Effective 30 September, 2025

This Health Data Privacy Policy (“Health Data Policy”) describes the health data (defined below) that we collect about you; how we use that information; and the choices you may make with respect to it.

This Health Data Policy only applies to residents of Washington. For additional information relating to our general privacy practices in connection with our websites and mobile applications (collectively, our “Online Properties”) and additional rights that you may have, please visit our Privacy Policy. In the event of a conflict between our Privacy Policy and this Health Data Policy, this Health Data Policy will control.

Our Online Properties may contain links to third-party websites/content/services that we do not own or control. We are not responsible for how these properties operate or treat your health data, so we recommend that you read the privacy policies and terms associated with these third-party properties carefully.

1. Health data we collect and use

Depending on the specific service or product offering that you use or receive and your interaction with us, we may collect certain personal information about you that identifies your past, present, or future physical or mental health status (“health data”). Examples of health data we might collect include data that could identify you as an individual seeking health care services; and inferences about your health that we may infer or derive from non-health related information.

We may collect these categories of health data directly from you, automatically when you use the Online Properties, and from other sources, such as public databases and other third parties.

2. How we use health data

For more information about how we use your health data, please see Section 4 of our Privacy Policy. We primarily use your health data for these purposes in connection with providing a product or service you have requested. In some circumstances (e.g., where the purpose is not to provide a product or service you requested), we may collect and use health data with your consent.

Additionally, we may deidentify health data so that it cannot reasonably be reidentified by us or by another person, and we may use this deidentified data for any reason permitted by applicable law. If we deidentify information that was originally based on health data, we maintain and use that information in deidentified form and will not attempt to reidentify the data, except as otherwise permitted under applicable law.

3. How we disclose your health data

For more information about how we may disclose your health data with third parties, including other companies and individuals we retain to perform services on our behalf, please see Section 4 of our Privacy Policy.

4. Individual rights

As described in Section 12 of our Privacy Policy, you may have certain rights relating to your health data subject to certain exceptions. These rights may include obtaining access to and deleting your health data. You can submit a request to exercise these rights using the mechanisms described in that Section 12.  

5. Contact us

We can contact our data protection officer by email at DPO@unobravo.com for matters related to personal data processing. Alternatively, for any questions, you can write to us at support@heyclary.ai or send a registered letter to our legal office at the address provided in our Privacy Policy.