Privacy Policy

Effective Date: March 11, 2026 · Last Updated: March 11, 2026

UniqueHuman Inc., together with its subsidiaries and affiliates (collectively, "UniqueHuman," "Company," "us," "we," or "our") is committed to protecting the privacy of Personal Data (i.e., information reasonably related to a specific individual). This Privacy Notice describes how we process Personal Data collected through our mobile applications, and other online interactions and communications such as email (collectively, our "Digital Properties"); in-person events; and other online and offline interactions.

This Privacy Notice applies to information we collect about individual consumers, such as general users of our mobile application ("Individuals") as well as information we collect about the personnel of our business partners, including vendors and business customers, in business-to-business interactions ("Business Contacts"). However, this Privacy Notice does not apply to:

•Information about our current/former employees, applicants, and other individuals who interact with us for employment-related purposes; or
•Protected health information subject to the Health Insurance Portability and Accountability Act. Please review our Notice of Privacy Practices for additional information on our processing of protected health information.

Whenever you interact with us on behalf of another individual or entity, such as if you refer a friend to us, you must obtain their consent (or have the legal authority without consent) to share their Personal Data with us.

Changes: We may update this Privacy Notice from time to time. Any updated Privacy Notice will be effective when posted. Please check this Privacy Notice periodically for updates. If required by law, we will obtain your consent or contact you directly if there are material changes to this Privacy Notice.

1. Sources of Personal Data

We collect Personal Data about you from the following sources:

•Directly from you. We may collect Personal Data you provide to us directly, such as when you create an account, interact with our mobile application, communicate with us through our AI-powered chat or voice features, upload documents, or contact us for support.
•Data collected automatically. We may automatically collect information or inferences about you when you interact with our Digital Properties. This may include information about how you use and interact with our mobile application, information about your device, and health data from connected sources such as Apple HealthKit.
•From third-party sources you choose to connect. We may collect Personal Data from third-party sources you explicitly authorize, such as Apple HealthKit, fitness trackers and wearables, Apple WeatherKit, and healthcare providers via FHIR APIs and health information exchanges (when available), subject to your settings and permissions. These integrations are strictly opt-in and can be disconnected at any time.
•From publicly available sources. We may collect Personal Data about you from publicly available sources, such as public profiles and websites.

We may combine information that we receive from the various sources described in this Privacy Notice, including third-party sources, and use or disclose the combined information for the purposes identified below.

2. Types of Personal Data We Collect

We may collect the following types of Personal Data about you, such as when you interact with the UniqueHuman mobile application. Except as otherwise specified, we may collect this Personal Data from both Individuals and Business Contacts:

•Identifiers, such as your name, email address, and device identifiers (e.g., device model, device identifier).
•Records about you, such as the content, timing, and method of communications you have with us, including interactions with our AI-powered chat and voice features; and information you share with or upload to our Digital Properties, such as medical documents and journal entries.
•Demographic information, such as age (including date of birth) and biological sex.
•Commercial information, such as information related to subscriptions, products or services obtained or considered, or other purchasing or consuming histories or tendencies.
•Internet or other electronic network activity information, such as your preference information, account settings (including any default preferences), and other information regarding your interactions with and use of our Digital Properties.
•Non-precise geolocation data, such as your location as derived from your IP address.
•Audio and electronic information, such as voice inputs you choose to submit through our voice journaling feature. Voice audio is processed in real time for transcription and is not stored or recorded by UniqueHuman.
•Professional or employment-related information (for Business Contacts), such as job title, organization, professional licenses, credentials, or affiliations, and other professional information.
•Education information (for Business Contacts).
•Inferences drawn from any of the information we collect about your health patterns, migraine triggers, and behavior, including to provide personalized health insights and predictions.

