Privacy Policy

Effective Date: June 3, 2026 · Last Updated: October 2, 2026

At UniqueHuman, your privacy is important to us. This Privacy Policy describes the Personal Data we collect, how and why we collect it, how we use and disclose it, and the choices you have, including how you can access, update, or request deletion of your Personal Data. Please take a moment to review it. By using our Platform, you are agreeing to the terms of this Privacy Policy. If you are unable to access this Privacy Policy due to a disability, please contact us to obtain it in an alternative format.

UniqueHuman Inc., together with its subsidiaries and affiliates (collectively, "UniqueHuman," "Company," "us," "we," or "our") is committed to protecting the privacy of Personal Data (i.e., information reasonably related to a specific individual). This Privacy Policy describes how we process Personal Data collected through our mobile applications, websites, and other online interactions and communications such as email (collectively, our "Digital Properties"); in-person events; and other online and offline interactions.

This Privacy Policy applies to information we collect about individual consumers, such as general users of our mobile application and website ("Individuals"), as well as information we collect about the personnel of our business partners, including vendors and business customers, in business-to-business interactions ("Business Contacts"). However, this Privacy Policy does not apply to information about our current/former employees, applicants, and other individuals who interact with us for employment-related purposes.

Whenever you interact with us on behalf of another individual or entity, such as if you refer a friend to us, you must obtain their consent (or have the legal authority without consent) to share their Personal Data with us.

Changes: We may update this Privacy Policy from time to time. Any updated Privacy Policy will be effective when posted. Please check this Privacy Policy periodically for updates. If required by law, we will obtain your consent or contact you directly if there are material changes.

Table of Contents

1. I. Who is UniqueHuman?
2. II. Key Terms & Definitions and Our Privacy Policy
3. III. Personal Data
4. IV. Artificial Intelligence Data Uses and Disclosures
5. V. Cookies and Tracking Technologies
6. VI. Who May Use the Services?
7. VII. Children's Privacy
8. VIII. Data Security and Data Retention
9. IX. External Links
10. X. California Privacy Rights and U.S. State Privacy Disclosures
11. XI. Changes to Our Privacy Policy
12. XII. Contact Us

I. Who is UniqueHuman?

UniqueHuman provides health-technology software that uses artificial intelligence to help you understand your own health. Our mobile application analyzes the health data you choose to share, helps predict and explain patterns such as migraine triggers, and delivers personalized insights, journaling, and clinical reports.

UniqueHuman builds its systems to HIPAA security standards to protect the health information it processes. Our Digital Properties are tools to support your health and are not a substitute for professional medical advice, diagnosis, or treatment.

II. Key Terms & Definitions and Our Privacy Policy

When does our Privacy Policy apply? This Privacy Policy describes the types of Personal Data we may collect from you when you visit or use our Platform; when we communicate by email, text message, or other electronic messages; and when we interact in person.

When does our Privacy Policy not apply? This Privacy Policy does not apply to information collected by any other website or service operated by us or by a third party, unless that property links to this Privacy Policy. It also does not apply to information about our personnel as described above.

Our Privacy Policy and Terms of Service. This Privacy Policy is incorporated into our Terms of Service, which also apply when you use our Platform.

III. Personal Data

Sources of Personal Data

We collect Personal Data about you from the following sources:

• •Directly from you, such as when you create an account, interact with our mobile application or website, communicate with us through our AI-powered chat or voice features, upload documents, obtain a subscription, sign up for offers or newsletters, or contact us for support.
• •Automatically and through Cookies, such as through cookies, pixels, tags, scripts, SDKs, and similar technologies (collectively, "Cookies") when you interact with our Digital Properties. This may include information about how you use and interact with our Platform, information about your device, and internet usage information. See Section V.
• •From third-party sources you choose to connect, such as Apple HealthKit, fitness trackers and wearables, Apple WeatherKit, and healthcare providers you connect, through our health records provider, subject to your settings and permissions. These integrations are opt-in and can be disconnected at any time.
• •From other third parties, such as service and content providers, our affiliated companies and subsidiaries, business partners, social media companies, advertising partners, and other parties who interact with us.
• •From publicly available sources, such as public profiles and websites.

