Privacy Policy

Zaro Health, Inc. ("Zaro Health," "we," "our," or "us") owns and operates the website located at zarohealth.com and other related websites and platforms and may own and/or operate an "Zaro Health" mobile application (collectively, the "Platform"). Your access and use of the Platform, any part thereof, or anything associated therewith, including its content ("Content"), any products or services provided through the Platform or Website or otherwise by Zaro Health, and any affiliated website, software or application owned or operated by Zaro Health (collectively, the "Services") are subject to this Privacy Policy ("Privacy Policy") unless specifically stated otherwise. Capitalized terms not otherwise defined in this Privacy Policy have the same meaning as set forth in the Terms of Service ("Terms of Service").

In keeping with this commitment, this Privacy Policy describes:

• Personal Information that we receive from you when you interact with the Services
• How we use and process the Personal Information that we receive
• If and why Personal Information may be disclosed to third parties
• Your choices regarding the collection and processing of your Personal Information

When you access the Services or send your Personal Information to us via email, text messages, or other electronic messages, you consent to receive communications from us, in accordance with this Privacy Policy.

Please read this Privacy Policy carefully. If you don't agree with this Privacy Policy, do not use our Services. By accessing or using our Services, you agree that you have read this Privacy Policy and you understand, and consent to be bound by, the terms and conditions herein. If you have not done so already, please also review our Terms of Service. The Terms of Service contain provisions that limit our liability to you. If you are using the Services on behalf of an individual other than yourself, you represent that you are authorized by such individual to act on such individual's behalf and that such individual acknowledges and agrees to the terms and conditions herein.

Changes to This Privacy Policy and Notifications

We reserve the right to amend this Privacy Policy at any time. We will notify you and/or require you to accept the updated Privacy Policy only if the supplemented, amended or otherwise modified Privacy Policy implements material changes from Zaro Health's then-current Privacy Policy. It is your responsibility to carefully review this Privacy Policy each time you visit, access or use the Service.

Zaro Health may provide you with notices, including those regarding changes to this Agreement, using any reasonable means now known or hereafter developed, including by email, regular mail, SMS, MMS, text message or postings on the Website or Platform. Such notices may not be received if you violate this Agreement by accessing the Website or Platform in an unauthorized manner. You agree that you are deemed to have received any and all notices that would have been delivered had you accessed the Services in an authorized manner. We will not make retroactive changes that reduce your privacy rights unless we are legally required to do so. Your continued use of our Services after we make changes shall constitute your acceptance of those changes, so please check this Privacy Policy periodically for updates. The amended Privacy Policy supersedes all previous versions.

Information We Collect About You

The Personal Information we collect depends on how you interact with us, the portions of the Service you use, and the choices you make. We receive and collect information that you directly submit to us or that we gather when you use our Services or interact with our advertising and applications on third-party websites and services, including:

• Personal information such as your name, mailing address, telephone number, email address, health data, demographic information (e.g., age, gender, ethnicity), payment information, communications via text and email, and third-party website, network, platform, server and/or application information.

• Non-personal information such as IP addresses and device information, usage data, including information that is passively or automatically collected through cookies, your browser or device, or other services, and information from third parties. Information we create or generate.

• Inferences from other data we collect, including using automated means to generate information about your likely preferences or other characteristics. For example, we infer your general geographic location (such as city, state, and country) based on your IP address. We may also collect information on your general physical location, which may be provided by you or collected through the use of our Website, Platform, or other communication channels.

• Personal Information related to your health history, biometrics, updated lab data or scans, and prior diagnoses in order to determine your eligibility for Services ("Healthcare Information"). In this Privacy Policy, we refer to all of the above as "Personal Information."

When you are asked to provide Personal Information, you may decline. And you may use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain services or features, those services or features may not be available or fully functional.

Healthcare Information

Zaro Health is not a healthcare provider, and therefore may not have to comply with the Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, and its related regulations and amendments from time to time (collectively, "HIPAA") and other state laws regarding specific protections for medical records information ("Privacy Laws"). However, Zaro Health may provide you with access to clinical care, tests, and prescriptions through our affiliated healthcare providers, labs, or pharmacies (collectively, "Affiliated Providers"), each of which may be subject to HIPAA. If those groups rely on Zaro Health to support their delivery of services to you (e.g., to provide them with electronic medical record storage or marketing services), and they disclose your Healthcare Information to us for that purpose, we will only use and disclose such information in accordance with applicable Privacy Laws.

