WASHINGTON CONSUMER HEALTH DATA PRIVACY POLICY

Last Updated: 2026-09-15

This notice supplements the Lemuna Privacy Statement and applies to personal data defined as "consumer health data" subject to the Washington My Health My Data Act (MHMDA).

Consumer Health Data We Collect

As described in the Personal Data We Collect section of the privacy statement, the data we collect depends on how you interact with us, the services you use, and the choices you make. Because consumer health data is defined very broadly, many of the categories of data we collect are or could be considered consumer health data.

Such data may also be categorized as follows:

• Information about health-related conditions, symptoms, status, diagnoses, testing, or treatments (including menstrual cycle and pregnancy status information). For example, we may collect such information through questions and free text fields in our app.
• Information that could identify your attempts to seek health care services or information, including services that allow you to assess, measure, improve, or learn about your or another person's health. For example, your interactions with us could involve or describe queries concerning cycle tracking, pregnancy status, nutrition, wellness, fitness, medical conditions, or other health-related topics.
• Other information that may be used to infer or derive data related to the above or other health information.

Sources of Consumer Health Data

As described further in the Personal Data We Collect section of the privacy statement, we collect personal data (which may include consumer health data) directly from you, from your interactions with our products and services, and from third parties, including persons using Lemuna to support you.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data for the purposes described in the Our Use of Personal Data section of the privacy statement. We collect and use consumer health data as reasonably necessary to provide the product or service requested by our app users. This may include delivering and operating the products and their features, personalization of certain product features, ensuring the secure and reliable operation of the products and the systems that support them, troubleshooting and improving the products, and other essential business operations that support the provision of the products (such as analyzing our performance, meeting our legal obligations, developing our workforce, and conducting research and development).

If we use consumer health data for other purposes, we will update this notice, give you choices, and/or obtain your consent as required by law. See the Choice and Control of Personal Data section of the privacy statement and the How to Exercise Your Rights section below for more details on the controls and choices you may have.

Our Sharing of Consumer Health Data

We may share each of the categories of consumer health data described above for the purposes described in the Our Disclosure of Personal Data section of the privacy statement. In particular, we may share personal data, including consumer health data, with your consent or direction as reasonably necessary to complete any transaction or provide any product you have requested or authorized, as described in the previous section above.

For example, we may disclose data when we believe that doing so is necessary to comply with applicable law or respond to valid legal process.

We do not sell consumer health data, and we have not done so. Under the MHMDA, a sale of consumer health data requires your separate written authorization, and we do not seek one because we do not sell this data.

Third Parties with Which We Share Consumer Health Data

As necessary for the purposes described above, we share consumer health data with the following categories of third parties:

• Service providers. Vendors or agents ("processors") working on our behalf may access consumer health data for the purposes described above. For example, companies we've hired to help personalize our service or to provide or assist in protecting and securing our systems and services may need access to data to provide those functions.
• Parties to a corporate transaction. We may disclose consumer health data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.
• Government agencies. We will disclose consumer health data to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process.
• Other third parties. In certain circumstances, it may be necessary to provide data to other third parties, for example, to comply with the law or to protect our rights or those of our customers.
• Other users and individuals. If you use our services to interact with other users of the service, we will share data, including consumer health data, as directed by you and your interactions.

How to Exercise Your Rights

MHMDA provides certain rights with respect to consumer health data, including rights to access, delete, or withdraw consent relating to such data, subject to certain exceptions. You can request to exercise such rights using the various tools and mechanisms described in the Choice and Control of Personal Data section of the privacy statement. For example, you can access and make choices about your data through our app controls. And if you want to access or control consumer health data we process that is not available via those tools, you can always contact us at privacy@lemuna.app.

If your request to exercise a right under the MHMDA is denied, you may appeal that decision by emailing us at privacy@lemuna.app with "Privacy Appeal" in the subject line. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington Attorney General at https://www.atg.wa.gov/file-complaint.