Consumer Health Data Privacy Policy

This policy explains how United States Brain Computer Corporation handles consumer health data. It supplements our Privacy Policy.

Consumer health data we collect

We may collect:

• Health conditions, diagnoses, symptoms, treatments, accessibility needs, or health experiences you choose to share about yourself or a child for whom you are a parent or legal guardian.
• Interest selections that may indicate a relationship to a health condition, such as patient or caregiver status.
• Your name and email address when connected to health information.
• Who your message is about and, if it is about a child, your confirmation that you are the child's parent or legal guardian.

Health information is optional. If you write about a child, please leave out identifying details that we do not need.

Where it comes from

We receive consumer health data directly from adults who share information about themselves or a child for whom they are a parent or legal guardian. They may share it through the interest form, email, or other communications. We do not currently buy consumer health data or obtain it from data brokers.

Why we collect and use it

With your consent, we use consumer health data only to:

• Respond to you and send updates.
• Understand community interest and needs.
• Inform company and product planning.
• Create aggregate counts for business planning and fundraising.

We may also use it when necessary to protect rights, safety, and security or comply with law.

How we handle it

We validate and store form submissions in Cloudflare D1. We review them only for the purposes described above and use Google Workspace when we communicate with you. Access is limited to people who need the information for those purposes.

Selling and sharing

We do not sell consumer health data or share it with third parties or affiliates for their own purposes.

• Consumer health data we share: None.
• Third parties or affiliates we share it with: None.

Cloudflare processes this data on our behalf to host and secure the site and store form submissions. Google Workspace may process it on our behalf when we communicate by email.

No third party collects consumer health data through our site over time and across unrelated websites or online services.

We do not give identifiable consumer health data to investors, advisors, or potential partners without your separate permission.

Your rights

Depending on where you live, you may:

• Confirm whether we collect, share, or sell your consumer health data and access that data.
• Request correction of inaccurate consumer health data.
• Withdraw consent for future collection or use.
• Request deletion of your consumer health data.
• Appeal a decision we make about your request.

A parent or legal guardian may make these requests for their child. We may need to confirm that authority.

To make a request, email privacy@usbraincomputer.com. You do not need an account. We may ask for the minimum information needed to verify your request and will use it only for that purpose. Do not include more health details in your first email.

We will respond within 45 days after we receive your request. If we reasonably need more time, we may extend that period once for another 45 days and will tell you why. When allowed by law, deletion from archived or backup systems may take up to six months after we verify a deletion request.

If you disagree with our decision, reply to it or email the same address with "Privacy appeal" in the subject line within a reasonable period. We will respond within 45 days. If we deny your appeal, we will explain how to submit a complaint to the Washington Attorney General.

How long we keep information

We plan to keep interest-form submissions for up to 24 months, subject to the exceptions described in our Privacy Policy. If you withdraw consent, we will stop future collection and use. Withdrawal does not affect uses that occurred before you withdrew consent.

Changes to this policy

We will post updates here. For material changes, we will email affected people when appropriate or required by law. When required by law, we will obtain new consent before collecting new categories of consumer health data or using existing data for a materially new purpose.

Effective: July 14, 2026

Contact

For questions or requests, email privacy@usbraincomputer.com.