When you purchase laboratory testing through our platform, Zaro Health works with Adept Labs, Inc. d/b/a Junction ("Junction"), a third-party lab testing service. Junction partners with licensed physicians and CLIA-certified laboratories to order and process your tests on your behalf. Your protected health information, including lab orders and results, will be shared with Junction and its affiliated physician network and laboratories as necessary to fulfill your order and return your results to you. This sharing is authorized by your HIPAA Authorization, which you must execute at the time of purchase. Junction's physician network acts as healthcare providers subject to HIPAA with respect to your protected health information. Your relationship with Junction's physician network is also governed by the Informed Consent for Telehealth Services set forth in our Terms of Service. Junction routes lab orders to CLIA-certified laboratories, including Quest Diagnostics. To place and fulfill your order, we share your name, date of birth, sex, phone number, email address, mailing address, and the specific test or panel you ordered with Junction and the performing laboratory.

Connected Health Apps and Wearables (Apple Health and Health Connect)

You may choose to connect Zaro Health to Apple Health (HealthKit) on iOS or to Health Connect on Android, as well as to compatible wearables and devices. If you grant permission, we access health and fitness data such as steps, distance, active energy or calories burned, sleep, heart rate, blood pressure, blood glucose, and blood oxygen saturation (SpO2). We access this data only after you affirmatively grant permission, and you can revoke that permission at any time through your device settings or within the app.

We use data obtained from Apple Health and Health Connect solely to provide and improve features that you can see and use in the app, including your Zaro Score, your biological age and heart age, your health metrics and trends, and your personalized recommendations.

We are committed to complying with the requirements of Apple HealthKit and Android Health Connect. Specifically, with respect to any data obtained through Apple Health or Health Connect:

• We do not use it for advertising, marketing, or any use-based data mining, and we do not use it to serve or target ads.
• We do not sell it, and we do not share it with data brokers, advertising platforms, or advertising or marketing partners.
• We do not use it to train artificial intelligence or machine learning models.
• We share it only with service providers and business associates who process it on our behalf and under contract solely to deliver the features described above, or as required to comply with applicable law.
• We do not disclose it to third parties except as necessary to provide those features to you, with your consent, or as required by law.

This section governs data obtained from Apple Health and Health Connect and controls over any more general statement in this Privacy Policy to the extent of any conflict.

How We Use Your Personal Information

Zaro Health processes your Personal Information for legitimate business purposes, the fulfillment of our services to you, compliance with our legal obligations, and/or your consent. We use Personal Information for the following purposes:

• fulfill the reason for which you shared such information. For example, if you enter your payment information, we will use it to process a payment;
• when you use our AI-powered health features, your health data and messages are sent to Google Gemini (Google Cloud Vertex AI), which processes them under a Business Associate Agreement solely to generate your requested response, on Zaro Health's behalf, and, under our agreement with Google, is never used to train AI models;
• communicate with you about and manage your account;
• understand you and your preferences to enhance your experience and enjoyment using our services;
• properly store and track your data within our system;
• determine your eligibility for the products and services available through the Services, including confirming your location;
• respond to lawful requests from public and government authorities, and to comply with applicable state/federal law, including cooperation with judicial proceedings and court orders;
• protect our rights, privacy, safety, or property, and/or that of you or others by providing proper notices, pursuing available legal remedies, and acting to limit our damages;
• manage and improve our operations, the Services, including the development of additional functionality;
• evaluate the quality of service you receive, identify usage trends, conduct research, and improve your experience;
• develop, test, or improve the Service and content, features and/or products or services offered via the Service, and identify or create new products or services;
• keep our Services safe and secure;
• send you information about changes to our terms, conditions, and policies;
• carry out our obligations and enforce our rights arising from any contracts entered into between users and us, including for collection of payments;
• provide you with email alerts, event registrations, and other notices concerning our products or services, or events or news, that may be of interest to you; and
• testing, research, analysis and product development.

In some states, we may be required to obtain your consent prior to using certain sensitive Personal Information that constitutes Healthcare Information.

We may de-identify your information and use, create, and sell such de-identified information for any business or other purpose not prohibited by applicable law. This does not apply to data obtained from Apple Health or Health Connect, which we never sell or use for advertising, whether in identifiable or de-identified form, as described in the "Connected Health Apps and Wearables" section above.

We may use your Personal Information to contact you with offers, promotions, and other marketing communications. We may also use cookies to provide relevant advertising or other communications or services. We do not use data obtained from Apple Health or Health Connect for any of these advertising or marketing purposes. You may opt out of receiving these messages at any time by following the unsubscribe link within the applicable message or by contacting us at support@zarohealth.com.

