Consumer Health Privacy Policy

Effective date: June 6, 2025

This Consumer Health Data Privacy Policy (“Health Privacy Policy”) applies to Nara’s collection of “Consumer Health Data” (described below) under certain U.S. state consumer privacy laws including the Connecticut Data Privacy Act, Nevada’s Consumer Health Data Privacy Law, the Washington My Health My Data Act (as applicable, “Consumer Health Privacy Laws”) This Health Privacy Policy supplements Nara’s Privacy Policy available at “Privacy Policy” and any capitalized but not defined terms in this Health Privacy Policy will have the definitions set forth in the Privacy Policy or Consumer Health Privacy Laws.

Collection of Consumer Health Data

“Consumer Health Data” is broadly defined as personal information that is linked or reasonably linkable to a consumer and that identifies, or that Nara uses to identify, the consumer"s past, present, or future physical or mental health status. Consumer Health Data does not include information that is publicly available, de-identified, or aggregated.

Categories of Consumer Health Data We Collect

Nara only collects, processes, and discloses Consumer Health Data that you provide to us or as needed to provide you with the products and services you request. This may include:

• Information about you during and after your pregnancy such as:
  • Your mental and physical health,
  • Bodily functions, vital signs, symptoms, or measurements,
  • Use or purchase of prescribed medications,
  • Wellness routine, such as your mood and sleep patterns,
  • Other health data you voluntarily provide us.
• Information about your baby, that you provide to us, such as:
  • Health conditions, treatment, disease, or diagnosis;
  • Bodily functions, vital signs, symptoms, or measurements,
  • Development metrics, such as food consumption and sleep patterns,
  • Other health data you voluntarily provide us.

Categories of Sources of Consumer Health Data

We only collect Consumer Health Data from you when you use our Services, specifically our mobile application. You can learn more in the Categories of Sources of Personal Data section of our Privacy Policy.

Our Purposes for Collecting and Using Consumer Health Data

We may collect, use, disclose, or otherwise process your Consumer Health Data as reasonably necessary for various purposes as described in the Our Commercial and Business Purposes for Collecting Personal Data and Other Permitted Purposes for Processing Persona Data but primarily to provide you with products and services as you have requested or authorized related to the health of you and your baby during and after pregnancy.

We do not engaged in geofencing around stores that provides in-person health care services to: (1) identify or track you when seeking health care services; (2) collect your Consumer Health Data; or (3) send notifications, messages, or advertisements to you related to your Consumer Health Data or health care services.

How We Disclose Your Consumer Health Data

We may disclose your Consumer Health Data to certain Third Parties and Affiliates, which may include:

• Vendors. We may disclose your Consumer Health Data to contractors, analytics partners, business partners, and vendors to provide and improve our Services to you.
• Other Parties. We may disclose your Consumer Health Data to other parties that you explicitly gave us consent to do so.

Consumer Health Data Rights

If you are a Connecticut, Nevada, or Washington resident, you have rights with respect to your Consumer Health Data as described below. Your rights may be subject to certain conditions and exceptions under Consumer Health Privacy Laws.

• Access and Portability: You have the right to request confirmation of whether or not we are processing your Consumer Health Data and to access your Consumer Health Data and request a copy of your Consumer Health Data in a machine-readable format, to the extent technically feasible. If you are a Nevada or Washington resident, you may also request a list of all Third Parties and Affiliates with whom we have disclosed or sold your Consumer Health Data and their contact information.
• Correction: You have the right to correct inaccuracies in your Consumer Health Data, to the extent such correction is appropriate in consideration of the nature of such data and our purposes of processing your Consumer Health Data.
• Deletion: You have the right to request that we delete the Consumer Health Data that we have collected about you.
• Opt-Out of Sale, Targeted Advertising, and Profiling: You have the right to opt-out of sale and/or processing of your Consumer Health Data for targeted advertising and profiling purposes. We do not conduct such activities with your Consumer Health Data.
• Withdraw Consent: You have the right to withdraw consent from us collecting and disclosing your Consumer Health Data.
• Nondiscrimination: You have the right not to be discriminated against for exercising your rights as described above.
• Appeal: If we refuse to take action on your request within a reasonable period of time after receiving your request in accordance, you may appeal our decision. If we deny your appeal, you have the right to contact your state’s Attorney General (CT, NV and WA).

To exercise your rights, you must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data (for example, your Contact Data), and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria.

You may submit a Valid Request by emailing us at hello@nara.com.

If you have any questions about this section or whether any of the following rights apply to you, please contact us at hello@nara.com.