Consumer Health Data Privacy Policy

This policy applies exclusively when you utilize ScoreRaiser services in a manner that involves the processing of consumer health data, and you reside in a jurisdiction where such data is subject to specific statutory protections. ScoreRaiser's core infrastructure is not designed as a primary repository for health or medical records. However, if you choose to integrate third-party health applications with our platforms, or if you voluntarily input health-related information into our systems, this policy governs the handling of that specific data.

Depending on your interactions and integrations with our services, we may process the following categories of consumer health data: • User-Provided Information: Any health-related information you explicitly type, upload, or submit into our analytical tools or systems. • Integration Data: Data imported from third-party health applications or devices that you have explicitly authorized to connect with your ScoreRaiser account. This may include metrics related to physical activity, wellness goals, or physiological measurements, depending on the nature of the connected application.

We process consumer health data strictly for the following operational purposes: • Service Functionality: To enable the specific features or integrations you have requested. • Security and Integrity: To monitor our systems for unauthorized access, prevent fraudulent activity, and ensure compliance with our Usage Policy. • System Improvement (Aggregated): We may utilize fully anonymized and aggregated data, which no longer identifies any individual, to refine our analytical models and improve overall system performance. We will obtain your explicit, affirmative consent before processing consumer health data for any purpose not directly related to providing the service you requested.

ScoreRaiser maintains strict controls over the disclosure of consumer health data. We do not sell this information. We may disclose consumer health data in the following limited scenarios: • Authorized Integrations: If you configure your ScoreRaiser account to interact with a third-party service, data will be shared with that service according to your instructions. • Service Providers: We may share data with trusted infrastructure providers who are contractually bound to process the data solely on our behalf and under strict confidentiality obligations. • Legal Obligations: We may disclose data if compelled by a valid legal process, such as a subpoena or court order, or to protect the safety and rights of ScoreRaiser and its users.

If you reside in a jurisdiction covered by consumer health data laws, you possess specific rights regarding this information: • Right to Access: You may request confirmation of whether we are processing your consumer health data and request a copy of that data. • Right to Withdraw Consent: If processing is based on your consent, you may withdraw that consent at any time. • Right to Deletion: You may request the permanent deletion of your consumer health data from our systems. To submit a request, please contact: info@scoreraiser.com

We may update this Consumer Health Data Privacy Policy to reflect changes in legal requirements or our operational practices. The "Effective Date" at the top of this document will indicate when the latest revisions were made.

For any inquiries specific to the handling of consumer health data, please reach out to: ScoreRaiser, Inc. 4801 Glenwood Ave Suite 200-1105 Raleigh, NC 27612 Email: info@scoreraiser.com