Vidal Consumer Health Data Privacy Policy

Effective date: October 14, 2026 Last updated: October 14, 2026 Version: 2026-10.1

This policy describes how Vidal collects, uses and shares consumer health data, as required by Washington's My Health My Data Act and similar state laws, including Nevada's. It supplements our Privacy Policy.

Vidal is operated by [legal entity], [mailing address]. Contact us at privacy@vidalfit.com.

1. Consumer health data we collect, and why

We collect these categories of consumer health data:

• health history, intake and questionnaire answers, and health conditions;
• check ins, habits, goals and health assessment scores;
• diet and nutrition information, including allergies and exclusions;
• fitness and activity information, including workouts;
• body measurements and vital signs, such as blood pressure and blood sugar;
• laboratory results;
• reproductive health information, such as menstrual cycle logs;
• medication, supplement and peptide information;
• photos and documents;
• messages, voice and video recordings, transcripts, assistant conversations, and, if you agree to call recording, transcripts of recorded calls;
• notes and records your coach or coaching company adds;
• safety flags;
• information inferred or generated from the above, including by AI features;
• identifiers linked to the above, such as your name, contact details, date of birth and IP address.

We collect and use consumer health data to provide, operate, personalise and improve Vidal and coaching, including with AI features; to develop new features; to communicate with you; for safety, security and legal compliance; and to create de-identified or aggregated data. We collect and share it with your consent, or as necessary to provide the service you request.

2. Sources

We collect consumer health data from you; from your coach and coaching company; from services your coach or coaching company connects, such as Zoom and Google; from consult forms you complete; and from our own systems and AI features, which generate data from your record.

3. Consumer health data we share

We share the categories in section 1 as needed for the purposes in section 1:

• your coach and coaching company may receive any category, according to their role and the permissions you give in Vidal;
• hosting, database and storage providers handle every category;
• AI and transcription providers receive any category used by an AI feature, including messages, recordings, transcripts, photos, lab results, notes and logs;
• video meeting and calendar providers receive session details and linked identifiers, and, if you agree to call recording, provide us call transcripts;
• email, payment and customer relationship providers receive identifiers and contact details, and the fact that you use a coaching service;
• food databases receive barcodes or product names, with no identifier; and
• legal, safety and transaction recipients receive the categories the situation requires.

4. Third parties and affiliates we share it with

We share consumer health data with these categories of third parties:

• your coach and coaching company, including its owners, administrators and head coach;
• service providers for hosting, database and file storage, AI processing and transcription, email, video meetings and calendars, food databases, payments, and customer relationship tools your coaching company connects;
• government authorities and others where required by law or to protect safety;
• a successor in a merger, acquisition or similar transaction; and
• others with your consent.

Affiliates: we have no affiliates.

We do not sell consumer health data.

5. Your rights, and how to exercise them

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and access it;
• get a list of the third parties and affiliates we have shared it with, and how to contact them;
• withdraw your consent to our collection and sharing of it;
• have it deleted, including from our archives and backups, with notice of the deletion to the processors and third parties we shared it with; and
• not be discriminated against for exercising these rights.

How to make a request. In the app, go to Me → Privacy & data, or email privacy@vidalfit.com. We may need to verify your identity. We respond within the time the law requires.

Appeals. If we decline your request, you can appeal by replying to our decision or by emailing privacy@vidalfit.com with "appeal" in the subject. We will tell you the outcome and the reasons in writing. If we deny your appeal, you can contact your state Attorney General:

• Washington: https://www.atg.wa.gov/file-complaint
• Nevada: https://ag.nv.gov/Complaints/File_Complaint/
• Connecticut: https://portal.ct.gov/ag/common/complaint-form-landing-page

6. Changes

We may update this policy. We will post the updated version here and change the dates above. Where the law requires, we will ask for your consent before collecting, using or sharing consumer health data in a new way.