Privacy Policy

This section describes information we collect from visitors and prospective users who have not yet created a MyPattern account.

We collect the email address you provide when you join our waitlist or otherwise request updates from us. If you contact us directly, we may also collect your name, email address, and the contents of your message. We welcome you to share your experiences and health journey with us in general terms - your feedback helps us build a better product. However, please do not include protected health information (PHI) such as medical records, diagnoses, lab results, or other individually identifiable health data in emails sent to hello@findmypattern.com. This email address is not a PHI-secured channel.

We also automatically collect certain information when you visit the Informational Website, including:

• Device and browser information (such as device type, operating system, browser type, and screen resolution)
• IP address
• General location information derived from your IP address
• Online activity data (such as pages viewed, time spent on pages, referring URL)

We collect this information using cookies, pixels, and similar tracking technologies, including those provided by third-party analytics and advertising partners.

We use your email address to:

• manage and maintain our waitlist;
• send you updates about MyPattern, including launch timing, availability, product news, and related communications;
• respond to your requests or inquiries; and
• maintain records related to our communications and sign-up process.

We use automatically collected information (such as device data, IP address, and online activity data) to operate and improve the Informational Website, analyze visitor trends, measure the effectiveness of our marketing campaigns, and deliver relevant advertising on other platforms.

We may share your information with service providers that help us operate the Service, manage the waitlist, and send emails on our behalf, or support our communications with you. We may also disclose information if required by law or as part of a corporate transaction such as a merger, financing, or sale of assets.

We may also share automatically collected information with third-party analytics and advertising partners as described in the "Cookies and Tracking Technologies" section below.

Essential cookies. We use cookies that are necessary for the Informational Website to function, such as maintaining your session when you navigate between pages.

Analytics cookies. We use third-party analytics tools to understand how visitors interact with the Informational Website, including which pages are visited and how visitors arrive at the Informational Website. These tools collect information using cookies and similar technologies.

Marketing and advertising cookies. We may use third-party pixels and tags to measure the effectiveness of our marketing, build audiences for advertising on other platforms, and deliver relevant ads to visitors who have interacted with the Informational Website. These tools may collect device data, IP address, and online activity data. We do not use health-related data for advertising purposes.

Your choices. You can manage your cookie and tracking preferences through your internet browser's settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies.

Do Not Track. Some browsers send "Do Not Track" signals to websites. We do not currently respond to Do Not Track signals. For information about Do Not Track, visit allaboutdnt.com. Blocking cookies or tracking technologies may affect the functionality of the Informational Website.

We do not sell your personal information in exchange for monetary consideration. We may share certain personal information (such as device data, IP address, and online activity data) with third-party analytics and advertising partners through cookies and tracking technologies. This sharing may be considered a "sale" or "sharing" of personal information under certain state privacy laws, including the California Consumer Privacy Act. You may opt out of this sharing at any time by contacting us at privacy@findmypattern.com.

We do not share your email address, waitlist signup information, or any health information you directly provide to us with advertising partners for their own marketing purposes.

If you sign up for the MyPattern waitlist, you may receive marketing or promotional emails from us. You can unsubscribe at any time by clicking the unsubscribe link in our emails.

From time to time, we may operate contests, sweepstakes, or referral programs in connection with MyPattern. If you participate in such a program, we may collect additional information including your referral link activity, share activity, and point or entry totals, as tracked through our referral platform provider, Klaviyo. We use this information solely to administer the program, verify entries, determine winners, and communicate with participants.

If you use social sharing features, you may be directed to third-party platforms (such as Facebook, X, or LinkedIn). We do not control how those platforms collect or use information shared through their interfaces. If our referral platform uses direct API integrations with social platforms, basic profile information (such as name and profile picture) may be transmitted to those platforms in connection with the share.

If you are selected as a winner, we may collect additional information required for prize fulfillment, including identity verification information. This information is used solely for prize fulfillment and is not used for marketing purposes.

Because MyPattern is a women's health platform, we treat any association between a participant and our product as sensitive. Participation in any contest or referral program does not require you to share any health information, and no health or medical data is collected as part of entry or participation.

