Privacy Policy

Effective Date: June 3, 2026 · Last Updated: July 15, 2026

At UniqueHuman, your privacy is important to us. This Privacy Policy describes the Personal Data we collect, how and why we collect it, how we use and disclose it, and the choices you have — including how you can access, update, or request deletion of your Personal Data. Please take a moment to review it. By using our Platform, you are agreeing to the terms of this Privacy Policy. If you are unable to access this Privacy Policy due to a disability, please contact us to obtain it in an alternative format.

UniqueHuman Inc., together with its subsidiaries and affiliates (collectively, "UniqueHuman," "Company," "us," "we," or "our") is committed to protecting the privacy of Personal Data (i.e., information reasonably related to a specific individual). This Privacy Policy describes how we process Personal Data collected through our mobile applications, websites, and other online interactions and communications such as email (collectively, our "Digital Properties"); in-person events; and other online and offline interactions.

This Privacy Policy applies to information we collect about individual consumers, such as general users of our mobile application and website ("Individuals"), as well as information we collect about the personnel of our business partners, including vendors and business customers, in business-to-business interactions ("Business Contacts"). However, this Privacy Policy does not apply to:

• •Information about our current/former employees, applicants, and other individuals who interact with us for employment-related purposes; or
• •Protected health information ("PHI") subject to the Health Insurance Portability and Accountability Act ("HIPAA"). Our collection and use of PHI is governed by our Notice of Privacy Practices, not by this Privacy Policy. See "Health Information" in Section III.

Whenever you interact with us on behalf of another individual or entity, such as if you refer a friend to us, you must obtain their consent (or have the legal authority without consent) to share their Personal Data with us.

Changes: We may update this Privacy Policy from time to time. Any updated Privacy Policy will be effective when posted. Please check this Privacy Policy periodically for updates. If required by law, we will obtain your consent or contact you directly if there are material changes.

Table of Contents

1. I. Who is UniqueHuman?
2. II. Key Terms & Definitions and Our Privacy Policy
3. III. Personal Data
4. IV. Artificial Intelligence Data Uses and Disclosures
5. V. Cookies and Tracking Technologies
6. VI. Who May Use the Services?
7. VII. Children's Privacy
8. VIII. Data Security and Data Retention
9. IX. External Links
10. X. California Privacy Rights and U.S. State Privacy Disclosures
11. XI. Changes to Our Privacy Policy
12. XII. Contact Us

I. Who is UniqueHuman?

UniqueHuman provides health-technology software that uses artificial intelligence to help you understand your own health. Our mobile application analyzes the health data you choose to share, helps predict and explain patterns such as migraine triggers, and delivers personalized insights, journaling, and clinical reports.

UniqueHuman maintains a HIPAA-compliant environment for the health information it processes. To the extent we process PHI subject to HIPAA, that information is governed by our Notice of Privacy Practices. Our Digital Properties are tools to support your health and are not a substitute for professional medical advice, diagnosis, or treatment.

II. Key Terms & Definitions and Our Privacy Policy

When does our Privacy Policy apply? This Privacy Policy describes the types of Personal Data we may collect from you when you visit or use our Platform; when we communicate by email, text message, or other electronic messages; and when we interact in person.

When does our Privacy Policy not apply? This Privacy Policy does not apply to information collected by any other website or service operated by us or by a third party, unless that property links to this Privacy Policy. It also does not apply to PHI governed by HIPAA and our Notice of Privacy Practices, or to information about our personnel as described above.

Our Privacy Policy and Terms of Service. This Privacy Policy is incorporated into our Terms of Service, which also apply when you use our Platform.

