Glimpse Consumer Health Data Privacy Policy

For purposes of this policy, Consumer Health Data means personal information that identifies or can reasonably be linked to a consumer and identifies or reveals information concerning that consumer's past, present, or future physical or mental health status.

Depending on applicable law, Consumer Health Data may include information that Glimpse directly collects as well as information that can reasonably be inferred from other information.

For Glimpse, Consumer Health Data can include the categories described below.

2.1 Glucose Information

This may include:

• blood glucose readings;
• fasting glucose readings;
• post-meal glucose readings;
• reading date and time;
• glucose trends;
• glucose averages;
• time-in-range statistics;
• glucose patterns;
• glucose variability;
• high or low glucose events recorded by the user;
• glucose information imported from compatible devices or applications; and
• information inferred or calculated from glucose readings.

2.2 Diabetes-Related Information

You may choose to provide:

• diabetes-related status or information;
• HbA1c;
• diabetes management goals;
• diabetes-related notes;
• information regarding treatment or management;
• health questionnaire information; and
• other information relating to glucose management.

2.3 Meal and Nutrition Information

We may collect:

• foods and beverages;
• meals and snacks;
• meal timing;
• nutritional information;
• portion information;
• meal tags;
• food photographs, if enabled;
• notes concerning meals; and
• relationships or patterns between meals and glucose readings.

When combined with health information or used to infer health status, meal and nutrition information may constitute Consumer Health Data.

2.4 Medication Information

If you use medication-related functionality, we may collect:

• medication name;
• medication schedule;
• medication reminders;
• medication-related notes; and
• information you voluntarily provide regarding medication use.

We do not require medication information to use Glimpse's basic glucose logging functionality unless otherwise explained when a feature is introduced.

2.5 Body and Wellness Information

Depending on features you choose to use, this may include:

• weight;
• blood pressure;
• exercise or activity;
• sleep;
• wellness goals;
• symptoms;
• lifestyle information; and
• other health metrics.

2.6 Information From Health Devices and Applications

With your authorization, we may receive health information from sources such as:

• Apple Health;
• Health Connect;
• glucose meters;
• CGM systems;
• wearable devices;
• fitness platforms;
• nutrition services; and
• other compatible health services.

We do not access these sources unless you connect or authorize the applicable integration.

2.7 Consumer Health Data Inferences

We may generate health-related information from data you provide.

Examples may include:

• identifying that glucose readings appear higher after certain meals;
• identifying glucose patterns at particular times;
• identifying changes in averages;
• calculating trends;
• generating wellness observations;
• generating reports; or
• generating AI-assisted health and wellness insights.

Because these results can reveal information about your health, we treat identifiable health-related inferences as Consumer Health Data where appropriate.

We may collect Consumer Health Data from the following categories of sources.

### Directly From You

For example, when you:

• enter a glucose reading;
• record a meal;
• enter medication information;
• complete a questionnaire;
• add notes;
• configure a health goal; or
• upload information.

### Devices and Applications You Connect

For example:

• glucose monitors;
• CGMs;
• Apple Health;
• Health Connect;
• wearable devices; and
• other health applications.

### Information Generated by Glimpse

We may generate Consumer Health Data using:

• calculations;
• analytics;
• algorithms;
• machine learning;
• statistical models; and
• artificial intelligence.

### Service Providers Acting on Our Behalf

A service provider may process information to enable a feature requested by you and return information or results to Glimpse.

We collect and process Consumer Health Data to provide Glimpse functionality requested by you.

Purposes may include:

• recording glucose readings;
• maintaining your health history within Glimpse;
• recording meals;
• comparing meals with glucose readings;
• displaying dashboards;
• displaying charts;
• calculating health-related statistics;
• identifying trends;
• generating reports;
• creating downloadable or shareable reports;
• providing reminders;
• providing health and wellness insights;
• operating connected-device integrations;
• synchronizing information;
• generating AI-assisted insights when requested;
• responding to your support requests;
• maintaining data integrity;
• preventing unauthorized account access;
• protecting Glimpse security; and
• complying with applicable legal obligations.

We will not materially expand these purposes in a manner requiring consent under applicable Consumer Health Data laws without providing required notice and obtaining the appropriate consent.

Consumer Health Data may be:

• entered by you;
• transmitted securely to Glimpse systems;
• stored in databases;
• organized into records;
• analyzed;
• used in calculations;
• associated with your account;
• displayed in charts and dashboards;
• included in reports;
• used to generate requested insights;
• transmitted to a connected service at your direction;
• processed by service providers acting on our behalf; and
• deleted or de-identified when no longer required.

Where appropriate, access is limited to authorized personnel and processors who have a legitimate reason to process the information.

Where required by applicable law, Glimpse will obtain appropriate consent before collecting Consumer Health Data.