We may combine information that we receive from the various sources described in this Privacy Policy and use or disclose the combined information for the purposes identified below.

What types of Personal Data do we collect?

Except as otherwise specified, we may collect this Personal Data from both Individuals and Business Contacts:

Sensitive Personal Data

We may also collect the following Sensitive Personal Data:

• •Account log-in information.
• •Precise geolocation, such as location based on device GPS. We collect precise location data to obtain local weather and environmental conditions (such as barometric pressure, temperature, and humidity) in order to analyze potential migraine triggers and deliver health insights. Location data is not used for tracking or advertising.
• •Information about your health (see "Health Information" below), including:

• •Health and fitness data from Apple HealthKit and Oura, if you choose to connect them. The full list of data types we can read is in "Apple Health and Oura Data" below.
• •Sleep data, including sleep session duration and stage breakdown (deep, REM, core, awake).
• •Mindfulness session data (meditation, breathing exercises).
• •Menstrual and reproductive health data, including menstrual flow and cycle-day information, if you choose to share it through Apple HealthKit. We treat this as sensitive health information subject to heightened protections.
• •Health records retrieved from healthcare providers via FHIR APIs and health information exchanges, with your authorization.
• •Medical documents you choose to upload, such as lab results, clinical reports, and other health records.
• •Migraine journal entries, including pain intensity, symptoms, triggers, medications, and functional impact.
• •Medication information, including names, dosages, timing, effectiveness, and recurrence.

Apple Health and Oura Data

Reading from Apple Health. When you connect Apple Health, you choose which of the data types below the app may read. We read only the types you allow, and you can change this at any time in the Health app. The app can ask to read:

• •Activity: steps; walking, running, cycling, wheelchair, swimming, downhill snow sports, and cross-country skiing distance; flights climbed; active and resting energy; exercise and stand time; wheelchair pushes; swimming strokes; running speed, power, ground contact time, stride length, and vertical oscillation; cycling cadence, power, speed, and functional threshold power; physical effort; and underwater depth.
• •Body measurements: weight, body fat percentage, lean body mass, height, waist circumference, and body mass index.
• •Cycle tracking and reproductive health: menstrual flow, cervical mucus quality, ovulation, pregnancy, and progesterone test results, sexual activity, spotting, contraceptives, lactation, pregnancy, and notifications of infrequent, irregular, or prolonged periods and persistent spotting.
• •Hearing: environmental and headphone sound levels, loud sound notifications, and audiograms.
• •Heart: heart rate, resting heart rate, walking heart rate average, heart rate variability, cardio recovery, cardio fitness (VO2 max), atrial fibrillation history, peripheral perfusion index, blood pressure, high and low heart rate, irregular rhythm, and low cardio fitness notifications, and electrocardiograms (ECG).
• •Mobility: walking speed, step length, asymmetry, double support time, and steadiness (including steadiness notifications), stair speed up and down, and six-minute walk distance.
• •Nutrition: water, caffeine, calories, protein, carbohydrates, total, saturated, monounsaturated, and polyunsaturated fat, fiber, sugar, cholesterol, sodium, and the vitamins and minerals Apple Health records (potassium, calcium, iron, magnesium, phosphorus, zinc, copper, manganese, chloride, niacin, thiamin, riboflavin, pantothenic acid, biotin, folate, iodine, selenium, chromium, molybdenum, and vitamins A, B6, B12, C, D, E, and K).
• •Respiratory: blood oxygen, respiratory rate, forced expiratory volume, forced vital capacity, peak expiratory flow, and inhaler usage.
• •Sleep, mindfulness, and state of mind: sleep sessions and stages, mindful minutes, and the moods and emotions you log in Apple Health.
• •Symptoms: headache, nausea, fatigue, dizziness, body aches, mood changes, sleep changes, hot flashes, chills, fever, bladder incontinence, dry skin, hair loss, heartburn, loss of smell or taste, memory lapse, night sweats, pelvic pain, rapid or skipped heartbeat, runny nose, shortness of breath, sinus congestion, sore throat, vomiting, wheezing, breast pain, constipation, coughing, abdominal cramps, acne, appetite changes, bloating, chest tightness or pain, fainting, lower back pain, and vaginal dryness.
• •Vitals and other data: body temperature, wrist temperature during sleep, blood glucose, blood alcohol content, number of alcoholic drinks, electrodermal activity, UV exposure, time in daylight, water temperature, falls, handwashing, and toothbrushing.
• •Workouts.
• •Characteristics: date of birth, sex, blood type, skin type, wheelchair use, and activity move mode.