Cookies and Other Data Collection Tools

A cookie is a small piece of data sent from a website and stored on your computer by your web browser. Cookies contain information about your computer, such as a user ID, user settings, browsing history and activities conducted while using the Services. Cookies are not themselves personally identifiable but may be linked to Personal Information. A cookie typically contains the name of the domain (internet location) from which the cookie originated, the "lifetime" of the cookie (i.e., when it expires) and a randomly generated unique number or similar identifier.

The file is added once you agree to store cookies on your computer or device, and the cookie helps analyze web traffic or lets a web server know when you visit a particular site. Cookies allow sites to respond to you as an individual. Using cookies, the Website can also tailor its operations to your needs, likes, and dislikes by gathering and remembering information about your preferences. We use cookies and other data collection tools (such as web beacons and server logs), which we collectively refer to as "data collection tools," to help improve your experience with our Services. For example, we may use web beacons in our email messages or newsletters to tell us if you open and act on them.

Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies. Our apps contain software that enables us and our third-party analytics and advertising partners to access these mobile IDs.

How Do We and Our Partners Use Cookies and Similar Technologies?

We, and our analytics and advertising partners, use these technologies in our websites, apps, and online services to collect Personal Information (such as the pages you visit, the links you click on, and similar usage information, identifiers, and device information) when you use our services, including Personal Information about your online activities over time and across different websites or online services. This data is used to store your preferences and settings, enable you to sign-in, analyze how our websites and apps perform, track your interaction with the site or app, develop inferences, deliver and tailor interest-based advertising, combat fraud, and fulfill other legitimate purposes. We do not provide your health data, lab orders, or lab results to our third-party advertising partners. Our website uses the Meta Pixel as described below.

Analytics on Our Website

With your permission, our website uses Google Analytics (provided by Google LLC) to understand how visitors use the site, such as which pages are viewed, how visitors arrive, and how long they stay. These tools collect usage information, your IP address, browser and device information, and cookie or similar identifiers. Google Analytics does not load until you choose "Accept" in our cookie notice, and it does not load if your browser sends a Global Privacy Control signal. We also use Vercel Web Analytics, which does not use cookies, to measure site traffic. We use these tools to improve our website and do not use them to send Google or Vercel your name, email address, health information, lab orders, or lab results. Google Analytics is not loaded on the secure order-completion links we email to customers, or on our HIPAA authorization and account deletion pages. You can change your choice at any time using the "Cookie preferences" link in the footer of our website, install the Google Analytics opt-out browser add-on, or turn on Global Privacy Control in your browser.

Meta Pixel on Our Website

With your permission, our website (zarohealth.com) uses the Meta Pixel, a tracking technology provided by Meta Platforms, Inc., to measure the performance of our advertising and to show our ads to people who may be interested in Zaro Health. When you accept advertising cookies, the Meta Pixel may collect and send to Meta information about your visit, such as the pages you view, your IP address, browser and device information, and cookie or similar identifiers. Meta may associate this information with your Facebook or Instagram account if you are logged in and may use it under its own privacy policy.

• The Meta Pixel does not load until you choose "Accept" in our cookie notice, and it does not load if your browser sends a Global Privacy Control signal.
• The Meta Pixel is not loaded on our order completion, HIPAA authorization, or account deletion pages. On our checkout page, the Meta Pixel and Google Analytics may record that you reached checkout and which Zaro Health plan tier (Surface, Signal, or Source) you selected. We do not send Meta or Google your name, email address, date of birth, address, payment details, health information, lab orders, or lab results.
• The Meta Pixel is not used in the Zaro Health mobile app and is not used with data obtained from Apple Health or Health Connect.
• You can change your choice at any time using the "Cookie preferences" link in the footer of our website, by turning on Global Privacy Control in your browser, or through Meta's ad settings.

Overall, cookies help us provide you with a better experience with Zaro Health, by enabling us to monitor which pages you find useful and which you do not.

You can accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies if you prefer. To find out more about cookies, including how to manage and delete cookies, visit www.allaboutcookies.org. Some web browsers (including some mobile web browsers) provide settings that allow a user to reject cookies or to alert a user when a cookie is placed on the user's computer, tablet or mobile device. Most mobile devices also offer settings to reject mobile device identifiers. Although users are not required to accept cookies or mobile device identifiers, blocking or rejecting them may prevent access to some features available through the Services.