We love hearing from you. If you contact us by email at hello@findmypattern.com, please be aware of the following:

• This email address is not PHI-secured. Email communications sent to or from this address are not subject to the security protections required for protected health information under applicable health privacy laws.
• Do not include protected health information (PHI) in your email. This includes, but is not limited to, specific diagnoses, lab results tied to your identity, prescription records, medical history details, or other individually identifiable health information.
• Email communications will be retained. We retain the contents of emails sent to us for as long as reasonably necessary to respond to your inquiry and maintain records of our communications, as described in the Data Retention section in Part 3.

This section describes information we collect from registered users who have signed in to the MyPattern Service.

If you create an account, we collect the information you provide during registration, which may include your name, email address, phone number, date of birth, and other demographic information.

If you upload health data through the Service, we collect the health-related information you provide, including but not limited to: prescription (Rx) usage, supplement usage, lifestyle data, vitals, doctor appointment history, lab results, wearable device data, medical records, and other health information you choose to share.

"Health data" means any information you provide, upload, or sync through the Service that relates to your physical or mental health, including but not limited to: prescription and medical usage, supplement usage, lifestyle information, vitals and biometric data, wearable device data, lab results, doctor appointment history, medical records, and any other health-related information you choose to share. Health data also includes any Patterns or other outputs generated by the AI Recommendation Engine based on your information.

Your health data is processed by MyPattern's AI Recommendation Engine, which uses third-party artificial intelligence models to generate Patterns. Your health data, including your name, date of birth, medical history, medications, lab results, vitals, wearable data, symptoms, and interactions with the Service, is transmitted to these providers each time the Service generates a Pattern. By uploading health data, you consent to this processing.

MyPattern's Medical Advisory Panel (independent contractor physicians and naturopaths) and MyPattern team members review AI-generated outputs and may access user profiles and health data for the purpose of validating, training, and improving the AI Recommendation Engine. Panel members do not provide individualized medical advice.

If you provide your mobile phone number and consent to text message communications, we collect your phone number and records of messages sent and received.

We use your health data to:

• generate personalized Patterns through the AI Recommendation Engine;
• store and maintain your health profile within the Service;
• validate, train, and improve the AI Recommendation Engine through review by the Medical Advisory Panel and MyPattern team members; and
• operate, improve, and develop the Service.

We may share your information with service providers that help us operate the Service. We may also disclose information if required by law or as part of a corporate transaction such as a merger, financing, or sale of assets.

We may share your health data with the following categories of service providers:

• Technology infrastructure and operational service providers that support the delivery of the Service, including data storage and hosting, user authentication, product analytics, and communications delivery
• Wearables integration platform for retrieving health and activity data from wearable devices you have authorized through the Service
• AI model providers for generating Patterns
• Medical Advisory Panel members and MyPattern team members for review of AI outputs and user profiles and health data to validate, train, and improve the AI Recommendation Engine
• SMS and communications provider for delivering account notification messages. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
• Health record connectivity providers that retrieve your medical records from healthcare institutions with your authorization, solely to provide you with the Service
• Laboratory network partners in connection with lab ordering features

We do not sell your health data. We do not use your health data for advertising purposes. If we add additional categories of health data sharing in the future, we will update this Privacy Policy, and where required by our agreements or applicable law, seek your consent before doing so.

We engage a third-party SMS messaging provider to deliver transactional SMS messages (such as account notifications). This provider processes your phone number and message delivery metadata solely to deliver messages on our behalf. No mobile information, including SMS opt-in data and consent, will be shared with any third parties or affiliates for marketing or promotional purposes.

We engage Stripe, Inc. ("Stripe"), a payment processing platform, to process payment card transactions for laboratory services and MyPattern service fees. When you submit a payment, MyPattern shares your name, billing country/zip code, email address, transaction amount, and a generic order reference number with Stripe solely to complete your transaction. To protect your health information, order descriptions we provide to Stripe do not identify the specific laboratory tests you have ordered; test-specific information is retained only within MyPattern's own systems. MyPattern does not store your full payment card numbers, (only the last 4 digits are stored in our systems) or card security codes; this information is transmitted directly to and processed by Stripe.

