Consumer Health Data Privacy Policy

This notice supplements our Privacy Policy. It describes consumer health data as that term is used in state laws such as Washington's My Health My Data Act. If this notice and the Privacy Policy conflict for consumer health data, this notice controls to the extent the state law requires.

It applies to health-related information we collect on this website before the Gini blood test is live. Laboratory results and other clinical records will be described in a HIPAA Notice of Privacy Practices when testing begins.

To exercise rights in this notice, email privacy@gini.health.

Consumer health data we collect

From the founding-member form, we may collect:

• Whether you were assigned female at birth.
• Whether you are pregnant, and whether you plan to be pregnant by our stated launch window.
• Optional concerns you select or describe (for example fatigue, hair loss, periods, irregular cycles, acne, brain fog, PCOS, endometriosis, cravings, or free text).

Combined with your name, email, date of birth, and address, this is identifiable consumer health data. The waitlist form does not ask these questions. We do not collect this data from third parties.

Why we collect it

• Assigned female at birth: Gini panels and cycle timing are built for that population. This is an eligibility check for the product you are requesting.
• Pregnancy and pregnancy planning: Gini is not available during pregnancy or if you plan to be pregnant by launch. This is a safety and eligibility check.
• Optional concerns: to prepare your founding-member experience. You can skip them or choose "I'm not sure yet."

We do not use this data for advertising. We do not sell consumer health data.

Who it is shared with

We do not send pregnancy answers, assigned-sex answers, or health concerns to Stripe, Meta, or other advertising platforms.

Processors that may store or transmit this data so we can provide the membership you requested include our website host and our internal operations store. They are not permitted to use it for their own marketing.

We may disclose data if required by law or to protect rights and safety.

Your rights

Depending on where you live, you may have the right to:

• Confirm whether we collect, share, or sell consumer health data.
• Access the consumer health data we hold about you.
• Withdraw consent for collection or sharing, where consent was required.
• Ask us to delete consumer health data, subject to legal exceptions.

Email privacy@gini.health. We may verify your identity before fulfilling a request. We will not deny goods or services, charge a different price, or provide a different level of service because you exercised these rights, except as the law allows when the data is needed to provide the membership.

Eligibility answers are needed to provide founding membership. If you withdraw consent for those checks, we cannot complete that purchase. You may still join the waitlist with email only.

What we do not do

• We do not sell consumer health data.
• We do not share it with advertisers or data brokers.
• We do not use a geofence around a healthcare facility to collect health data or to send related ads or messages.