Writing to Apple Health. The app writes to Apple Health only in two cases, and only after you turn them on. If you turn on water syncing, the app saves the water, caffeine, and alcoholic drinks you log. If you turn on cycle syncing, the app saves the menstrual flow you log. The app writes no other data to Apple Health. If you delete one of these entries in the app, we also remove it from Apple Health. You can turn syncing off in the app, or remove the app's write access in the Health app, at any time.

Oura. If you connect an Oura account, we read data from Oura. We do not send your data to Oura. We read: sleep sessions and stages, sleep, readiness, and activity scores, heart rate, heart rate variability, breathing rate, blood oxygen, temperature deviation, stress and recovery time, resilience, cardiovascular age, VO2 max, sedentary and non-wear time, workouts, mindfulness sessions, and the tags you add in Oura (such as caffeine, alcohol, or medication). From your Oura profile we keep only your account ID. We store the data we read as part of your account. When you disconnect Oura, we delete the Oura data and access tokens we hold.

We do not sell data we read from Apple Health or Oura, and we do not use it for advertising or marketing.

Health Information

Some Personal Data we collect constitutes personal health information. This Privacy Policy governs how we collect, use, and disclose it. We collect and use health information only for the purposes of providing and improving the Services, and we collect the minimum amount reasonably necessary to provide them. We do not use or disclose your health information for advertising or marketing, and we do not sell your health information. We share your health information only as needed to provide the Services: with service providers that work for us, such as cloud hosting, AI, health records retrieval, and monitoring and logging providers; with healthcare providers, family members or other health apps you choose; with professional advisers, such as lawyers and auditors, who must keep it confidential; where required by law; and in a sale of our business. We protect your health information with safeguards that follow HIPAA security standards. We may combine your health information with other Personal Data we obtain from you or from third parties you authorize, such as your healthcare providers or connected health platforms, to provide the Services.

How do we use Personal Data?

We may use Personal Data for the following purposes:

• •To provide you Products and Services, such as making our Platform available to you; registering, verifying, and maintaining your account; providing AI-powered health chat and voice journaling features; processing and analyzing your health data to deliver personalized migraine predictions, insights, and recommendations; generating clinical reports; processing orders, subscriptions, and payments; communicating with you; and otherwise facilitating your relationship with us.
• •For our internal business purposes, such as day-to-day operation of our business; maintaining internal business records; enforcing our policies and rules; auditing; and IT security and administration.
• •For our internal research and product improvement purposes, such as verifying or maintaining the quality or safety of our Products or Services; improving our Products or Services; designing new Products and Services; evaluating the effectiveness of our features and of our advertising or marketing; and debugging and repairing errors.
• •For legal, safety, or security reasons, such as complying with legal and reporting requirements; investigating and responding to claims; establishing, exercising, or defending legal claims; protecting the safety, property, or rights of you, us, and third parties; detecting, preventing, and responding to security incidents; and protecting against malicious, deceptive, fraudulent, or illegal activity.
• •In connection with a corporate transaction, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of all or a portion of our business or assets.
• •For marketing and advertising, such as marketing our Products or Services or those of our affiliates, business partners, or other third parties; personalizing advertising; analyzing your interactions with our Digital Properties; and sending you newsletters, surveys, promotions, or information about our Products, Services, or events. You can unsubscribe from our email marketing via the link in the email, by responding "STOP" to text messages, or by contacting us using the information in Section XII. This does not include your health information, which we do not use for advertising or marketing.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law, other than training AI or machine learning models.

How do we disclose Personal Data?

We may disclose Personal Data to the categories of recipients below. As noted above, we do not disclose your health information for advertising or marketing purposes, and we do not sell it.