III. Personal Data

Sources of Personal Data

We collect Personal Data about you from the following sources:

• •Directly from you, such as when you create an account, interact with our mobile application or website, communicate with us through our AI-powered chat or voice features, upload documents, obtain a subscription, sign up for offers or newsletters, or contact us for support.
• •Automatically and through Cookies, such as through cookies, pixels, tags, scripts, SDKs, and similar technologies (collectively, "Cookies") when you interact with our Digital Properties. This may include information about how you use and interact with our Platform, information about your device, and internet usage information. See Section V.
• •From third-party sources you choose to connect, such as Apple HealthKit, fitness trackers and wearables, Apple WeatherKit, and healthcare providers via FHIR APIs and health information exchanges (when available), subject to your settings and permissions. These integrations are opt-in and can be disconnected at any time.
• •From other third parties, such as service and content providers, our affiliated companies and subsidiaries, business partners, social media companies, advertising partners, and other parties who interact with us.
• •From publicly available sources, such as public profiles and websites.

We may combine information that we receive from the various sources described in this Privacy Policy and use or disclose the combined information for the purposes identified below.

What types of Personal Data do we collect?

Except as otherwise specified, we may collect this Personal Data from both Individuals and Business Contacts:

Sensitive Personal Data

We may also collect the following Sensitive Personal Data:

• •Account log-in information.
• •Precise geolocation, such as location based on device GPS. We collect precise location data to obtain local weather and environmental conditions (such as barometric pressure, temperature, and humidity) in order to analyze potential migraine triggers and deliver health insights. Location data is not used for tracking or advertising.
• •Information about your health (see "Health Information" below), including:

• –Health and fitness data from Apple HealthKit, fitness trackers, wearables, or similar platforms, if you choose to connect them, such as heart rate, heart rate variability, resting heart rate, blood oxygen, respiratory rate, VO2 max, blood pressure, blood glucose, body temperature, body mass, body fat percentage, step count, active and basal energy, exercise minutes, distance, flights climbed, and stand hours.
• –Sleep data, including sleep session duration and stage breakdown (deep, REM, core, awake).
• –Mindfulness session data (meditation, breathing exercises).
• –Menstrual and reproductive health data, including menstrual flow and cycle-day information, if you choose to share it through Apple HealthKit. We treat this as sensitive health information subject to heightened protections.
• –Health records retrieved from healthcare providers via FHIR APIs and health information exchanges, with your authorization (when available).
• –Medical documents you choose to upload, such as lab results, clinical reports, and other health records.
• –Migraine journal entries, including pain intensity, symptoms, triggers, medications, and functional impact.
• –Medication information, including names, dosages, timing, effectiveness, and recurrence.

Health Information

Some Personal Data we collect constitutes personal health information, and where it is PHI subject to HIPAA, our collection, use, and disclosure of that information is governed by our Notice of Privacy Practices, not by this Privacy Policy. We collect and use health information only for the purposes of providing and improving the Services, and we collect the minimum amount reasonably necessary to provide them. We do not use or disclose your health information for advertising or marketing, and we do not sell your health information. We may combine your health information with other Personal Data we obtain from you or from third parties you authorize, such as your healthcare providers or connected health platforms, to provide the Services.

How do we use Personal Data?

We may use Personal Data for the following purposes:

• •To provide you Products and Services, such as making our Platform available to you; registering, verifying, and maintaining your account; providing AI-powered health chat and voice journaling features; processing and analyzing your health data to deliver personalized migraine predictions, insights, and recommendations; generating clinical reports; processing orders, subscriptions, and payments; developing and improving algorithms, artificial intelligence, and machine learning tools and models (see Section IV); communicating with you; and otherwise facilitating your relationship with us.
• •For our internal business purposes, such as day-to-day operation of our business; maintaining internal business records; enforcing our policies and rules; auditing; developing and improving our AI and machine learning tools and models (see Section IV); and IT security and administration.
• •For our internal research and product improvement purposes, such as verifying or maintaining the quality or safety of our Products or Services; improving our Products or Services; designing new Products and Services; developing and improving our AI and machine learning tools and models (see Section IV); evaluating the effectiveness of our features and of our advertising or marketing; and debugging and repairing errors.
• •For legal, safety, or security reasons, such as complying with legal and reporting requirements; investigating and responding to claims; establishing, exercising, or defending legal claims; protecting the safety, property, or rights of you, us, and third parties; detecting, preventing, and responding to security incidents; and protecting against malicious, deceptive, fraudulent, or illegal activity.
• •In connection with a corporate transaction, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of all or a portion of our business or assets.
• •For marketing and advertising, such as marketing our Products or Services or those of our affiliates, business partners, or other third parties; personalizing advertising; analyzing your interactions with our Digital Properties; and sending you newsletters, surveys, promotions, or information about our Products, Services, or events. You can unsubscribe from our email marketing via the link in the email, by responding "STOP" to text messages, or by contacting us using the information in Section XII. This does not include your health information, which we do not use for advertising or marketing.