Note: We do not currently respond to web browser "do not track" signals. We do treat a Global Privacy Control signal as a request to opt out of the Meta Pixel and other advertising technologies on our website. If we do so in the future, we will describe how we do so in this Privacy Policy.

Artificial Intelligence Features

We use Google Gemini (Google Cloud Vertex AI) to power our AI Assistant, including chat-based support and automated summaries of your lab results. When you use these features, we send Google the following categories of your information: your profile (name, age, sex, height, weight), your lab and biomarker results, data from connected wearables, and the messages you send in chat. Google processes this data under a Business Associate Agreement, with contractual protections equivalent to those described in this Privacy Policy, solely to generate the response or summary you requested. Under our agreement with Google, this data is never used to train Google's models. We ask for your affirmative consent before any of this information is first sent to Google, and you may withdraw that consent at any time in the app's Settings, which stops future AI features from running (though it does not retroactively delete a summary or response already generated). We do not use AI systems to make decisions that have a legal or similarly significant effect on you without human review.

Text Messaging (SMS/MMS)

How We Obtain Your Consent

We send text messages (SMS/MMS) only to users who have explicitly opted in. Consent is obtained through a standalone, unchecked opt-in displayed on an applicable account or messaging screen. This consent is separate from acceptance of our Terms of Service or Privacy Policy; you must affirmatively opt in to receive SMS messages. Consent to receive text messages is never required to purchase our products or services.

What Messages You May Receive

If you opt in to receive SMS messages from Zaro Health, you may receive the following types of text messages:

• Transactional messages: order confirmations, lab result availability notifications, and account updates
• Service reminders: appointment reminders and test kit status updates
• Account alerts: security notifications and important account changes
• Promotional messages: special offers and new product announcements (only if you have separately consented to marketing communications)

We do not transmit sensitive health data or lab results via unencrypted SMS. Lab results are accessed securely through your account.

Message Frequency and Rates

Message frequency varies based on your interaction with our Services. Message and data rates may apply. Your carrier may charge standard rates for SMS messages sent or received.

How to Opt Out

You may opt out of SMS messages at any time by:

• Replying STOP to any SMS message you receive from us
• Contacting us at support@zarohealth.com with the subject line "SMS Opt-Out"

Upon receiving your STOP request, we will send a final confirmation message and cease sending SMS messages. To re-enroll, reply START or re-check the opt-in box at sign-up.

How to Get Help

Reply HELP to any SMS message for assistance, or contact us at support@zarohealth.com. For questions specific to your text or data plan, contact your wireless carrier directly.

Additional Acknowledgments

By opting in to SMS communications, you acknowledge that:

• You are the owner or authorized user of the mobile device receiving messages;
• SMS messages may be sent using automated technology;
• Consent is not a condition of purchase;
• Standard message and data rates may apply;
• Zaro Health is not liable for delayed or undelivered messages due to carrier issues; and
• Your phone number will not be sold or shared with third parties for their own marketing purposes.

Advertising and Marketing Analytics and Opting Out

We may use the following analytics program(s) to collect information about you and your behaviors as a consumer. To learn more about the analytics program(s) and how you can opt out of information sharing, see below.

• Meta: (1) Privacy Policy; (2) Opt Out Settings.
• Google Analytics: (1) Privacy Policy; (2) Opt Out Settings.
• TikTok: (1) Privacy Policy; (2) Opt Out Settings.

You can also use third-party opt-out controls such as NAI and DAA.

Disclosure of Your Personal Information

We do not sell, share, or otherwise disclose your Personal Information for reasons other than those described in this Privacy Policy.

We may disclose your Personal Information to a few third parties, including:

• Affiliated Providers from whom you choose to receive products or services
• our parent company, subsidiaries and affiliates;
• the third-party service providers, contractors, subcontractors, and business associates we use to support our business (e.g., software vendors, diagnostic testing partners, including lab ordering services such as Adept Labs, Inc. d/b/a Junction and their affiliated physician networks and laboratories — see "Healthcare Information" above for the specific data fields shared to place a lab order; and Google Gemini/Google Cloud Vertex AI for AI-powered features, see "Artificial Intelligence Features" above);
• law enforcement or government agencies in order to protect the security, safety, and rights of our users and ourselves or when we believe that doing so is necessary to comply with applicable law or respond to valid legal process;
• website analytics and advertising providers, such as Google (Google Analytics), Vercel and Meta (Meta Pixel), which receive online identifiers, IP address, device and browser information, and pages viewed through the technologies described in "Cookies and Other Data Collection Tools" above, but not your health information, lab orders, or lab results;
• marketing and advertising partners, including marketing analytics vendors, in compliance with applicable law (we never disclose data obtained from Apple Health or Health Connect to these partners); and
• to any company we might merge with or acquire, or that acquires us, or in the event of structural change of our company of any form (e.g., a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding).