Sensitive Personal Data

•Account log-in information.
•Precise geolocation, such as location based on device GPS. We collect location data solely for the purpose of obtaining local weather and environmental conditions (such as barometric pressure, temperature, and humidity) to analyze potential migraine triggers. Location data is not used for tracking, advertising, or any purpose unrelated to your health insights.
•Information about your health, including:

–Health and fitness data from Apple HealthKit, fitness trackers, wearables, or similar platforms, if you choose to connect them, such as heart rate, heart rate variability, resting heart rate, blood oxygen, respiratory rate, VO2 max, blood pressure, blood glucose, body temperature, body mass, body fat percentage, step count, active and basal energy, exercise minutes, distance, flights climbed, and stand hours.
–Sleep data, including sleep session duration and stage breakdown (deep, REM, core, awake).
–Mindfulness session data (meditation, breathing exercises).
–Menstrual and reproductive health data, including menstrual flow and cycle day information, if you choose to share this data through Apple HealthKit. We treat this as sensitive health information subject to heightened protections.
–Health records retrieved from healthcare providers via FHIR APIs and health information exchanges, with your authorization (when available).
–Medical documents you choose to upload, such as lab results, clinical reports, and other health records.
–Migraine journal entries, including pain intensity, symptoms, triggers, medications, and functional impact.
–Medication information, including names, dosages, timing, effectiveness, and recurrence.

3. How We Use Personal Data

We may use Personal Data for the following purposes:

•To provide you products and services, such as making our mobile application and other products and services available to you; registering, verifying, and maintaining your account with us; providing AI-powered health chat and voice journaling features; processing and analyzing your health data to deliver personalized migraine predictions, insights, and recommendations; generating clinical reports; communicating with you (including responding to requests, complaints, and inquiries); and providing similar services or otherwise facilitating your relationship with us.
•For our internal business purposes, such as day-to-day operation of our business; maintaining internal business records; enforcing our policies and rules; auditing; and IT security and administration.
•For our internal research and product improvement purposes, such as verifying or maintaining the quality or safety of our products or services; improving our products or services; designing new products and services; evaluating the effectiveness of our features; and debugging and repairing errors with our systems, networks, and equipment.
•For legal, safety, or security reasons, such as complying with legal, reporting, and similar requirements; investigating and responding to claims against us; for the establishment, exercise, or defense of legal claims; protecting our, your, and third parties' safety, property, or rights; detecting, preventing, and responding to security incidents; and protecting against malicious, deceptive, fraudulent, or illegal activity.
•In connection with a corporate transaction, such as if we acquire assets of another business, or sell or transfer all or a portion of our business or assets, including through a sale in connection with bankruptcy and other forms of corporate change.
•For marketing and communications, such as sending you newsletters, surveys, questionnaires, promotions, or information about our products or services. You can unsubscribe from our email marketing via the link in the email, by responding "STOP" to text messages, or by contacting us using the information in Section 9 (Contact Information) below.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law.

4. How We Disclose Personal Data

We may disclose Personal Data to third parties, including the categories of recipients described below:

•Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, business units, and other companies that share common ownership.
•Service providers that work on our behalf to provide the products and services you request or support our relationship with you, such as cloud hosting providers (Amazon Web Services), AI service providers (see Section 5), error monitoring and performance services (Sentry, Firebase Crashlytics), analytics providers (Firebase Analytics), voice transcription services, and companies that provide business support services.
•Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
•Law enforcement, government agencies, and other recipients for legal, security, or safety purposes, such as when we share information to comply with law or legal requirements, to enforce or apply our Terms of Service and other agreements or policies, and to protect our, our customers', or third parties' safety, property, or rights.
•Other entities in connection with a corporate transaction, such as if we acquire assets of another entity, or sell or transfer all or a portion of our business or assets, including through a sale in connection with bankruptcy and other forms of corporate change.
•Entities to which you have consented to the disclosure.

What We Do Not Do

UniqueHuman does not sell your Personal Data. We do not share your Personal Data with advertisers, advertising networks, social media platforms, data brokers, or any third party for their own marketing purposes. We do not purchase Personal Data from data brokers. Your health data is used solely to provide and improve our services to you.

5. Artificial Intelligence Data Uses and Disclosures

In addition to the descriptions of how data is collected, used, and disclosed above, we may also collect, use, and disclose data for purposes involving our use of artificial intelligence ("AI"), as described below:

Types of Personal Data AI May Process

In addition to the data types listed in Section 2, and depending on how you use our Digital Properties and the features you enable, we may also process the following Personal Data related to AI products and services:

•Messages and other inputs you submit through our chat feature;
•Voice inputs you choose to submit (for example, through voice journaling), which are transcribed in real time and not stored as audio;
•Health records, medical documents, and other health information you choose to upload, input, or connect; and
•Health and fitness information from third-party sources you choose to connect (for example, Apple HealthKit), subject to your settings and permissions.