We may use anonymized, de-identified, or aggregated information for any purpose permitted by law.

How do we disclose Personal Data?

We may disclose Personal Data to the categories of recipients below. As noted above, we do not disclose your health information for advertising or marketing purposes, and we do not sell it.

• •Affiliates and subsidiaries, including parent entities, corporate affiliates, subsidiaries, and other companies that share common ownership.
• •Service providers that work on our behalf, such as cloud hosting providers, AI service providers (see Section IV), error monitoring and analytics providers, voice transcription services, payment processors, email and marketing providers, and companies that provide business support services.
• •Professional consultants, such as accountants, lawyers, financial advisors, and audit firms.
• •Vendors necessary to complete transactions you request, such as payment and fulfillment providers.
• •Your healthcare providers or designated family, with your consent, when you designate them to receive your Personal Data.
• •Other health-focused mobile apps, with your consent. If you direct us to share your profile information or connected-device data with other health applications, that information will be used in accordance with those applications' privacy policies, not this Privacy Policy.
• •Law enforcement, government agencies, and other recipients for legal, security, or safety purposes.
• •Other entities in connection with a corporate transaction, as described above.
• •Business partners that may use Personal Data for their own purposes, such as advertisers, ad platforms and networks, and social media platforms; third parties whose Cookies we use (see Section V); and partners who work with us on promotional or co-branded opportunities. Where recipients use your Personal Data for their own purposes independently of us, we are not responsible for their privacy practices, and you should consult their privacy notices.
• •The public, such as comments or reviews you choose to share in public areas of our Digital Properties.
• •Entities to which you have consented to the disclosure.

We may disclose de-identified or aggregated information, which cannot reasonably be used to identify you, with third parties for marketing, research, or similar purposes.

How do I access and correct my Personal Data?

You can review and change much of your Personal Data by logging into your account and updating your profile within the application. You may also contact us to inform us of any changes or errors, or to delete your account. In most cases we cannot delete your Personal Data except by also deleting your account. We may decline a request where we believe it would violate a law or legal requirement. See Section X for additional rights that may apply to you.

IV. Artificial Intelligence Data Uses and Disclosures

In addition to the descriptions above, we may also collect, use, and disclose data for purposes involving our use of artificial intelligence ("AI"), as described below.

Types of Personal Data AI may process. In addition to the data types listed in Section III, and depending on how you use our Digital Properties and the features you enable, we may also process: messages and other inputs you submit through our chat feature; voice inputs you choose to submit (for example, through voice journaling) and related transcripts; health records, medical documents, and other health information you choose to upload, input, or connect; and health and fitness information from third-party sources you choose to connect (for example, Apple HealthKit), subject to your settings and permissions.

How we use Personal Data related to AI services. We use AI to provide, maintain, and improve our Services, including generating personalized health insights, migraine predictions, journal analysis, and clinical reports. We may also use Personal Data to develop, train, provide, and improve our AI and machine learning tools, models, products, and services. Where this information is PHI subject to HIPAA, its use is governed by our Notice of Privacy Practices. UniqueHuman personnel may access or review Personal Data to provide the Services, respond to requests, ensure safety, comply with law, and improve service quality.

