time voice conversations with Luma.

When you use a voice feature, Unfold may send Hume AI:

• Audio you choose to submit, including your side of a voice conversation
• Technical data necessary to establish and maintain the voice session
• Session instructions necessary to return a transcript or generate Luma's spoken responses

Hume AI's Empathic Voice Interface (EVI) generates Luma's spoken responses during voice conversations. As part of how EVI works, it analyzes vocal characteristics of your speech — such as tone, rhythm, and other expressive qualities — to understand you and respond naturally. These vocal characteristics may relate to your emotional state, and we treat them as sensitive information under this policy.

We configure these requests so they do not intentionally include your name, email address, or direct Unfold account identifier. Spoken content may nevertheless include personal information you choose to say.

For the Hume EVI service used by Unfold, we have enabled:

• Zero data retention
• Opt-out of data training

Under those settings, Hume AI does not retain EVI chat histories, voice recordings, or transcripts and does not use future EVI interactions to train its models. Hume AI may retain limited operational metadata, such as API usage information.

5.4 Your permission and control

Before Unfold sends applicable journal content, voice information, or health information to OpenAI or Hume AI, we request permission in the app.

If you decline, features that require the applicable processing may be unavailable. You may still use core features that do not require AI or voice processing.

You may withdraw permission through:

Settings → Luma & Your Data → Turn Off Luma Personalization

Withdrawing permission stops future information from being sent for the disabled features. It does not reverse processing that occurred before you withdrew permission.

Disconnecting Apple Health or Health Connect separately stops future health-data imports but does not automatically delete information that Unfold previously imported. You may delete previously imported information by deleting your account or submitting a deletion request.

5.5 AI-generated information

AI-generated responses may be inaccurate, incomplete, or inappropriate for your circumstances. Unfold does not use AI responses to make decisions about your eligibility for employment, housing, insurance, credit, education, or other services that produce legal or similarly significant effects.

6. How we disclose information

We disclose information only as described below.

6.1 Service providers

We use service providers to operate the Services. They may process information only as needed to perform services for Unfold and are subject to contractual confidentiality, privacy, and security obligations designed to protect the information and limit processing to our instructions and applicable law.

Our principal providers include:

Google Firebase and Google Cloud

We use Google services for functions that may include:

• Authentication
• Cloud database and storage
• Hosting and infrastructure
• App-performance monitoring
• Crash reporting
• Security and diagnostics

Depending on the service, Google may process account information, stored app information, device identifiers, usage events, logs, and diagnostic information.

Amazon Web Services (AWS)

We use AWS for cloud hosting and computing infrastructure for our backend services. Depending on the feature, AWS infrastructure may process journal content, voice transcripts, wellness measurements, account information, and related technical data as part of operating the Services, including preparing and transmitting requests to the AI providers described in Section 5.

OpenAI

OpenAI processes journal, conversational, transcript, and relevant wellness information for AI features, as described in Section 5.

Hume AI

Hume AI processes voice information for transcription and real-time voice conversations, as described in Section 5.

RevenueCat

RevenueCat helps Unfold:

• Validate purchase receipts
• Determine subscription status
• Manage trials, renewals, cancellations, and entitlements
• Make paid features available to eligible users
• Synchronize subscription information across supported platforms

Apple or Google processes the underlying App Store or Google Play payment. RevenueCat validates receipts and provides continuously updated subscription status.

Other operational providers

We may use additional providers for:

• Cloud infrastructure
• Email delivery
• Push notifications
• Customer support
• Security monitoring
• Error and crash reporting
• Internal communications
• Product analytics
• Legal, accounting, and professional services

These providers receive only the information reasonably necessary to perform their functions.

We may update our service providers as the Services evolve. Any new use of health information or journal content will be handled consistently with this policy and applicable consent requirements. If we change the artificial intelligence providers that process journal, voice, or health information, we will update this policy and request any consent required by law before the new provider receives your information.

6.2 Apple and Google

Apple and Google may process information connected with:

• App downloads
• Operating-system permissions
• App Store or Google Play subscriptions
• Payment processing
• Device health-data permissions
• Store analytics and diagnostics

Their handling of information is governed by their own privacy policies and platform terms.

6.3 Research

We may use aggregated or de-identified information for scientific or product research.