How We Use Personal Data Related to AI Services

We use AI to provide, maintain, and improve our services, including generating personalized health insights, migraine predictions, journal analysis, and clinical reports. UniqueHuman does not use your Personal Data to train AI models. Your data is used for real-time inference and service delivery only. UniqueHuman personnel may access or review Personal Data to provide the services, respond to requests, ensure safety, comply with law, and improve service quality.

How We Disclose Personal Data Related to AI Services

In addition to the disclosures described in Section 4, we may also disclose your Personal Data to the following parties in relation to AI products and services:

•Service Providers, such as those that help us provide AI functionality and related services (e.g., cloud hosting and safety, security, and monitoring tools).
•Third-party AI providers, such as those that provide AI-assisted features. We have Business Associate Agreements (BAAs) and data processing agreements with our AI providers that prohibit them from using your data to train their AI models. Your data is processed solely for providing the requested service and is not retained by these providers for model improvement purposes.

Your Choices and Controls

You may choose what Personal Data to submit through our Digital Properties and which integrations to connect. You may revoke permissions or disable certain features through your device settings or within our Digital Properties, as applicable.

6. Data Security and Data Retention

Although we maintain reasonable security safeguards, including encryption of data in transit and at rest, no security measures or communications over the Internet can be 100% secure, and we cannot guarantee the security of your information.

Data Retention for Active Accounts

Your Personal Data will be retained for the duration of your account to fulfill the purposes we have outlined above, unless we are required to do otherwise by applicable law. This includes retaining your Personal Data to provide you with the products or services you have requested; maintain our business relationship with you; improve our business over time; and ensure the ongoing legality, safety, and security of our services and relationships.

Data Retention After Account Deletion

When you delete your account through our mobile application, all of your Personal Data — including health records, conversation history, journal entries, medical documents, location data, knowledge graph data, and all associated information — is permanently and immediately deleted from our systems. This deletion is irreversible and cannot be undone. We may retain limited anonymized or aggregated data that cannot be used to identify you, as permitted by law.

7. Children's Privacy

Our Digital Properties are intended for individuals 18 years of age and older. We enforce age verification during account creation and block users under 18 from creating accounts. The Digital Properties are not directed at, marketed to, nor intended for, children under 18 years of age. We do not knowingly collect any information, including Personal Data, from children under 18 years of age. If you believe that we have inadvertently collected Personal Data from a child under the age of 18, please contact us at the address in Section 9 (Contact Information) below, and we will take prompt steps to delete the information.

8. External Links

Our Digital Properties may contain links to external sites or other online services that we do not control. We are not responsible for the privacy practices or data collection policies of such third-party services. You should consult the privacy notices of those third-party services for details on their practices.

9. Contact Information

If you have questions regarding this Privacy Notice, please contact us at:

Privacy Inquiries: privacy@uniquehuman.ai

General Support: contact@uniquehuman.care

privacy@uniquehuman.ai

10. Supplemental U.S. State Privacy Disclosures

Your Privacy Rights

Depending on where you reside, you may have certain rights regarding your Personal Data under applicable state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights may include:

•Right to Know. You have the right to request information about the categories and specific pieces of Personal Data we have collected about you, as well as the categories of sources, purposes for collection, and categories of third parties with whom we share your Personal Data.
•Right to Delete. You have the right to request deletion of your Personal Data. You can delete your account and all associated data directly within the UniqueHuman mobile application through Settings. Deletion is immediate and permanent.
•Right to Correct. You have the right to request correction of inaccurate Personal Data. You can update your profile information directly within the application.
•Right to Opt Out of Sale or Sharing. UniqueHuman does not sell or share your Personal Data for cross-context behavioral advertising purposes. Because we do not engage in these activities, there is no need to submit an opt-out request.
•Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

To exercise your rights, you may contact us at privacy@uniquehuman.ai. We will verify your identity before processing your request.

California Shine the Light

If you are a California resident, California Civil Code Section 1798.83 (the "Shine the Light" law) permits you to request information about our disclosure of your Personal Data to third parties for their direct marketing purposes. UniqueHuman does not share Personal Data with third parties for their own direct marketing purposes.

California Eraser Law

Any California residents under the age of eighteen (18) who have posted content or information on our Digital Properties can request removal by emailing us at privacy@uniquehuman.ai, detailing where the content or information is posted, and attesting that you posted it. We will make reasonable, good faith efforts to remove the post from prospective public view or anonymize it so the minor cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content that we do not control.

San Francisco, California