We may also disclose, without restriction, aggregated information about our users and information that does not identify any individual user. Our use of aggregated and de-identified data will comply with applicable law.

Your Rights

You can access, review and update or change your account information through our Services. If you have any questions about how to access other Personal Information, or if you would like to correct or delete any Personal Information we collect and maintain, please contact us at support@zarohealth.com. We will accommodate requests as required by law. Otherwise, we will retain a record of your request, and your Personal Information will be maintained in accordance with this Privacy Policy and our data retention and deletion policies ("Retention Policies").

For Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and Washington ONLY:

Right to Know

You have a right to request that we disclose to you the Personal Information we have collected about you. You also have a right to request additional information about our collection, use, disclosure, or sale of such Personal Information. Note that we have provided much of this information in this Privacy Policy. You may make such a "request to know" by emailing us at support@zarohealth.com.

Right to Opt-Out

You have the right to opt out of the processing of your Personal Information for purposes of targeted advertising, the sale of Personal Information, or profiling. You may exercise this right at any time by using our universal opt-out mechanism, or by following the 'Do Not Sell or Share My Information' link at the bottom of our website and in our mobile app settings. These options are designed to be clear, conspicuous, and accessible to all users.

You may submit a request to opt out of the processing of your Healthcare Information by contacting us at support@zarohealth.com with the subject line "Healthcare Data Opt-Out."

Consent and Opt-In for Processing Personal Information

Where required, we will request your explicit opt-in consent to process Personal Information. You may revoke this consent at any time by contacting us at support@zarohealth.com with the subject line "Personal Information Opt-Out."

Your Rights to Access, Correction, Deletion, and Data Portability

You have the right to: (1) confirm whether we are processing your Personal Information, (2) access that data, (3) correct inaccuracies, (4) delete your Personal Information, and (5) receive your Personal Information in a portable, technically feasible format. Requests can be made by contacting us at support@zarohealth.com.

Your Rights re: Disclosure of Personal Information to Third Parties

You may request a list of the categories of third parties with whom we share your Personal Information by contacting us at support@zarohealth.com.

Right to Limitation

CALIFORNIA RESIDENTS ONLY: You have the right to request restrictions on the processing of your Personal Information. This includes the right to limit the use and disclosure of your Personal Information to that which is necessary for the provision of our services, compliance with legal obligations, or as otherwise permitted by law. To exercise this right, please contact us at support@zarohealth.com with the subject line "California Right to Limitation." We will evaluate your request and comply as required by applicable law.

Right to Non-discrimination

CALIFORNIA RESIDENTS ONLY: We are committed to ensuring that you do not face discrimination for exercising any of your rights under the California Consumer Privacy Act (CCPA). This means that, unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

If you have questions about your rights or how we comply with these requirements, please contact us at support@zarohealth.com.

Responding to Your Requests

We will respond to your request to exercise these rights within 45 days. In some cases, we may require up to an additional 45 days to respond, depending on the complexity and number of requests. You will be notified if we require more time.

Verification of Rights Requests

To ensure secure handling of your data rights requests, we require that all requests be submitted from the email address associated with your account. This helps verify your identity and protect your information.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under this section. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.

How We Keep Your Personal Information Secure

We retain Personal Information as long as it is necessary and relevant for our operations. We also retain Personal Information from closed accounts to comply with applicable law, prevent fraud, resolve disputes, troubleshoot problems, assist with investigations, enforce our Terms of Service, collect any fees owed, and take other actions permitted by law. After it is no longer necessary for us to retain information, we dispose of it according to our Data Retention Policies.

We strive to use industry-standard data collection, storage, and processing practices and security measures to protect against any unauthorized access to, accidental loss of, or disclosure of your information. These safeguards may vary based on the sensitivity of the information that we collect and store.

No security method or combination of methods is completely secure. We will always do our best and will work with third-party service providers that strive to do the same, but we cannot warrant or guarantee the absolute security of any Personal Information that may be transmitted to or from our Services. There is no guarantee that Personal Information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. Therefore, any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services or your computer or mobile device.