The consent request will describe relevant information such as:

• the categories of Consumer Health Data involved;
• the purpose of collection;
• how the information will be used; and
• how you may withdraw consent.

Certain Consumer Health Data may be processed without separate consent when processing is necessary to provide a product or service that you specifically requested and applicable law permits that processing.

Where applicable law requires consent before Glimpse shares Consumer Health Data, we will obtain consent that is separate from consent to collect the information unless sharing is necessary to provide a product or service that you requested or another legal exception applies.

A sharing-consent request may identify:

• the Consumer Health Data involved;
• why it will be shared;
• categories of recipients;
• how the information will be used; and
• how you can withdraw consent.

Depending on the features you use, the categories of Consumer Health Data that may be shared with processors or other recipients include:

• glucose information;
• meal and nutrition information;
• medication information;
• health goals;
• wellness metrics;
• health-related notes;
• device-derived health information;
• health-related inferences; and
• identifiers necessary to associate information with your account.

We limit sharing to what is reasonably necessary for the relevant purpose.

Consumer Health Data may be provided to the following categories of recipients.

9.1 Cloud and Database Providers

Providers that host or store Glimpse application data.

9.2 Authentication and Security Providers

Providers that support:

• account authentication;
• security;
• account protection; and
• fraud prevention.

9.3 Application Infrastructure Providers

Providers that support:

• backend functionality;
• application delivery;
• system monitoring;
• technical operations; and
• data synchronization.

9.4 AI Service Providers

If you use an AI-powered Glimpse feature, limited Consumer Health Data may be processed by an AI service provider acting on our behalf to produce the requested result.

We seek to prohibit such providers from using identifiable Consumer Health Data to train general-purpose AI models where the provider is acting as a Glimpse processor.

9.5 Connected Health Services

When you direct Glimpse to communicate with another health service, Consumer Health Data may be exchanged with that service as necessary to provide the integration.

9.6 People You Choose

When you choose to export or share information, Consumer Health Data may be disclosed to:

• healthcare professionals;
• family members;
• caregivers; or
• other people selected by you.

9.7 Legal Recipients

Information may be disclosed to government authorities or other parties where required or permitted by applicable law.

GLIMPSE DOES NOT SELL CONSUMER HEALTH DATA.

We do not exchange your Consumer Health Data for money or other valuable consideration in a manner constituting a sale under applicable Consumer Health Data law.

If Glimpse ever proposes to sell Consumer Health Data, we would first implement the notices, consent, authorization, and other protections required by applicable law.

A user would not be required to authorize the sale of Consumer Health Data as a condition of obtaining Glimpse functionality where such conditioning is prohibited by law.

We do not use Consumer Health Data for targeted advertising.

We do not provide glucose readings, medication information, health conditions, or other Consumer Health Data to advertising networks so that they can target advertisements based on your health.

We do not permit third parties to create advertising profiles based on your Glimpse Consumer Health Data.

Glimpse does not authorize third parties to collect Consumer Health Data through Glimpse over time and across unrelated websites or online services for behavioral advertising or health profiling.

General technical analytics used to operate Glimpse must be configured so that Consumer Health Data is not intentionally disclosed for cross-site behavioral tracking.

Certain Glimpse features may use artificial intelligence.

If you choose to use such functionality, Consumer Health Data may be processed to generate the feature you requested.

Examples could include:

• summarizing glucose trends;
• identifying meal/glucose patterns;
• generating wellness observations;
• explaining reports; or
• answering questions about information stored in Glimpse.

Glimpse does not use identifiable Consumer Health Data to train general-purpose artificial intelligence models unless we separately disclose the proposed use and obtain any consent required by law.

Where possible, Glimpse may use:

• de-identified information;
• aggregated information;
• synthetic information; or
• other privacy-preserving techniques

for internal testing and product development.

Depending on applicable law, you may have the right to:

### Confirm Collection

Ask whether Glimpse is collecting Consumer Health Data concerning you.

### Access Your Data

Obtain access to Consumer Health Data concerning you.

### Obtain Information About Sharing

Request information regarding third parties or affiliates with which Consumer Health Data concerning you has been shared.

### Correct Information

Request correction of inaccurate Consumer Health Data where applicable.

You may also be able to correct certain information directly within Glimpse.

### Delete Consumer Health Data

Request deletion of Consumer Health Data concerning you.

Where required by applicable law, we will also notify applicable processors, contractors, affiliates, and third parties of the deletion request.

### Withdraw Consent

Withdraw consent for future collection or sharing where processing is based on consent.

Withdrawal does not necessarily affect processing that lawfully occurred before the withdrawal.

Some features may no longer function after consent is withdrawn because the relevant Consumer Health Data is necessary to provide the feature.

### Obtain a Copy

Where required, request a portable copy of Consumer Health Data.