• •Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, and other companies that share common ownership.
• •Service providers that work on our behalf, such as cloud hosting providers, AI service providers (see Section IV), health records retrieval providers, error monitoring and analytics providers, voice transcription services, payment processors, email and marketing providers, and companies that provide business support services.
• •Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
• •Vendors necessary to complete transactions you request, such as payment and fulfillment providers.
• •Your healthcare providers or designated family, with your consent, when you designate them to receive your Personal Data.
• •Other health-focused mobile apps, with your consent. If you direct us to share your profile information or connected-device data with other health applications, that information will be used in accordance with those applications' privacy policies, not this Privacy Policy.
• •Law enforcement, government agencies, and other recipients for legal, security, or safety purposes.
• •Other entities in connection with a corporate transaction, as described above.
• •Business partners that may use Personal Data for their own purposes, such as advertisers, ad platforms and networks, and social media platforms; third parties whose Cookies we use (see Section V); and partners who work with us on promotional or co-branded opportunities. Where recipients use your Personal Data for their own purposes independently of us, we are not responsible for their privacy practices, and you should consult their privacy notices.
• •The public, such as comments or reviews you choose to share in public areas of our Digital Properties.
• •Entities to which you have consented to the disclosure.

We may disclose de-identified or aggregated information, which cannot reasonably be used to identify you, with third parties for marketing, research, or similar purposes, other than training AI or machine learning models.

How do I access and correct my Personal Data?

You can review and change much of your Personal Data by logging into your account and updating your profile within the application. You may also contact us to inform us of any changes or errors, or to delete your account. In most cases we cannot delete your Personal Data except by also deleting your account. We may decline a request where we believe it would violate a law or legal requirement. See Section X for additional rights that may apply to you.

IV. Artificial Intelligence Data Uses and Disclosures

In addition to the descriptions above, we may also collect, use, and disclose data for purposes involving our use of artificial intelligence ("AI"), as described below.

Types of Personal Data AI may process. In addition to the data types listed in Section III, and depending on how you use our Digital Properties and the features you enable, we may also process: messages and other inputs you submit through our chat feature; voice inputs you choose to submit (for example, through voice journaling) and related transcripts; health records, medical documents, and other health information you choose to upload, input, or connect; and health and fitness information from third-party sources you choose to connect (for example, Apple HealthKit), subject to your settings and permissions.

How we use Personal Data related to AI services. We use AI to provide, maintain, and improve our Services, including generating personalized health insights, migraine predictions, journal analysis, and clinical reports. We do not use your Personal Data to train AI or machine learning models, and our third-party AI providers do not either. We use AI providers only to process your data to deliver the Services to you. UniqueHuman personnel, including team members outside the United States, may access or review Personal Data to provide the Services, respond to requests, ensure safety, comply with law, and improve service quality.

How we disclose Personal Data related to AI services. In addition to the disclosures described in Section III, we may also disclose your Personal Data to: service providers that help us provide AI functionality and related services (e.g., cloud hosting and safety, security, and monitoring tools); and third-party AI providers that provide AI-assisted features (the current list is in Section 6 of our Terms of Service). Where required by law, we obtain your explicit permission before sharing Personal Data with third parties, including third-party AI providers.

Our third-party AI providers. We currently share Personal Data with the following third-party AI providers, only to deliver the features described: Google (Gemini, hosted on Google Cloud Vertex AI), which receives your chat messages, voice inputs, and the health information needed to generate Niq's replies, voice conversations, and personalized insights; OpenAI, which receives the text of your conversations to build a private search index so Niq can recall past conversations; and Anthropic (Claude), which receives the names of symptoms, triggers, and medications you log, to match them to our catalog, and summaries of your wearable data, to prepare your clinical reports. Each of these providers is bound by a business associate agreement (BAA) and provides the same or equal protection of your data as described in this Privacy Policy. They process your data only on our behalf, never sell it, and never use it to train their AI models. We ask for your explicit permission in the app before your data is sent to these providers.