How we disclose Personal Data related to AI services. In addition to the disclosures described in Section III, we may also disclose your Personal Data to: service providers that help us provide AI functionality and related services (e.g., cloud hosting and safety, security, and monitoring tools); and third-party AI providers that provide AI-assisted features. Where required by law, we obtain your explicit permission before sharing Personal Data with third parties, including third-party AI providers.

Your choices and controls. You may choose what Personal Data to submit through our Digital Properties and which integrations to connect. You may revoke permissions or disable certain features through your device settings or within our Digital Properties, as applicable. If an AI-assisted feature requires consent, you may decline consent.

V. Cookies and Tracking Technologies

We and our service providers may use cookies, web beacons, and other technologies to receive and store certain types of Personal Data whenever you interact with our Platform through your computer or mobile device. A "cookie" is a small file or piece of data sent from a website and stored on the hard drive of your computer or mobile device. Some of the cookies we use are "session" cookies, meaning that they are automatically deleted after you close your browser; session cookies are used to optimize performance and limit redundant data downloaded during a single session. We also may use "persistent" cookies, which remain on your device unless deleted by you (or by your browser settings), for purposes such as statistical analysis of performance to ensure the ongoing quality of our Platform and Services. We and third parties may use session and persistent cookies for analytics and advertising purposes, as described herein. Unless you have adjusted your browser or operating-system setting to refuse cookies, our system will issue cookies when you direct your browser to our Platform.

Facebook Pixel and Instagram. We may use Facebook Pixel and Instagram, a web analytics and advertising service provided by Facebook Inc. ("Facebook"), on our Platform. With its help, we can track what users do after they see or click on a Facebook or Instagram advertisement, track users who access our Platform from different devices, and better provide advertisements to our target audiences. The data from Facebook Pixel and Instagram is also saved and processed by Facebook, which can connect this data with your Facebook or Instagram account and use it for its own and others' advertising purposes, in accordance with Facebook's Data Policy. You may withdraw your consent for use of your data with Facebook Pixel through your Facebook ad settings.

Meta SDK (mobile app). In our mobile application, we use the Meta (Facebook) SDK to measure app installs and in-app conversions from our advertising. This relies on your device's advertising identifier (IDFA) only where you grant permission through Apple's App Tracking Transparency prompt; if you decline, measurement is limited to Apple's privacy-preserving SKAdNetwork. As with all advertising, we never share your health information with Meta.

Google Analytics. We may use Google Analytics, a web analytics service provided by Google, Inc. ("Google"), to collect certain Personal Data relating to your use of our Platform. Google Analytics uses cookies to help us analyze how users use our Platform. You can find out more about how Google uses data and the choices Google offers, including the Google Analytics opt-out browser add-on, at Google's privacy pages.

Other third-party tools. We may use other third-party tools, such as Microsoft Clarity, which allow us to understand and evaluate how visitors interact with our Platform and to track its performance. These tools provide us with information about errors, performance, and other technical details we may use to improve our Platform and Services.

Your choices. You can opt out of third parties collecting your Personal Data for targeted advertising purposes in the United States by visiting the National Advertising Initiative's (NAI) opt-out page and the Digital Advertising Alliance's (DAA) opt-out page. Each type of web browser provides ways to restrict and delete cookies; please consult the documentation for your browser (such as Google Chrome, Mozilla Firefox, Microsoft Edge, Safari (Desktop), Safari (Mobile), Android Browser, and Opera). If you are using a mobile device, you can manage certain advertising identifiers through your device's operating-system settings. Please be aware that if you disable cookies, certain parts of our Platform or Services may not function correctly. We do not currently respond to Do-Not-Track ("DNT") browser signals, as no uniform DNT standard has been finalized.

