Privacy Policy

Last Updated: February 16, 2026

Emma Health, Inc ("Emma Health," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at www.myemmahealth.com and the Emma Health mobile application (collectively, the "Platform"), including our SMS/text messaging program.

By using the Platform or opting in to our SMS program, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Platform or opt in to SMS communications.

1. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, date of birth, biological sex, and mailing address.
• Health Data: IBS symptom logs, quality of life assessments, dietary information, stool samples and lab results, and other health-related data you provide through the Platform.
• Account Information: Login credentials, account preferences, and communication preferences.
• Usage Data: Information about how you use the Platform, including pages visited, features used, and interactions.
• Device Information: Browser type, operating system, and device identifiers.
• SMS/Text Messaging Data: Phone number, opt-in consent, message history, and opt-out requests.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform and our services.
• Personalize your experience, including action plans and dietary recommendations.
• Send you check-in reminders, kit status updates, study notifications, and results via SMS/text message (if you have opted in).
• Process your test kit orders and track shipments.
• Conduct clinical research and study operations (for study participants).
• Communicate with you about your account, updates, and support inquiries.
• Analyze usage patterns to improve the Platform.
• Comply with legal obligations.

3. SMS/Text Messaging Program

When you opt in to receive SMS/text messages from Emma Health, you consent to receive messages related to check-in reminders, kit status updates, study updates, and results notifications. Message frequency varies. Message and data rates may apply.

You can opt out at any time by replying STOP to any message. After opting out, you will receive a single confirmation message and no further SMS messages will be sent. To get help, reply HELP to any message, or contact us at info@myemmahealth.com or 702-900-2310.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as required to provide the SMS service (e.g., our messaging service provider, Twilio).

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors that help us operate the Platform (e.g., cloud hosting, email delivery, SMS messaging, payment processing, lab analysis). These providers are contractually obligated to protect your data.
• Research Partners: Aggregated or de-identified data may be shared for clinical research purposes.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit and at rest, secure access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide you services. Health data collected during clinical studies may be retained for the duration required by applicable research regulations. You may request deletion of your account and associated personal data by contacting us at info@myemmahealth.com. Upon request, we will delete or de-identify your personal data within 30 days, unless retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Opt out of SMS communications at any time by replying STOP.
• Withdraw consent for data processing where consent is the legal basis.

To exercise any of these rights, contact us at info@myemmahealth.com.

8. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last Updated" date. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised Privacy Policy.