### Appeal

Where applicable law provides an appeal right, you may appeal our decision regarding a Consumer Health Data request.

### No Unlawful Discrimination

We will not unlawfully discriminate against you because you exercise Consumer Health Data privacy rights.

You may submit a request through one of the following secure methods:

In the Glimpse App:
Settings → Privacy → Health Data Request

Online:
Health Data Request page

Email:
support@glimpse-health.com

Your request should indicate the type of request you are making.

For example:

• Access My Health Data
• Delete My Health Data
• Correct My Health Data
• Withdraw Consent
• Tell Me Who My Health Data Was Shared With

We may take commercially reasonable steps to authenticate your identity before processing a request.

We will not require you to create a new account solely to exercise privacy rights, although we may ask you to authenticate through an existing account.

If you request deletion of Consumer Health Data, subject to applicable legal exceptions, we will take steps to:

1. delete applicable Consumer Health Data from active systems;
2. notify relevant processors, affiliates, contractors, or third parties where required;
3. instruct those parties to delete the applicable information where required by law; and
4. delete information from backup or archived systems according to legally permitted backup-deletion schedules.

Some information may be retained when permitted or required by law, including information reasonably necessary for:

• security;
• fraud prevention;
• legal compliance;
• establishing or defending legal claims; or
• other purposes permitted by applicable law.

Where available, you may review and edit information directly inside Glimpse.

For information that cannot be edited directly, you may submit a correction request through:

support@glimpse-health.com

or:

Health Data Request page

We may ask you to authenticate your identity before making a requested change.

Where processing depends on consent, you can withdraw future consent by:

• changing applicable settings;
• disconnecting an integration;
• deleting relevant information;
• disabling a feature; or
• contacting us using the methods described in this policy.

If withdrawing consent prevents Glimpse from processing information necessary for a feature you requested, that feature may stop working.

We maintain administrative, technical, and organizational safeguards designed to protect Consumer Health Data appropriate to its sensitivity.

Measures may include:

• limiting access to authorized personnel;
• authentication controls;
• data encryption;
• secure communications;
• monitoring;
• system logging;
• vendor security requirements;
• secure development practices;
• vulnerability management;
• incident-response procedures; and
• confidentiality obligations.

Employees, contractors, and processors who are permitted access to Consumer Health Data are required to handle such information in accordance with applicable confidentiality and privacy obligations.

We seek to collect Consumer Health Data that is reasonably necessary to provide and improve the health and wellness features requested by users.

We do not intentionally collect Consumer Health Data solely because it may have future commercial value.

Where a feature does not need identifiable health information, we seek to use aggregated, de-identified, or limited information where appropriate.

Consumer Health Data is generally retained for as long as:

• your account remains active;
• the information is necessary to provide features requested by you;
• you choose to maintain the information in Glimpse; or
• retention is reasonably necessary or legally permitted for security, compliance, dispute resolution, or other legitimate purposes.

You may request deletion as described above.

Consumer Health Data stored in backup systems will be deleted according to applicable legal requirements and our backup restoration cycles.

Glimpse maintains an incident-response process for potential privacy or security incidents.

If Consumer Health Data is subject to a breach or unauthorized disclosure requiring notification, Glimpse will provide notifications as required under applicable law.

Depending on the circumstances, this may include notification to:

• affected consumers;
• the Federal Trade Commission;
• state regulators;
• state attorneys general; and
• other authorities.

Consumer Health Data processed by Glimpse is not necessarily "Protected Health Information" under HIPAA simply because it relates to health.

Glimpse may operate as a direct-to-consumer health application outside HIPAA for certain services.

However, other federal and state privacy laws may protect the same information.

If Glimpse processes Protected Health Information on behalf of a HIPAA-covered entity under a Business Associate Agreement, that information will be processed in accordance with the applicable agreement and HIPAA requirements.

If we materially change:

• categories of Consumer Health Data collected;
• sources of Consumer Health Data;
• purposes for which Consumer Health Data is used;
• categories of Consumer Health Data shared; or
• recipients of Consumer Health Data,

we will update this policy and provide any additional notice or obtain any consent required by applicable law before engaging in new processing.

Material changes may be communicated through:

• an in-app notice;
• email;
• the Glimpse website;
• an updated consent screen; or
• another legally permitted mechanism.

This Consumer Health Data Privacy Policy is effective:

August 21, 2026

For questions concerning Consumer Health Data or to exercise your rights, contact:

Novyte Labs Inc
Doing business as Glimpse

Consumer Health Privacy: support@glimpse-health.com

Support: support@glimpse-health.com

Health Data Request Portal:
Privacy Request page

Mailing Address:
Novyte Labs Inc, 1600 N. Milwaukee Ave #1044, Vernon Hills, IL 60061 United States