We do not provide identifiable journal content or consumer health data to independent researchers without obtaining any consent required by law.

Where we disclose de-identified information, we require recipients not to attempt to re-identify it.

6.4 Legal and safety disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

• Comply with a law, regulation, subpoena, court order, or valid legal process
• Protect the rights, property, or safety of Unfold, our users, or another person
• Detect, prevent, or investigate fraud, abuse, or security incidents
• Establish, exercise, or defend legal claims
• Enforce our terms and policies

We seek to disclose only the information reasonably necessary under the circumstances.

6.5 Business transactions

If Unfold is involved in a merger, acquisition, financing, restructuring, bankruptcy, or sale of some or all of its assets, personal information may be reviewed or transferred as part of that transaction.

Any recipient will be required to handle the information in accordance with applicable law. We will provide notice before personal information becomes subject to a materially different privacy policy and request additional consent where required.

7. What we do not do

Unfold does not:

• Sell personal information
• Sell consumer health data
• Share personal information for cross-context behavioral advertising
• Use journal content or health information for third-party advertising
• Provide journal content or health information to data brokers
• Use HealthKit or Health Connect information for advertising
• Use health information for unrelated marketing or commercial data mining
• Use journal content or health information to determine credit, insurance, employment, housing, or educational eligibility
• Permit OpenAI or Hume AI to use information submitted by Unfold to train their models
• Attempt to re-identify properly de-identified information

We do not display third-party behavioral advertisements in the Unfold mobile application.

8. How long we retain information

We retain personal information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, enforce agreements, and protect the integrity and security of Unfold.

8.1 Journal and health information

We generally retain journal content, imported health information, wellness measurements, and AI conversation history until:

• You delete the applicable entry or information
• You delete your account
• You submit a valid deletion request
• The information is no longer needed for the feature for which it was collected

Deleting information from Unfold does not delete the original information from Apple Health, Health Connect, or another connected service.

8.2 Account deletion

When you request account deletion, we begin deleting your personal information from active production systems promptly after verifying the request.

Copies may remain temporarily in encrypted backups until they are deleted or overwritten according to our backup-retention schedule. While information remains in backups:

• It is isolated from ordinary business use
• It is not restored except where needed for disaster recovery, security, or legal compliance
• If restored, applicable deletion requests will be reapplied where technically feasible

We also instruct applicable service providers to delete information associated with the request, subject to legal obligations, technical limitations, and the providers' applicable retention practices.

For consumer health data covered by Washington law, deletion from archived or backup systems will be completed no later than six months after we authenticate the deletion request.

8.3 AI-provider retention

OpenAI may retain API inputs and outputs for up to 30 days for abuse prevention and service security unless a different retention configuration, endpoint rule, or legal requirement applies.

Hume AI's zero-data-retention setting is enabled for the EVI service used by Unfold. Hume AI therefore does not retain EVI voice recordings, transcripts, or chat histories. Limited operational metadata may be retained.

8.4 Account, subscription, and legal records

We may retain limited records after account deletion when reasonably necessary for:

• Subscription and transaction reconciliation
• Fraud prevention
• Tax, accounting, or legal obligations
• Security investigations
• Establishing or defending legal claims
• Documenting privacy requests and consent history

These records are not used to recreate your deleted journal or health profile.

8.5 De-identified information

We may retain aggregated or de-identified information that no longer reasonably identifies you. We will not attempt to re-identify it.

9. Consumer Health Data Privacy Notice

This section applies to consumer health data governed by Washington's My Health My Data Act and Nevada's consumer-health-data law.

Washington law requires covered businesses to clearly disclose the categories, sources, purposes, and recipients of consumer health data and explain how consumers may exercise their rights.

