Nevada Consumer Health Data Policy

Nevada Consumer Health Data Privacy Policy

Pursuant to Nevada Revised Statutes 603A.400 to 603A.550

1. About This Policy

Natalie Bode Media LLC d/b/a House of Nat (“House of Nat,” “we,” “us,” or “our”) provides this Nevada Consumer Health Data Privacy Policy (this “Policy”) to explain how we collect, use, disclose, process, and protect consumer health data when Nevada residents and other consumers whose consumer health data is collected in Nevada use houseofnat.com, the House of Nat mobile applications, and related services (collectively, the “House of Nat Services”).

This Policy supplements our general Privacy Policy. It is a disclosure of our practices and does not itself constitute consent. Where Nevada law requires affirmative, voluntary consent to collect or share consumer health data, we request that consent separately before the applicable collection or sharing occurs.

This Policy does not apply to information or entities exempt under NRS 603A.490.

2. Categories of Consumer Health Data We Collect

Depending on how you use the House of Nat Services, we may collect the following categories of consumer health data:

Wellness selections and self-reported information. Optional daily selections are limited to: “Tired,” “Sore,” “Stressed,” or “Low energy.”

Fitness and activity information. Fitness-goal selections, workout schedules, workout selections, workout-completion information, workout history, streaks, and saved workouts, to the extent this information identifies or is used to identify your past, present, or future physical or mental health status.

Derived or inferred information. Recovery-oriented workout suggestions, workout-program classifications, and related information that House of Nat generates internally from your wellness selections, fitness goals, or workout activity.

Associated identifiers. Account and user identifiers that we use to associate you with the information described above.

House of Nat does not request that users provide biometric data, diagnoses, treatment information, prescribed-medication information, reproductive or sexual health information, gender-affirming care information, genetic data, or precise location information. House of Nat may collect an optional profile photograph for account-display purposes, but does not use the photograph to identify your health status. If you voluntarily provide health-related information through the House of Nat Services, we will treat it as consumer health data under this Policy.

3. Sources of Consumer Health Data

We collect consumer health data from the following categories of sources:

• Directly from you when you submit a wellness selection or fitness goal
• From your interaction with the House of Nat Services, such as when you schedule, select, save, or complete a workout; and

Through recommendations or classifications that House of Nat generates internally from your wellness selections, fitness goals, or workout activity.

4. Purposes for Collecting, Using, and Sharing Consumer Health Data

We collect and use consumer health data to:

• Display your daily workout
• Suggest a lighter or recovery-oriented session when you report feeling tired, sore, or stressed
• Maintain and display your workout history, progress, and streaks
• Operate, secure, and support your account; and

Comply with applicable legal obligations.

We share consumer health data only as described in Section 6 below. We will not collect, use, or share an additional category of consumer health data, share consumer health data with an additional third party or affiliate, or collect, use, or share consumer health data for an additional purpose not disclosed in this Policy without first updating this Policy and obtaining your affirmative, voluntary consent before the additional collection, use, or sharing begins, where required by Nevada law.

5. Manner in Which We Process Consumer Health Data

House of Nat receives consumer health data through the selections and information you submit and through your interaction with requested workout features. Wellness selections and workout activity are used exclusively to (a) display your daily workout, (b) suggest a lighter or recovery-oriented session when you report feeling tired, sore, or stressed, and (c) display your workout history and streaks.

House of Nat associates wellness and workout information with the consumer’s account, stores the information in systems hosted by Supabase, and applies an internal rule-based scoring function to the consumer’s own recent workout history, daily wellness selection, and workout duration to select or suggest a workout. House of Nat does not use artificial intelligence or machine learning and does not compare the consumer’s information with information concerning other members.

House of Nat does not use consumer health data to diagnose, treat, or monitor a medical or mental-health condition, and does not use consumer health data for targeted advertising.

6. Processors; Categories of Consumer Health Data Shared

We share the following categories of consumer health data with processors that act on our behalf to provide the House of Nat Services:

Supabase. Supabase hosts and processes account identifiers, fitness and activity information, wellness selections, and derived or inferred information on behalf of House of Nat.

Mux. Mux hosts and streams House of Nat workout videos. When you play a workout, Mux may process your IP address, device or network information, and the identifier of the requested workout to deliver and secure the video stream.

Resend. Resend transmits privacy correspondence, including an email containing a time-limited link through which a consumer may retrieve a requested data export. The consumer health data is stored in a private House of Nat storage location and is not included in the email body or attachment.

Our processors are authorized to process consumer health data only for the purposes described in this Policy and in accordance with House of Nat’s documented instructions and applicable contractual restrictions.

House of Nat does not sell consumer health data and does not condition the provision of goods or services on authorization to sell consumer data.

Categories of third parties and affiliates with which House of Nat shares consumer health data. House of Nat does not share consumer health data with third parties or affiliates under our current practices, except that we may disclose the categories of consumer health data relevant to a request to governmental, regulatory, or legal authorities where required or authorized by applicable law.

7. Consent

House of Nat collects consumer health data only:

• With your affirmative, voluntary consent for a specified purpose; or

To the extent necessary to provide a product or service that you request.

We process fitness goals, workout schedules, workout selections, workout-completion information, workout history, streaks, saved workouts, and related classifications to provide the workout features you request.

Before you submit, and before House of Nat otherwise accesses, receives, or stores, your first optional wellness check-in selection, we will request your separate affirmative, voluntary consent. The consent request will clearly and conspicuously describe the categories of consumer health data to be collected, the purposes for collecting the data and the manner in which it will be used, and how you may withdraw consent and request that we cease collection.