We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data. You are responsible for maintaining the security of any password, user ID or other form of authentication involved in obtaining access to password protected or secure areas of our Services. To protect you and your data, we may suspend your use of any of the Services without notice, pending an investigation, if any breach of security is suspected. If you have reason to believe that the security of your Account has been compromised, please notify us immediately at support@zarohealth.com.

Please note that we will never send you an email requesting confidential information, such as account numbers, usernames, passwords, or Social Security Numbers.

In the event of a data or security breach, we will take the following actions: (i) promptly investigate the security incident, validate the root cause, and, where applicable, remediate any vulnerabilities within our control which may have given rise to the security incident; (ii) comply with laws and regulations directly applicable to us in connection with such security incident; (iii) as applicable, cooperate with any affected user in accordance with the terms of our contract with such user; (iv) document and record actions taken by us in connection with the security incident; and (v) conduct a post-incident review of the circumstances related to the incident and actions/recommendations taken to prevent similar security incidents in the future. We will notify you of any data or security breaches as required by and in accordance with applicable law.

Data Retention

We may retain your Personal Information for as long as necessary for our business purposes, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. We reserve the right to retain and use your information as necessary to provide our Services and fulfill our business operations. We may dispose of or delete any such information at our discretion, subject to any other agreement you may have with us or as required by applicable law.

Similarly, our Affiliated Providers may retain your Personal Information for periods they deem necessary for their operational purposes, to comply with their legal obligations, to resolve disputes, and to enforce their agreements. These Affiliated Providers may dispose of or delete your information in accordance with their own retention policies, except as otherwise outlined in any agreements you have with them or as required by law.

Links to Other Sites

Our Services may contain links to third-party websites, services, applications, or other resources not operated by us ("Third Party Services"). Any information you provide to these parties is not subject to the terms of this Privacy Policy. It is your responsibility to review these policies, as they govern how these third parties handle your Personal Information, including the duration for which it is retained and the conditions under which it may be disposed of or deleted.

This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any Third Party Service, including any third party operating a website or service to which the Services link. The inclusion of a link on the Services does not imply our endorsement of the linked site or service. Personal Information collected by our Affiliated Providers is subject to those providers' Notice of Privacy Practices or other data privacy notices, which you can request at the time of your receipt of healthcare services.

We are not responsible for the information collection, use, disclosure, or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, or any other app developer, app provider, social media platform, operating system provider, wireless service provider, or device manufacturer, including any Personal Information you disclose to other organizations through our Website, Platform, or social media pages.

Children Under the Age of 18

This Website and Platform are not for persons under the age of 18 (collectively, "Minors"). Minors are not authorized to use this Website or the Platform, or to provide any information through the Services. We do not solicit or knowingly collect information from Minors, and if we become aware of any such information being collected, we will take immediate action to delete it. Should you become aware that we have collected Personal Information from a Minor, please contact us at support@zarohealth.com.

Opt-Out and Unsubscribe

We may send communications, including emails, to you using your Personal Information. You may opt out of receiving certain communications (e.g., newsletters, promotions) at any time, using any of the methods below. However, even if you opt out, we may still send you communications necessary to provide ongoing services you request from us — for example, order confirmations, appointment details, account and security notices, and results that require your attention.

• Unsubscribe link. Every marketing and preference-based email includes an unsubscribe link in its footer. Selecting it stops that category of email immediately. You do not need to sign in.
• Your mail app's unsubscribe button. These emails also support one-click unsubscribe, so the control built into Gmail, Apple Mail, Yahoo Mail, and similar apps will work.
• Communication preferences. You can turn individual categories of email, push, and text message on or off at any time in the Zaro Health app or member portal, under Settings.
• Text messages. Reply STOP to any text message from us to stop further messages to that number, or HELP for assistance. Message and data rates may apply.
• By email. You may also write to support@zarohealth.com and tell us what you would like to stop receiving.

We honor opt-out requests promptly, and in all cases within ten (10) business days of receipt.

Jurisdiction and Cross-Border Transfer

We are located in the United States. We may store and process your Personal Information in any country where we have facilities or in which we engage service providers. By using the Services, you understand that your information may be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country.

Contacting Us

If you would like to receive additional information about our privacy practices, have questions, or would like to make a request, you may contact us at the addresses below.

support@zarohealth.com

Zaro Health, Inc. Attn: Privacy Officer 5601 Eagleglen Pl, Lithia, FL 33547, USA

Registered Agent for Service of Process: Legalinc Corporate Services Inc. 131 Continental Dr Suite 305 Newark, DE 19713, USA