Washington Consumer Health Data Privacy Notice

1. About Us

Volted Labs, LLC is a Delaware limited liability company.

• Registered Office: 131 Continental Dr, Suite 305, Newark, DE 19713, County of New Castle, USA
• Registered Agent (Delaware): Legalinc Corporate Services Inc.
• Privacy contact: help@volted.app
• Website: https://volted.app

2. Who This Notice Applies To

This Notice applies to "consumers" as defined under MHMDA — Washington State residents and any individuals whose consumer health data is collected in Washington — who use the Volted mobile app, our website, or related services (collectively, the "Service").

3. What Is "Consumer Health Data"?

Under MHMDA, "consumer health data" means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status, including:

• Conditions, treatments, diseases, or diagnoses
• Bodily functions, vital signs, and symptoms
• Use of medications
• Reproductive or sexual health information
• Gender-affirming care information
• Health-related diagnoses, surgeries, procedures
• Biometric data
• Body weight, body fat percentage, and other body composition measurements (as collected in Volted)
• Exercise and fitness activity that constitutes inferences about health status
• Precise location information that could reasonably indicate health activity (we do not collect this)

4. Categories of Consumer Health Data We Collect

We collect the following categories of consumer health data when you use the Service:

We do NOT currently collect:

• Diagnoses, medications, treatment information
• Reproductive or sexual health data
• Gender-affirming care data
• Biometric identifiers (fingerprints, facial recognition, etc.)
• Precise geolocation data
• Mental health data
• Data from Apple HealthKit or Google Fit (planned for future releases — separate consent will be required)

5. Sources of Consumer Health Data

We collect consumer health data from:

• Directly from you — when you create an account, set goals, log workouts, or enter body composition measurements
• Automatically through your use of the Service — for example, derived from your in-app activity (e.g., program adherence patterns)

We do not purchase consumer health data from third parties. We do not collect consumer health data from third-party sources without your consent.

6. How We Use Consumer Health Data

We use consumer health data only for the following purposes, with your consent (which you provide by using the Service after reading this Notice):

• To provide the Service — show your training history, calculate progress metrics, deliver appropriate workouts and programs, allow you to track body composition over time
• To personalize your experience — recommend programs and content tailored to your goals and history
• To operate and improve the Service — analyze aggregate, anonymized patterns to fix bugs and improve features
• To send service communications — notify you of relevant updates and account-related information
• To comply with legal obligations and protect rights, safety, or property

We do NOT use consumer health data for:

• Targeted advertising
• Sale to third parties
• Profile-building for marketing
• Sharing with data brokers
• Selling consumer health data in any form (this is prohibited absent valid consumer authorization, which we do not seek)

7. How We Share Consumer Health Data

We share consumer health data only with the following categories of recipients:

We do NOT:

• Sell consumer health data to any third party
• Share consumer health data with data brokers
• Share consumer health data for cross-context behavioral advertising
• Disclose consumer health data to any party for marketing purposes

8. Your Rights Under MHMDA

If you are a Washington consumer, you have the following rights with respect to consumer health data:

8.1 Right to Confirm

You have the right to confirm whether we are collecting, sharing, or selling your consumer health data, and to access that data.

8.2 Right to Withdraw Consent

You have the right to withdraw consent to our collection and sharing of your consumer health data at any time.

8.3 Right to Delete

You have the right to have your consumer health data deleted. Upon a valid deletion request, we will delete the data from our records, including data held by our service providers, within 45 days.

8.4 Right to Appeal

If we deny your request, you have the right to appeal our decision. We will respond to appeals within forty-five (45) days of receipt. If we deny your appeal, you may contact the Washington State Attorney General's Office at https://www.atg.wa.gov/file-complaint.

8.5 Right Not to Be Discriminated Against

We will not discriminate against you for exercising any of these rights.

9. How to Exercise Your Rights

To exercise any of the rights described above, contact us:

• Email: help@volted.app (subject: "Washington Health Data Request")
• Mail: Volted Labs, LLC, c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA

Please include:

• Your full name and account email
• A clear description of the right you wish to exercise
• Any details necessary for us to verify your identity (we will not request more than necessary)

We will respond within 45 days. If we need more time, we will notify you in writing of the reason and the extended deadline (not to exceed an additional 45 days).

10. Consent

By using the Service, you provide affirmative consent to our collection and use of consumer health data as described in this Notice for the purposes described in Section 6.

You may withdraw consent at any time by:

• Deleting your account through the in-app settings, or
• Emailing help@volted.appwith the subject "Withdraw Consent"

Withdrawal of consent will not affect the lawfulness of any processing conducted before the withdrawal.

11. Data Sales and Authorization

We do NOT sell consumer health data. MHMDA generally prohibits the sale of consumer health data without valid consumer authorization, which we do not seek. Should our practices ever change, we will obtain explicit, separate authorization from you in compliance with MHMDA.

12. Geofencing Notice

MHMDA prohibits the use of geofencing around facilities that provide in-person health care services for purposes of identifying or tracking consumers seeking health care services, collecting health data, or sending notifications, messages, or advertisements.

Volted does not use geofencing of any kind. We do not collect precise location data or any data tied to physical locations.

13. Security

We protect consumer health data using reasonable technical, administrative, and physical safeguards, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest where appropriate
• Access controls limiting personnel access to consumer health data
• Vendor data-protection agreements
• Regular security review of practices

If we become aware of a security incident affecting your consumer health data, we will notify you and applicable authorities as required by law.

14. Children

The Service is not intended for users under 16. We do not knowingly collect consumer health data from anyone under 16. If we discover such data has been collected, we will delete it promptly.

15. Changes to This Notice

We may update this Notice from time to time to reflect changes in our practices, legal requirements, or the Service. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated through the Service.

16. Contact Us

For any questions about this Notice, your consumer health data, or your rights under MHMDA:

• Email: help@volted.app
• General Support: help@volted.app
• Mail: Volted Labs, LLC, c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA

You may also contact the Washington State Attorney General's Office at https://www.atg.wa.gov/.