Washington Consumer Health Data Privacy Notice

01 1. Scope and Who This Applies To

This Notice applies to consumers who are residents of the State of Washington, or whose consumer health data is collected in Washington, and it addresses our processing of "consumer health data" within the meaning of the Washington My Health My Data Act. It does not create rights for, or apply to, individuals outside the categories covered by the MHMDA.

This Notice is a supplement to our main Privacy Policy. It is intended to give Washington consumers a focused, plain-language explanation of how CalSensei handles consumer health data and how you can exercise the specific rights the MHMDA provides. Definitions used here, such as "consumer," "consumer health data," "collect," "process," and "sell," have the meanings given to them in the MHMDA.

Under the MHMDA, "consumer health data" means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. Information you provide to CalSensei about your diet, body, and fitness goals can fall within this definition, which is why we provide this dedicated Notice. CalSensei remains a wellness and nutrition tool and is not a medical, diagnostic, or treatment service.

02 2. Categories of Consumer Health Data We Collect

Depending on which features you use and what information you choose to provide, we may collect the following categories of consumer health data. We collect only what is reasonably necessary to provide the features you request.

• Meal photos: Food images you upload to be analyzed by our AI image and language pipeline.
• AI-derived calorie and macronutrient estimates: The calorie and macronutrient values (protein, carbohydrates, fat, fiber, and sugar) our AI produces from your meal photos, together with the daily and historical nutrition records derived from them.
• Dietary habits and food intake: Information about what and how you eat, including logged meals, nutrition history, and dietary preferences or restrictions you provide.
• Body measurements: Height, weight, and related body metrics you enter.
• Demographic health-related inputs: Age and, where you provide it, sex/gender, used to calculate your goals.
• Fitness and nutrition goals: Your stated objectives (for example, weight management or maintenance goals) and the daily calorie and macro targets we calculate from your profile.
• Connected health-app data: Where you choose to connect a third-party health or fitness application or platform, the health-related data you authorize that connection to share with CalSensei.
• Profile information: Account and profile details that, in combination with the above, relate to your physical health status.

03 3. Sources of Consumer Health Data

We obtain consumer health data from the following sources:

• Directly from you: Information you enter into the application, such as body measurements, age, dietary preferences, and fitness goals, as well as the meal photos you choose to upload.
• Generated by the Service: Calorie and macronutrient estimates, daily targets, and nutrition history that our AI and calculation logic derive from your inputs and photos.
• From connected health applications: Health-related data you authorize a third-party health or fitness app or platform to share with CalSensei, if and only if you choose to enable such a connection.
• From devices and usage: Technical and usage information generated as you interact with the application, to the extent it is linked or reasonably linkable to your consumer health data.

04 4. Purposes for Collection and Use

We collect and use consumer health data only for the purposes described below, and consistent with the consent you provide. We do not use consumer health data for purposes that are incompatible with these stated purposes without obtaining your consent.

• AI meal analysis: Analyzing your meal photos to produce calorie and macronutrient estimates.
• Goal calculation: Calculating daily calorie and macro targets from your body measurements, age, and fitness goals.
• Nutrition tracking and history: Maintaining your logged meals and nutrition history so you can review them over time.
• Recipes and discovery: Providing recipe suggestions and discovery content relevant to your goals and preferences.
• Service operation and improvement: Operating, maintaining, securing, debugging, and improving the Service.
• Support: Responding to your questions and resolving support requests.
• Legal and safety: Complying with applicable legal obligations and protecting the security and integrity of the Service.
• We do not use your consumer health data to provide medical advice or diagnosis. Estimates and targets generated by CalSensei are automated outputs intended for general wellness and self-tracking only.

05 5. How We Share Consumer Health Data

We share consumer health data only as necessary to operate the Service and only in the limited circumstances described below. We do not sell consumer health data. Under the MHMDA, a "sale" means the exchange of consumer health data for monetary or other valuable consideration; CalSensei does not engage in such sales of consumer health data, and we do not share it for cross-context behavioral advertising in exchange for consideration.

• Service providers / processors: Third parties that process consumer health data on our behalf and under contract, strictly to provide the Service, such as cloud hosting and storage providers and our AI inference provider that analyzes meal photos. These providers are limited to the purposes we specify and may not use the data for their own purposes.
• Connected services you authorize: Where you choose to connect a third-party health or fitness application, data flows to or from that service only as you direct and authorize.
• Legal and compliance: Other persons or authorities where required to comply with a legal obligation, valid legal process, or to protect the rights, safety, and security of CalSensei, our users, or the public.
• Business transfers: A successor entity or acquirer in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to the protections of this Notice and applicable law.
• International processing: Because our operator is based in the Republic of Türkiye and we use service providers in various locations, consumer health data may be processed outside the United States, with appropriate safeguards in place to protect it.

06 6. Your Washington Rights

If you are a Washington consumer, the MHMDA gives you the following rights with respect to your consumer health data:

• Right to confirm and access: To confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data, including a list of all third parties and affiliates with whom we have shared or to whom we have sold it.
• Right to know recipients: To obtain the identities of the third parties and affiliates with whom your consumer health data has been shared (and, where applicable, an active email or other online contact for them).
• Right to deletion: To request that we delete your consumer health data, including from our records and, where applicable, by notifying our service providers and processors of your deletion request.
• Right to withdraw consent: To withdraw your consent to our collection and sharing of your consumer health data at any time, after which we will stop the corresponding processing.
• Right against discrimination: To not be unlawfully discriminated against for exercising any of these rights.

07 7. How to Exercise Your Rights and Submit an Appeal

To exercise any of the rights described above, contact us at support@calsensei.com. Please include enough information for us to identify you and your account and to understand your request. We may need to verify your identity before acting on a request; this verification helps protect your consumer health data from unauthorized access.

We will respond to your request within the timeframe required by the MHMDA, which is generally no later than forty-five (45) days after receipt of the request. That period may be extended once by an additional forty-five (45) days where reasonably necessary, in which case we will inform you of the extension and the reason for it within the initial response period.

If we decline to take action on your request, we will explain why. You may appeal that decision by replying to our response or by writing to support@calsensei.com with the word "Appeal" in your message. We will respond to your appeal in writing within the time required by law and explain the action we have taken or declined to take and the reasons for it. If your appeal is denied, you may contact the Washington State Office of the Attorney General to submit a complaint.

08 8. Contact

The entity responsible for CalSensei and the processing of your consumer health data is Gizem Acar, an individual operating as a sole proprietorship established in the Republic of Türkiye. As our operator is based in Türkiye, we provide our email and website as the means of contact in place of a U.S. mailing address.

For any questions about this Notice, to exercise your Washington rights, or to submit an appeal, please contact us using the details below.

• Operator / data controller: Gizem Acar (sole proprietorship, Republic of Türkiye)
• Contact email: support@calsensei.com
• Website: https://calsensei.com