9.1 Categories of consumer health data we collect

Depending on the features you use, consumer health data may include:

• Heart rate and resting heart rate
• Heart rate variability
• Sleep information
• Steps, exercise, and activity
• Respiratory rate
• Blood oxygen information
• Stress, recovery, sleep, and mood scores
• Emotional or mental-wellness reflections
• Journal content discussing physical or mental health
• Voice recordings or transcripts discussing health or emotions
• Vocal characteristics, such as tone and rhythm, processed during voice conversations
• Wellness goals, habits, and symptoms you report
• Inferences about your physical or mental wellness
• Information about your interaction with health and wellness features

9.2 Sources of consumer health data

We collect consumer health data from:

• You
• Your journal entries and conversations
• Your voice recordings
• Apple Health, with permission
• Health Connect, with permission
• Connected wearable devices or health services
• Measurements and scores derived by Unfold
• Your interactions with Unfold's wellness features

9.3 Why we collect and use consumer health data

We use consumer health data to:

• Provide features you request
• Import authorized wearable information
• Calculate wellness measurements
• Generate personalized insights
• Support journaling and reflection
• Show changes and trends over time
• Provide AI-assisted wellness features with permission
• Maintain, secure, and troubleshoot the Services
• Comply with applicable law
• Create aggregated or de-identified analytics

We do not use consumer health data for advertising or unrelated marketing.

9.4 Categories of consumer health data we disclose

Depending on the feature you request, we may disclose:

• Voice recordings, vocal characteristics, and associated technical information to Hume AI
• Journal content, transcripts, wellness summaries, and relevant health measurements to OpenAI
• Stored health and journal information to Google Firebase or Google Cloud as our infrastructure provider
• Journal content, transcripts, and health information processed on Amazon Web Services as our backend infrastructure provider
• Limited technical and diagnostic information to security and performance providers
• Information required by law to government authorities or legal recipients

9.5 Categories of recipients

Consumer health data may be disclosed to:

• Cloud-hosting and database providers
• AI-processing providers
• Voice-processing providers
• Security and technical-support providers
• Professional advisors
• Government authorities or legal recipients where required
• Parties involved in an applicable business transaction

The principal service providers receiving consumer health data are Google Firebase or Google Cloud, Amazon Web Services, OpenAI, and Hume AI.

Unfold does not currently disclose consumer health data to a corporate affiliate for the affiliate's independent use.

9.6 Sale of consumer health data

We do not sell consumer health data.

If our practices change, we will update this notice and obtain any authorization or consent required by law before selling consumer health data.

9.7 Consumer health-data rights

Subject to applicable law, you may request to:

• Confirm whether we collect, share, or sell your consumer health data
• Access your consumer health data
• Receive a list of the third parties or affiliates with whom we shared it, where required
• Withdraw consent for collection or sharing
• Delete your consumer health data
• Appeal our refusal to act on a request

To submit a request, email kings@tryunfold.ai with the subject line:

Consumer Health Data Request

To appeal a decision, email kings@tryunfold.ai with the subject line:

Privacy Request Appeal

Describe the decision you are appealing and any additional information you would like us to consider. We will respond within the timeframe required by applicable law and provide information about additional complaint options where required.

We may need to verify your identity before acting on a request.

Withdrawing consent stops future collection or disclosure covered by the withdrawal. It does not affect processing that lawfully occurred before withdrawal.

10. Your privacy rights and choices

10.1 Rights available to everyone

Regardless of where you live, you may ask us to:

• Provide access to your personal information
• Correct inaccurate account information
• Export information associated with your account
• Delete specific journal content
• Delete your account
• Withdraw AI permission
• Stop marketing emails
• Disconnect Apple Health or Health Connect
• Ask a privacy-related question or submit a complaint

Some rights may be limited where we must retain information for legal, security, fraud-prevention, or other lawful reasons.

10.2 Account deletion

You may delete your account through:

Settings → Manage Account → Delete Account

You may also request deletion by emailing kings@tryunfold.ai.

We may ask you to verify that you control the account before processing the request.

10.3 California residents

Where California privacy law applies, California residents may have the right to:

• Know the categories and specific pieces of personal information collected
• Know the sources, purposes, and categories of recipients
• Request correction
• Request deletion
• Request data portability
• Opt out of the sale or sharing of personal information
• Limit certain uses or disclosures of sensitive personal information
• Be free from discrimination for exercising privacy rights

We do not sell personal information and do not share it for cross-context behavioral advertising.

Because we do not engage in those activities, Unfold does not currently provide a "Do Not Sell or Share My Personal Information" link.

You may use an authorized agent where permitted by law. We may request proof of the agent's authority and verify your identity directly.