Your choices and controls. You may choose what Personal Data to submit through our Digital Properties and which integrations to connect. You may revoke permissions or disable certain features through your device settings or within our Digital Properties, as applicable. If an AI-assisted feature requires consent, you may decline consent.

V. Cookies and Tracking Technologies

We and our service providers may use cookies, web beacons, and other technologies to receive and store certain types of Personal Data whenever you interact with our Platform through your computer or mobile device. A "cookie" is a small file or piece of data sent from a website and stored on the hard drive of your computer or mobile device. Some of the cookies we use are "session" cookies, meaning that they are automatically deleted after you close your browser; session cookies are used to optimize performance and limit redundant data downloaded during a single session. We also may use "persistent" cookies, which remain on your device unless deleted by you (or by your browser settings), for purposes such as statistical analysis of performance to ensure the ongoing quality of our Platform and Services. We and third parties may use session and persistent cookies for analytics and advertising purposes, as described herein. Unless you have adjusted your browser or operating-system setting to refuse cookies, our system will issue cookies when you direct your browser to our Platform.

Meta SDK (mobile app). In our mobile application, we use the Meta (Facebook) SDK to measure app installs and signup conversions from our advertising. We do not display a tracking permission prompt, and we do not access your device's advertising identifier (IDFA), so this measurement is not tied to you as an individual. Install attribution instead uses Apple's privacy-preserving SKAdNetwork, which reports results to us only in aggregate, and we may send conversion signals to Meta from our own servers. As with all advertising, we never share your health information with Meta.

AppsFlyer (mobile app). In our mobile application, we use AppsFlyer, a mobile measurement service, to measure app installs and attribution and to support deep links. We pass AppsFlyer your device's push notification token so it can measure uninstalls. We do not send AppsFlyer your health information.

PostHog (Website). On our Website, we use PostHog, a product analytics service, to understand how visitors use the Website, such as which pages they view and when they leave. PostHog stores its data in the United States. We do not use advertising pixels on our Website, and we do not send PostHog your health information.

Your choices. You can opt out of third parties collecting your Personal Data for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page and the Digital Advertising Alliance's (DAA) opt-out page. Each type of web browser provides ways to restrict and delete cookies; please consult the documentation for your browser (such as Google Chrome, Mozilla Firefox, Microsoft Edge, Safari (Desktop), Safari (Mobile), Android Browser, and Opera). If you are using a mobile device, you can manage certain advertising identifiers through your device's operating-system settings. Please be aware that if you disable cookies, certain parts of our Platform or Services may not function correctly. We do not currently respond to Do-Not-Track ("DNT") browser signals, as no uniform DNT standard has been finalized.

VI. Who May Use the Services?

This Privacy Policy applies to personal uses of our Platform, and the Platform and Services are available only to users located in the United States, and only in states where the Services are available. You represent that you are not barred from using the Services under the laws of the United States or other applicable jurisdictions. You should not use the Platform if you do not agree to this Privacy Policy and our Terms of Service. Accessing the Platform from jurisdictions where the content is illegal, or where we do not offer the Services, is prohibited.

VII. Children's Privacy

Our Digital Properties are intended for individuals 18 years of age and older. We enforce age verification during account creation and block users under 18 from creating accounts. The Digital Properties are not directed at, marketed to, nor intended for, children under 18 years of age, and we do not knowingly collect Personal Data from children under 18. If you believe we have inadvertently collected Personal Data from a child under 18, please contact us at the information in Section XII, and we will take prompt steps to delete the information.

VIII. Data Security and Data Retention

We have implemented reasonable administrative, technical, and physical safeguards designed to protect against the risk of accidental, unlawful, or unauthorized access, alteration, destruction, disclosure, or use, including encryption of data in transit and at rest. However, the Internet is not 100% secure, and we cannot guarantee the security of information transmitted to, on, or through our Services. Where you have chosen a password, it is your responsibility to keep it confidential. Any transmission of Personal Data is at your own risk.

Where we process your data. We store your data on servers in the United States. Our team members and service providers may access your data from outside the United States, including India, only to provide and support the Services. They follow the same security and confidentiality rules, and their access is limited to what their work needs.

