Hundred Health's

Privacy Policy

Effective Date: 12/01/2024

Last Updated Date: 01/13/2025

California Notice at Collection: See the California Privacy Notice section below for information about your rights, to the extent applicable, under governing law.

HUNDRED HEALTH'S GUIDING PRIVACY PRINCIPLES

Hundred Health was created to help people achieve better health and longevity. Protecting your privacy is a key priority. We empower you to take control of your health, which includes maintaining control over your Personal Information. Please read this Privacy Policy to understand how we handle your data, as summarized in the following guiding principles:

• Your identity is not for sale.
• We do not sell your Personal Information to third parties for monetary compensation.
• We limit the information we collect and retain.
• Personal Information is collected solely for providing products and services. Data is retained only for as long as necessary to fulfill these purposes or comply with legal requirements.
• We control how your health data is shared.
• Sharing your test results with third parties occurs only when necessary for providing services, and recipients must adhere to strict privacy requirements.
• For additional details, review this Privacy Policy in full.

PRIVACY POLICY

This Privacy Policy explains how GHOAT LLC (“Hundred Health,” “Company,” “we,” “our,” “us”) collects, stores, and uses Personal Information related to your use of our services. These services include, but are not limited to, our website www.hundred.com (the “Site”), mobile applications, and other related offerings (collectively, the “Services”). This policy also covers “Consumer Health Data,” which includes information linked to your physical or mental health status. If you reside in Connecticut, Nevada, or Washington, additional information and rights are outlined in our Consumer Health Data Privacy Policy, which is incorporated herein by reference.

TABLE OF CONTENTS

• Personal Information We May Collect, Use, and Disclose
• Sources of Personal Information
• How We Collect Personal Information
• Aggregated, Deidentified, or Anonymized Information
• Cookies and Tracking Technologies
• Wearables Integration and Terra Recommendations
• Data Security
• Data Retention
• International Transfers of Your Personal Information
• Children's Privacy
• Your Privacy Rights
• California Privacy Notice
• Nevada Privacy Notice
• Privacy Notice for Residents of Other U.S. States
• Changes to This Privacy Policy
• Contact Us

6. WEARABLES INTEGRATION AND TERRA RECOMMENDATIONS

Hundred Health offers support for wearables integration through Terra to provide personalized recommendations for health and wellness. By connecting your wearables to our Services:

• What We Collect:
• Data from your wearable devices, including but not limited to: heart rate, activity levels, sleep patterns, steps, calorie expenditure, and other biometric data.
• What We Collect:
• To provide personalized recommendations based on your wearable data.
• To track and analyze your health trends over time.
• To enhance and tailor your experience on the Hundred Health platform.
• To create aggregated insights for product improvements.
• Data Sharing:
• We may share anonymized wearable data with Terra for analytical purposes and improved recommendations.
• Data shared with third parties, including Terra, is handled under strict privacy standards and will not include identifiable health information unless you provide explicit consent.
• Your Control:
• You can disconnect your wearable device or disable sharing via your account settings. Doing so may limit certain functionalities of the Services.

7. DATA SECURITY

Hundred Health employs technical and organizational safeguards to protect your data. No system is entirely secure; however, we strive to maintain a high level of data protection.

8. DATA RETENTION

We retain your Personal Information only as long as necessary for:

• Delivering services.
• Legal compliance.
• Internal analysis or dispute resolution.

9. INTERNATIONAL TRANSFERS OF YOUR PERSONAL INFORMATION

Your data may be transferred to and processed in the U.S. or other countries. By using our Services, you consent to such transfers.

10. CHILDREN'S PRIVACY

Our Services are not intended for individuals under 18 years old. If we inadvertently collect data from a child, it will be deleted.

11. YOUR PRIVACY RIGHTS

Depending on your location, you may have rights to:

• Access: Access Personal Information we hold about you.
• Correct inaccurate data.
• Delete Personal Information (subject to legal exceptions).
• Opt-out of targeted advertising.

To exercise these rights, contact us at legal@hundred.com or via our website.

12. CALIFORNIA PRIVACY NOTICE

California residents have additional rights under the California Consumer Privacy Act (CCPA). For example, you can:

• Know what data is collected.
• Delete Personal Information.
• Opt out of the “sale” or “sharing” of your data (e.g., for advertising).

For detailed rights and instructions, refer to the California Privacy Notice section.

13. NEVADA PRIVACY NOTICE

Nevada residents may opt out of future sales of their data. For details, contact us via legal@hundred.com.

14. PRIVACY NOTICE FOR OTHER U.S. STATES

Residents of states like Colorado, Virginia, and Texas may have additional rights, such as limiting the use of sensitive data. See the full policy for details.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically. Changes are effective upon posting. We encourage you to review the policy regularly.

16. CONTACT US

For questions or concerns, contact us:

• Email: legal@hundred.com
• Mail:825 K Street, Fl. 2, Sacramento, CA 95814