VI. Who May Use the Services?

This Privacy Policy applies to personal uses of our Platform, and the Platform and Services are available only to users located in the United States, and only in states where the Services are available. You represent that you are not barred from using the Services under the laws of the United States or other applicable jurisdictions. You should not use the Platform if you do not agree to this Privacy Policy and our Terms of Service. Accessing the Platform from jurisdictions where the content is illegal, or where we do not offer the Services, is prohibited.

VII. Children's Privacy

Our Digital Properties are intended for individuals 18 years of age and older. We enforce age verification during account creation and block users under 18 from creating accounts. The Digital Properties are not directed at, marketed to, nor intended for, children under 18 years of age, and we do not knowingly collect Personal Data from children under 18. If you believe we have inadvertently collected Personal Data from a child under 18, please contact us at the information in Section XII, and we will take prompt steps to delete the information.

VIII. Data Security and Data Retention

We have implemented reasonable administrative, technical, and physical safeguards designed to protect against the risk of accidental, unlawful, or unauthorized access, alteration, destruction, disclosure, or use, including encryption of data in transit and at rest. However, the Internet is not 100% secure, and we cannot guarantee the security of information transmitted to, on, or through our Services. Where you have chosen a password, it is your responsibility to keep it confidential. Any transmission of Personal Data is at your own risk.

Your Personal Data will be retained as long as necessary to fulfill the purposes described in this Privacy Policy unless we are required to do otherwise by applicable law. This includes retaining your Personal Data to provide you with the Products or Services you have requested; maintain our business relationship with you; improve our business over time; and ensure the ongoing legality, safety, and security of our Services. You may delete your account at any time through the application's Settings. When you delete your account, we will delete or de-identify your Personal Data in accordance with our retention practices, except that we may retain certain information as permitted or required by law or for legitimate business purposes. We may retain anonymized or aggregated data that cannot be used to identify you. Retention and disposal of PHI is governed by our Notice of Privacy Practices.

IX. External Links

Our Digital Properties may contain links to external sites or other online services that we do not control, including those embedded in third-party advertisements or sponsor information. We are not responsible for the privacy practices or data-collection policies of such third-party services. You should consult the privacy notices of those third-party services for details on their practices.

X. California Privacy Rights and U.S. State Privacy Disclosures

Depending on where you reside, you may have certain rights regarding your Personal Data under applicable state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights may include the right to know, access, delete, or correct your Personal Data; the right to opt out of the "sale" or "sharing" of your Personal Data and certain targeted advertising; and the right not to be discriminated against for exercising your rights. To exercise your rights, contact us at privacy@uniquehuman.ai. We will verify your identity before processing your request. PHI subject to HIPAA is handled in accordance with our Notice of Privacy Practices.

California "Shine the Light." California Civil Code Section 1798.83 permits California residents to request information about our disclosure of Personal Data to third parties for those third parties' own direct marketing purposes. To make such a request, email us at privacy@uniquehuman.ai.

California "Eraser" Law. California residents under the age of 18 who have posted content on our Digital Properties can request removal by emailing privacy@uniquehuman.ai, detailing where the content is posted and attesting that they posted it. We will make reasonable, good-faith efforts to remove the post from prospective public view or anonymize it to the extent required by applicable law. This process cannot ensure complete removal, as third parties may have republished or archived content we do not control.

XI. Changes to Our Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, laws, and best practices. We will post any changes on this page and update the "Last Updated" date above. If we make material changes, we will notify you by email to the address associated with your account and/or through a notice on the Platform, where required by law. You are responsible for ensuring we have an up-to-date email address for you and for periodically reviewing this Privacy Policy.

XII. Contact Us

If you have questions regarding this Privacy Policy, or wish to exercise your privacy rights, please contact us at:

UniqueHuman Inc.
San Francisco, California

Privacy Inquiries: privacy@uniquehuman.ai

General Support: contact@uniquehuman.care

© UniqueHuman Inc. 2026 · San Francisco, California