While your account is active, your Personal Data will be retained as long as necessary to fulfill the purposes described in this Privacy Policy unless we are required to do otherwise by applicable law. This includes retaining your Personal Data to provide you with the Products or Services you have requested; maintain our business relationship with you; improve our business over time; and ensure the ongoing legality, safety, and security of our Services. You may delete your account at any time through the application's Settings. When you delete your account, we delete your data from our live systems right away. Copies held in backups and by our service providers (such as logging and AI monitoring tools) are deleted within 30 days. We tell our service providers to delete your data. We may keep limited data only where the law requires it, to complete a transaction you started, or to prevent fraud and security incidents. We may keep deidentified data that cannot be linked to you.

IX. External Links

Our Digital Properties may contain links to external sites or other online services that we do not control, including those embedded in third-party advertisements or sponsor information. We are not responsible for the privacy practices or data-collection policies of such third-party services. You should consult the privacy notices of those third-party services for details on their practices.

X. California Privacy Rights and U.S. State Privacy Disclosures

Depending on where you reside, you may have certain rights regarding your Personal Data under applicable state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights may include the right to know, access, delete, or correct your Personal Data; the right to opt out of the "sale" or "sharing" of your Personal Data and certain targeted advertising; and the right not to be discriminated against for exercising your rights. To exercise your rights, contact us at support@uniquehuman.ai. We will verify your identity before processing your request.

Rights under other U.S. state privacy laws

Many U.S. states, including Colorado, Connecticut, Oregon, Texas, Utah, and Virginia, have privacy laws that give residents rights over their Personal Data. We offer the rights below to all U.S. users, whatever their state. Each right is subject to exceptions.

• •Confirm whether we process your Personal Data, and access it.
• •Correct inaccurate Personal Data.
• •Delete your Personal Data.
• •Receive a copy of your Personal Data in a portable format.
• •Receive a list of the third parties to which we have disclosed your Personal Data.
• •Opt out of targeted advertising and the sale of your Personal Data.
• •Opt out of profiling that produces legal or similarly significant effects. We do not currently make decisions of this kind.
• •Not be discriminated against for exercising these rights.

Sensitive data. We process sensitive data, such as health information and precise location, only with your consent, which we ask for in the app before you share it. You may withdraw your consent at any time through your device settings or by deleting your account. We do not sell your health information.

How to exercise your rights. Use Settings in the app, or email support@uniquehuman.ai. To opt out of targeted advertising or sale, use the Do Not Sell or Share My Personal Information link on our Website or the same option in the App under Settings, email us with "Opt-Out of Sale/Sharing" in the subject line, or use a Global Privacy Control signal. We will respond within 45 days. We may extend this once by 45 days where the law allows. If we do, we will tell you within the first 45 days and explain why.

Appeals. If we deny your request, we will explain why and how to appeal. To appeal, email support@uniquehuman.ai with "Appeal" in the subject line. We will respond within 45 days. If we deny your appeal, we will tell you how to contact your state attorney general to submit a complaint.

California "Shine the Light." California Civil Code Section 1798.83 permits California residents to request information about our disclosure of Personal Data to third parties for those third parties' own direct marketing purposes. To make such a request, email us at support@uniquehuman.ai.

California "Eraser" Law. California residents under the age of 18 who have posted content on our Digital Properties can request removal by emailing support@uniquehuman.ai, detailing where the content is posted and attesting that they posted it. We will make reasonable, good-faith efforts to remove the post from prospective public view or anonymize it to the extent required by applicable law. This process cannot ensure complete removal, as third parties may have republished or archived content we do not control.

XI. Changes to Our Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, laws, and best practices. We will post any changes on this page and update the "Last Updated" date above. If we make material changes, we will notify you by email to the address associated with your account and/or through a notice on the Platform, where required by law. You are responsible for ensuring we have an up-to-date email address for you and for periodically reviewing this Privacy Policy.

XII. Contact Us

If you have questions regarding this Privacy Policy, or wish to exercise your privacy rights, please contact us at:

UniqueHuman Inc.
San Francisco, California

Email: support@uniquehuman.ai

© UniqueHuman Inc. 2026 · San Francisco, California