Consumer Health Data Privacy Policy

This policy describes how United States Brain Computer Corporation handles consumer health data. It supplements our Privacy Policy.

Consumer health data we collect

We may collect:

• Health conditions, diagnoses, symptoms, treatments, accessibility needs, or health experiences you choose to describe.
• Interest selections that may indicate a relationship to a health condition, such as patient or caregiver status.
• Your name, email address, and other identifying information when linked to health information.

Health information is optional. Do not identify a child or submit a child's health information.

Sources

We collect consumer health data directly from you when you submit the interest form, email us, or otherwise communicate with us. We do not currently buy consumer health data or obtain it from data brokers.

Why we collect and use it

With your consent, we use consumer health data only to:

• Respond to you and send updates.
• Understand community interest and needs.
• Inform company and product planning.
• Create aggregate counts for business planning and fundraising.

We may also process information when necessary to protect rights, safety, and security or comply with law.

Selling and sharing

We do not sell consumer health data.

• Categories of consumer health data shared: None.
• Categories of third parties or affiliates receiving it: None.

Cloudflare processes data for us to host and secure the site and store form submissions. Google Workspace may process data for us when we communicate by email. These service providers process data on our behalf to provide those services.

We do not provide identifiable consumer health data to investors, advisors, or potential partners without your separate permission.

Your rights

Subject to applicable law, you may:

• Confirm whether we collect, share, or sell your consumer health data and access that data.
• Withdraw consent for future collection or use.
• Request deletion of your consumer health data.
• Appeal a decision we make about your request.

Submit a request at privacy@usbraincomputer.com. We will not require you to create an account. We may ask for information needed to authenticate your request and will use it only for that purpose. Do not include additional health details in your initial request.

We will respond within 45 days of receiving your request. When reasonably necessary, we may extend that period once by another 45 days and will tell you why. Deletion from archived or backup systems may be delayed for up to six months after authenticating a deletion request where permitted by law.

To appeal a decision, reply to our decision or email the same address with "Privacy appeal" in the subject line within a reasonable period. We will respond within 45 days. If we deny the appeal, our response will explain how to submit a complaint to the Washington Attorney General.

Retention

We currently plan to retain interest-form submissions for up to 24 months, subject to the exceptions described in our Privacy Policy. Withdrawing consent stops future collection and use but does not affect processing that occurred before withdrawal.

Changes to this policy

We will post updates here. We will obtain consent before collecting new categories of consumer health data or using existing data for a materially new purpose when required by law.

Contact

Questions or requests: privacy@usbraincomputer.com.