HEALTH & BIOMETRIC DATA NOTICE, CONSENT, AND RETENTION

Last Updated: 12/23/2025

Scope.

This Notice explains how CalmTrade™ collects and uses certain health-related and biometric-related data in connection with compatible wearables and Apple HealthKit (“Health Data”), and describes your choices.

What we may collect.

Depending on what you enable, CalmTrade™ may collect or receive:

• Heart rate

• Heart rate variability (HRV)

• Resting heart rate

• Sleep-related metrics

• Steps and activity metrics

• Timestamps and device/app metadata associated with the above

Sources of Health Data.

Health Data may be obtained from:

• Polar devices (including Polar H10 and Polar 360) and related services you connect

• Apple HealthKit, when you grant permission

• Information you provide directly in the app (e.g., notes/tags)

How we use Health Data.

We use Health Data to:

• Provide wellness/awareness insights and educational context inside CalmTrade™

• Generate scores, trends, and notifications you request or enable

• Improve app performance, reliability, and features

• Maintain security, prevent fraud/abuse, and comply with legal obligations

No medical use.

CalmTrade™ does not use Health Data to provide medical advice, diagnosis, or treatment.

Your choices and controls.

You can:

• Choose which HealthKit data types to share and revoke access at any time in your device settings

• Disconnect wearable integrations

• Request deletion of your Health Data (subject to limited legal/security exceptions)

Consent.

By enabling a wearable integration and/or granting HealthKit permissions, you consent to CalmTrade™ accessing and using the Health Data you authorize, as described in this Notice and our Privacy Policy.

Retention and deletion.

We retain Health Data only as long as reasonably necessary for the purposes described above, unless a longer period is required or permitted by law. If applicable law requires a specific retention schedule for biometric information, we will permanently destroy such data when the initial purpose for collecting it has been satisfied or within the legally required time period after your last interaction with CalmTrade™, whichever occurs first.

Security.

We use administrative, technical, and physical safeguards designed to protect Health Data. No method of transmission or storage is 100% secure.

Contact.

Questions or requests can be sent to: joseph.burns@getcalmtrade.com