You may decline the optional wellness check-in and continue to use the other House of Nat Services. If you initially consent and later change your mind, you may withdraw your consent to future wellness-data collection and request deletion of your wellness history at any time without the need of closing your House of Nat account.

If House of Nat later proposes to share consumer health data in a manner that is not necessary to provide a product or service you requested and is not otherwise required or authorized by law, House of Nat will obtain a separate and distinct affirmative, voluntary consent before the sharing occurs. The sharing-consent request will identify the categories of consumer health data to be shared, the purposes of the sharing, the categories of persons and entities with which the data will be shared, and how you may withdraw consent and request that the sharing cease.

8. Your Nevada Consumer Health Data Rights

Subject to applicable law, you may:

• Confirm whether House of Nat is collecting, sharing, or selling consumer health data relating to you
• Obtain a list of all third parties with which House of Nat has shared consumer health data relating to you or to which House of Nat has sold such data
• Request that House of Nat cease collecting, sharing, or selling consumer health data relating to you, without the need of closing your account
• Request deletion of consumer health data concerning you, including deletion of health data while retaining your account
• Review certain consumer health data and request changes as described in Section 9 below; and

Appeal House of Nat’s refusal to act on a request.

House of Nat will not unlawfully discriminate against you for exercising these rights or taking action to enforce your rights under Nevada law.

9. Review and Correction of Consumer Health Data

You may review consumer health data displayed in your House of Nat account and request changes to consumer health data collected by House of Nat. Where the House of Nat Services permit you to edit information directly, you may make changes through the applicable account feature. For other information, submit a request under Section 10.

10. How to Exercise Your Rights

House of Nat provides the following secure and reliable methods for submitting a request:

• In-app: Profile → Settings → Privacy Requests (where you can submit data access requests, withdraw consent to future wellness-data collection, request deletion of your wellness history while retaining your account, request deletion of your full account, or submit an appeal)
• Email: hello@houseofnat.com; or

Appeals: submit an appeal through the same in-app request form or email with “Privacy Appeal” in the subject line.

You are not required to create a new account to submit a request, although we may require you to use an existing account or provide information reasonably necessary to authenticate the request. If we cannot authenticate a request after making commercially reasonable efforts, we may ask you to provide additional information reasonably necessary to authenticate it.

Except for deletion requests as described below, we will respond without undue delay and not later than 45 days after authenticating your request. When reasonably necessary based on the complexity and number of requests from the same consumer, we may extend the response period once by up to an additional 45 days. We will notify you of the extension and the reason for it within the initial 45-day period.

We provide information in response to requests free of charge at least twice each year and for additional requests that are not manifestly unfounded, excessive, or repetitive. We may charge a reasonable fee for an additional request that is manifestly unfounded, excessive, or repetitive, as permitted by law.

Data access requests. When we respond to a request for a copy of your consumer health data, we make the copy available through a time-limited retrieval link that remains active for 48 hours. The data is not sent as an email attachment.

Deletion requests. Not later than 30 days after authenticating a deletion request, we will delete the consumer health data described in the request from our active records and network and notify each applicable affiliate, processor, contractor, or other third party with which we shared the data. Those recipients are required to delete the data from their active records and networks within 30 days after receiving notice, subject to applicable law. Deletion from archived or backup systems may be delayed as necessary to administer those systems. Under House of Nat’s current backup practices, backup copies expire through the ordinary backup cycle and, in all events, within 90 days after authentication of the request.

Appeals. If we decline to act on a request or you are dissatisfied with our response, you may appeal the decision. To submit an appeal, you may use the in-app Privacy Requests screen (Profile → Settings → Privacy Requests) or send an email to hello@houseofnat.com with “Privacy Appeal” in the subject line. Your appeal should include your name, the date of your original request, a description of the decision you are appealing, and any additional information you believe supports your appeal. We will respond in writing within 45 days after receiving the appeal and explain the action taken or the decision not to act and the reasons for it. If we deny the appeal, we will provide contact information for the Nevada Office of the Attorney General.

11. Data Security

We restrict access to consumer health data to employees, contractors, and processors that need access to further a purpose for which you consented to the collection or sharing or to provide a product or service you requested. We maintain administrative, technical, and physical safeguards designed to satisfy the standard of care in our industry and to protect the confidentiality, integrity, and accessibility of consumer health data, taking into account the nature and volume of the information.

No method of electronic transmission or storage is completely secure, but we periodically evaluate and update our safeguards as appropriate to our operations and the information we process.

12. Third-Party Collection Across Websites or Online Services

Under our current practices, no third party collects consumer health data over time and across different Internet websites or online services when you use the House of Nat Services. House of Nat does not use third-party advertising networks or cross-service behavioral-tracking technologies to collect consumer health data.

13. Geofencing

House of Nat does not implement a geofence within 1,750 feet of a medical facility, a facility for the dependent, or another person or entity that provides in-person health care services or products for the purpose of identifying or tracking consumers seeking health care services or products, collecting consumer health data, or sending notifications, messages, or advertisements related to consumer health data or health care services or products.

14. Changes to This Policy

We may update this Policy to reflect changes in our practices or applicable law. We will post the revised Policy on our main Internet website and update the “Last Updated” date above. For a material change, we will provide clear and conspicuous notice through the House of Nat Services, by email, or by another appropriate method. Where Nevada law requires affirmative, voluntary consent for an additional category, recipient, or purpose, we will obtain that consent before the additional collection, use, or sharing begins.

15. Contact Us

Questions or rights requests may be submitted to

Natalie Bode Media LLC

Attn: Privacy

3680 Wilshire Blvd, Ste P04 #A166

Los Angeles, CA 90010

Email: hello@houseofnat.com