10.4 EEA, United Kingdom, and Switzerland

Where applicable, you may have the right to:

• Access your personal data
• Correct inaccurate personal data
• Delete personal data
• Restrict processing
• Object to certain processing
• Receive data in a portable format
• Withdraw consent
• Lodge a complaint with your local data-protection authority
• Request information about international-transfer safeguards

Unfold Labs, Inc. is the data controller for personal data processed under this policy. Our contact details appear in Section 17.

10.5 Marketing communications

You may unsubscribe from promotional email by using the unsubscribe link in the message.

We may continue sending non-promotional communications necessary to operate your account, such as security, billing, or material service notices.

10.6 Non-discrimination

We will not unlawfully discriminate against you for exercising a privacy right.

11. Information security

We use administrative, technical, and organizational safeguards designed to protect personal information.

These measures may include:

• Transport Layer Security for information transmitted between your device and our systems
• Encryption at rest through our infrastructure providers
• Access controls based on job responsibilities
• Multi-factor authentication for sensitive systems
• Logging and monitoring of administrative access
• Restricted access to production environments
• Secure development and code-review practices
• Dependency and vulnerability management
• Security incident-response procedures
• Periodic reviews of privacy and security practices
• Workforce confidentiality and security obligations

Employees and contractors do not have routine access to user journal or health information. Access may be granted where reasonably necessary to resolve a technical issue, respond to a support request, investigate a security incident, or comply with law.

No service can guarantee absolute security. You are responsible for protecting your account credentials and maintaining appropriate security on your devices.

If you believe your account or information has been compromised, contact kings@tryunfold.ai.

12. International data transfers

Unfold is operated from the United States. Personal information may be stored and processed in the United States and other countries where Unfold or its service providers operate.

These countries may have privacy laws different from those in your country.

Where required for transfers from the EEA, United Kingdom, or Switzerland, we use recognized safeguards, which may include:

• Standard Contractual Clauses
• Applicable United Kingdom transfer addenda
• Adequacy decisions
• Other legally recognized transfer mechanisms

13. Children

Unfold is intended for users aged 13 and older. In jurisdictions where applicable law requires a higher minimum age to use the Services without parental or guardian consent, you must meet that higher age. Unfold does not currently provide a parental-consent process.

We do not knowingly collect personal information from a child below the applicable minimum age.

If you believe a child has provided information to Unfold in violation of this section, contact kings@tryunfold.ai. We will investigate and take appropriate steps, which may include deleting the account and associated information.

Parents and guardians should understand that journal entries, voice features, health information, and AI conversations can contain sensitive information.

14. Website cookies and similar technologies

The Unfold mobile application does not rely on browser cookies in the same way as a website. It may, however, use software-development kits and similar technologies for authentication, subscriptions, diagnostics, security, and product operation.

Our website may use:

• Essential technologies needed to operate the website
• Functional cookies that remember preferences
• Analytics technologies that help us understand website use
• Security technologies that prevent abuse

Where required, we will request consent before using nonessential cookies.

You may control cookies through your browser settings. Disabling certain cookies may affect website functionality.

Unfold does not use journal content, health information, or consumer health data for behavioral advertising.

15. Third-party links and services

The Services may contain links to websites or services that Unfold does not operate.

This Privacy Policy does not govern those third parties. Review their privacy policies before providing information to them.

Connecting Apple Health, Health Connect, the App Store, Google Play, or another third-party service is also subject to that provider's terms and privacy practices.

16. Changes to this policy

We may update this Privacy Policy as our Services, technology, providers, and legal obligations evolve.

The effective date at the top indicates when the current version took effect.

If we make a material change, we will provide notice through an appropriate method, such as:

• An in-app notice
• An email
• A notice on our website
• A renewed consent request

If a change involves collecting, using, or disclosing a new category of consumer health data or using existing information for a materially different purpose, we will obtain consent where required before beginning that activity.

17. Contact us

Questions, concerns, complaints, appeals, and privacy requests may be directed to:

Unfold Labs, Inc.
Email: kings@tryunfold.ai
Website: tryunfold.ai
Mailing address: 269 24th St, Oakland, CA 94612, United States

For faster handling, use one of the following email subject lines:

• Privacy Request
• Consumer Health Data Request
• Privacy Request Appeal
• Security Concern