Stripe processes payment data in two capacities: (a) as a service provider acting on MyPattern's behalf to complete your transaction; and (b) as an independent data controller for its own purposes, including fraud prevention, security, and improving its services, subject to Stripe's Privacy Policy (stripe.com/privacy). MyPattern does not transmit protected health information to Stripe. For more information about how payment information is handled, our refund policy, and cancellation terms, please see our Payment Policy.

MyPattern works with a health record connectivity provider to retrieve your electronic health records from your authorized healthcare providers when you use the "Connect My Records" feature. When you authorize MyPattern to access your healthcare provider's electronic health record system, this provider facilitates the retrieval and transmission of your health records to the Service in accordance with applicable interoperability standards. MyPattern has executed a Business Associate Agreement with this provider. This provider does not receive personal data from your MyPattern account; it serves as a one-way conduit retrieving records from your healthcare providers on your instruction.

MyPattern partners with a third-party laboratory services integration platform to offer laboratory test ordering through the Service. When you order laboratory tests through MyPattern, the total price you pay includes both the laboratory's fee for performing the test and a MyPattern service fee. Laboratory testing services are performed directly by the laboratory network partners, which include Quest Diagnostics, Labcorp, and BioReference Laboratories (for New York, New Jersey, and Rhode Island tests). These laboratory partners' services are subject to their own terms and privacy policies. When you order laboratory tests, MyPattern shares your name, address, and phone number with the third-party laboratory services integration platform. Your phone number is also used by this platform to send you SMS communications about your order, including order status and appointment reminders; your consent to those messages is collected at the time you place your order. For information about patient billing rights and MyPattern's fee structure, please see the Laboratory Services and Patient Billing Rights section of our Terms of Use and our Payment Policy.

MyPattern works with a third-party wearables integration platform to retrieve health and activity data from wearable devices you connect through the Service. When you connect a device, such as a fitness tracker or smartwatch, you authorize the device manufacturer's platform to share your data with MyPattern. This provider facilitates that data retrieval through the device manufacturer's API on our behalf. Data retrieved through the wearables integration is used solely to populate your health profile and generate Patterns within the Service.

Our identity and access management provider manages user authentication, sign-in security, and password management for the Service. This provider processes your email address, username, and authentication activity (such as login events) solely to provide these security services. Our authentication provider does not process your health information, and MyPattern does not store or transmit Protected Health Information through the authentication platform.

Our transactional email delivery provider transmits transactional emails including account confirmations, password reset emails, and system notifications. This provider processes your email address solely to deliver messages on MyPattern's behalf and does not use your information for its own marketing purposes.

Our customer support platform facilitates in-app customer support communications. When you contact MyPattern's support team through the in-app support feature, your support messages are processed through this platform. Because your support messages may contain health-related information, MyPattern has entered into a Subcontractor Business Associate Agreement with this provider prior to processing any Protected Health Information through the platform. This provider engages AI service sub-processors for AI-assisted support response drafting, under a Zero Data Retention commitment for any AI processing. MyPattern does not use AI drafting features to respond to messages containing health-related questions, lab results, or health guidance requests; those messages are handled by MyPattern support staff directly. You may access, correct, or request deletion of your support ticket history by contacting privacy@findmypattern.com.

The Service is available for download through the Apple App Store (operated by Apple Inc.) and the Google Play Store (operated by Google LLC). When you download or access the Service through these platforms, Apple and Google may collect certain information in connection with your use of their respective platforms in accordance with their own privacy policies. MyPattern does not control the data practices of Apple or Google.

MyPattern uses artificial intelligence to generate Patterns based on your health data. Your health data, including your name, date of birth, medical history, medications, lab results, vitals, wearable data, symptoms, and interactions with the Service, is transmitted to third-party AI model providers for processing. These providers process your data to generate Patterns and do not use your health data for their own purposes.

MyPattern's Medical Advisory Panel reviews AI outputs and user profiles and health data to validate, train, and improve the AI Recommendation Engine. Panel members are bound by confidentiality obligations.

Your health data may be used to generate AI outputs that are reviewed by MyPattern's Medical Advisory Panel to train and improve the AI Recommendation Engine. Through this process, the AI models may incorporate generalized learnings derived from your data. These generalized learnings become part of the AI model's overall knowledge and cannot be attributed to, isolated for, or deleted on behalf of any individual user. If you request deletion of your health data, we will delete your raw health data from our systems and instruct our service providers to do the same, but we cannot reverse any generalized learnings that the AI models have already incorporated. These learnings do not contain your identifiable health data and cannot be used to reconstruct your individual information.

