Updated on: June 21, 2025

At UniqueHuman Inc. ("UniqueHuman," "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website [https://uniquehuman.care], our mobile app, or any associated services (collectively, the “Services”).

This Policy is designed to comply with the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), and other applicable privacy regulations. Our approach emphasizes transparency, user control, and the secure handling of sensitive data.

1. Our Commitment to You

• You have full control over what information you choose to share with us.

• We collect personal and health-related information only when you give explicit permission.

• You may withdraw your consent and delete your data at any time.

• We do not sell or rent your personal data to third parties.

• We are committed to the highest standards of data protection and compliance.

2. Information We Collect

We collect the following categories of personal information only with your explicit consent:

a. Information You Provide Voluntarily

• Name, email address, and contact details

• Information related to your health, lifestyle, and wellbeing goals

• Data from health or fitness devices or services

• Messages, questions, and interactions with our platform or team

b. Information Collected Automatically

• Device type, browser information, and operating system

• IP address and general location data

• Site usage analytics (e.g., pages visited, time spent)

• Cookies and similar technologies used solely for functionality and performance (not advertising)

c. Information from Third-Party Integrations (Only With Your Permission)

• Health data from Apple HealthKit, Google Fit, Fitbit, Oura, or similar platforms

• Digital habit data from calendar or screen time tools

• These integrations are strictly opt-in and can be disconnected at any time

3. How We Use Your Information

We use your information to:

• Provide personalized health insights and wellbeing recommendations

• Support your goals through AI-driven continuous coaching

• Improve and enhance our platform experience and features

• Respond to support requests and service-related inquiries

• Ensure the safety, security, and compliance of our Services

We never use your information for third-party advertising or data brokerage.

4. Legal Bases for Processing (Under GDPR)

We process your personal data only when a valid legal basis applies:

• Consent – when you explicitly agree to data collection or integration

• Contractual Necessity – to provide services you request

• Legal Obligation – to comply with applicable law

• Legitimate Interests – to improve our services (using anonymized, non-identifiable data)

You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. HIPAA Compliance

If you are located in the United States and provide us with Protected Health Information (PHI), we treat that information in accordance with the standards of the Health Insurance Portability and Accountability Act (HIPAA).

• We store and process PHI using HIPAA-compliant infrastructure

• We enter into Business Associate Agreements (BAAs) with any vendor that handles PHI

• PHI is never used for marketing or shared without your explicit authorization

• You have the right to access, correct, and request deletion of your health information

6. Your Privacy Rights

Depending on your location, you have the right to:

• Request access to the personal data we hold about you

• Request correction of any inaccuracies

• Request deletion of your data

• Object to or restrict certain processing activities

• Withdraw consent at any time

• Receive a copy of your data in a portable format

To exercise your rights, please contact us at privacy@uniquehuman.ai.

7. Data Retention

We retain personal data only as long as needed to fulfill the purposes outlined in this Policy or to comply with legal obligations. You may request deletion of your data and account at any time.

8. Data Security

We use industry-standard security measures to protect your data:

• AES-256 encryption for data at rest and in transit

• Secure authentication and access control protocols

• Regular internal audits and security testing

• Least-privilege data access policies for employees and vendors

9. Data Sharing

We do not sell or rent your personal information. We may share data only in the following circumstances:

• With your explicit consent

• With service providers or vendors under strict contractual obligations and only for the purposes of supporting our Services

• In compliance with legal obligations, such as responding to a valid court order or regulatory request

• To protect the safety, rights, or property of UniqueHuman, our users, or others

10. International Data Transfers

If you are accessing our Services from outside the United States, your data may be transferred to and processed in the United States or other countries where we or our vendors operate. In such cases, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure your data remains protected.

11. Children’s Privacy

Our Services are not intended for children under the age of 13 (or under 16 where applicable). We do not knowingly collect personal data from children without verified parental consent. If we become aware that a child has provided personal data without such consent, we will delete it.

12. Changes to This Policy

We may update this Privacy Policy periodically. When changes are made, we will revise the “Effective Date” at the top of this page and provide advance notice for any material updates via email or in-app notifications.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data handling practices, please email us at contact@uniquehuman.care.