De-Identified Data for AI Development. MyPattern may de-identify your health data by removing information that could be used to identify you individually, consistent with applicable privacy law, including by applying de-identification standards required under applicable health privacy laws. Data that has been appropriately de-identified and cannot reasonably be linked to any individual is not subject to the health data protections described in this Privacy Policy.

MyPattern and its affiliates and related entities may use de-identified data to develop, train, test, and improve artificial intelligence models and related technologies, including models used to power or enhance the Service. De-identified data may also be used to generate synthetic data sets for AI research, training, and evaluation. These uses do not expose your identifiable health information and cannot be used to reconstruct your individual information.

MyPattern does not use your health data for targeted advertising. We do not share your health data with advertisers or analytics partners.

If you have consented to receive text messages from MyPattern, you may opt out at any time by replying STOP to any message. For help, reply HELP. Message and data rates may apply. Opting out of text messages will not affect your ability to use the Service.

The sections below apply to all users.

We do not sell your personal information in exchange for monetary consideration. We may share certain personal information (such as device data, IP address, and online activity data) with third-party advertising partners through cookies and tracking technologies for the purpose of targeted advertising. Under certain state privacy laws (such as the California Consumer Privacy Act), this sharing may be considered a "sale" or "sharing" of personal information.

We do not share your email address, waitlist signup information, or any information you directly provide to us with advertising partners for their own marketing purposes.

We retain your information for as long as reasonably necessary to manage the waitlist, send requested communications, maintain suppression records, and comply with legal or operational requirements. If you contact us directly, we retain the information you provide for as long as reasonably necessary to respond to your inquiry and maintain records of our communications.

Automatically collected data (such as cookies and analytics data) is retained in accordance with the retention settings of the applicable third-party analytics or advertising platform. You can delete cookies at any time through your browser settings.

If you create an account and upload health data, we retain your health data for as long as your account is active or as reasonably necessary to provide the Service, comply with legal obligations, and resolve disputes. You may request deletion of your health data by contacting us at privacy@findmypattern.com. Upon receiving a verified deletion request, we will delete your health data from our systems within 30 days, except for data we are required to retain by law; health data retrieved through third-party EHR integrations may take up to 60 days to delete from all systems, consistent with our agreements with those providers. We will notify you by email when the deletion process is complete. Deletion of your health data will result in the permanent loss of your Patterns and health profile, and this cannot be reversed.

In the event of MyPattern's bankruptcy, acquisition, dissolution, or cessation of business operations, your health data may be transferred to a successor entity as part of a business transaction, retained by a data custodian, or deleted, depending on the circumstances. If a transfer is anticipated, we will provide advance notice, and, where required, seek your consent. If deletion is required, we will notify you and provide a reasonable opportunity to export your data before deletion occurs.

We use reasonable measures designed to protect the information we collect. No method of transmission or storage is completely secure. Email communications sent to hello@findmypattern.com are not transmitted over a PHI-secured channel. Please do not send PHI via email to this address.

The Informational Website and Service are not intended for individuals under the age of 18. We do not knowingly collect, use, or share personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@findmypattern.com and we will promptly delete that information.

If you are a resident of California, Connecticut, Colorado, Virginia, Washington, or another state with an applicable consumer privacy law, you may have the right to:

• Know what personal information we have collected about you
• Access a copy of your personal information
• Delete your personal information
• Correct inaccurate personal information
• Opt out of the sharing of your personal information for targeted advertising

To exercise any of these rights, please contact us at privacy@findmypattern.com. We will respond within the timeframe required by applicable law.

We may update this Privacy Policy from time to time. If we do, we will post the updated version here and revise the "Last Updated" date above.

If you have questions about this Privacy Policy, please contact us at: privacy@findmypattern.com

For general inquiries, you may also reach us at hello@findmypattern.com. Please note that these email addresses are not PHI-secured. Do not include PHI in any email sent to these addresses. Email communications sent to us will be retained.