Washington Consumer Health Data Privacy Policy

NIMA Partners, Inc.

(Washington)

Effective date: November 5, 2026

1. About this policy

This Consumer Health Data Privacy Policy explains how NIMA Partners, Inc. (“NIMA,” “we,” “us”) collects, uses and shares consumer health data through the NIMA mobile app (the “App”), the NIMA sensor (the “Sensor”) and nimanow.com, as required by Washington’s My Health My Data Act. It applies to consumers who are Washington residents or whose consumer health data is collected in Washington.

“Consumer health data” means personal information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health status.

2. Consumer health data we collect and how we use it

Category What it includes How we use it
Test results Results, error codes, test durations and test times recorded by your Sensor To record, display and export your tests
Food information Food descriptions, personal notes and up to three food photographs per test, where you add them To display with your tests in your test history
Test venue The restaurant or other venue where a test took place, saved with the test To show where each test took place in your test history
Location at the time of a test Your device’s coordinates, which are discarded once the venue is identified To identify nearby venues
Sensor diagnostics Sensor logs, where our support team needs them to fix a fault To provide support and fix Sensor faults
Linked account and purchase information Your name, email address, account identifier and NIMA product orders and subscriptions, to the extent they reveal your use of NIMA To operate your account and process orders and subscriptions

We also use consumer health data to keep the App secure, prevent fraud, keep records of your consent choices and of staff access to your data, and comply with our legal obligations. We may de-identify consumer health data so that it no longer identifies you and use the de-identified data to develop and improve our products.

3. Where we get it

  • You, when you add food descriptions, notes or photographs, create an account, place an order or contact support.
  • Your Sensor, which sends test records to the App over Bluetooth.
  • Your device, which provides its location when you record a test.
  • Our service providers, such as our venue lookup provider (venue details) and our e-commerce provider (order records).

4. Consumer health data we share, and with whom

We do not sell consumer health data. We share it only with the categories of third parties below. We do not share consumer health data with any affiliates.

Recipient Consumer health data shared Why
Cloud hosting and storage provider All categories in Section 2 except coordinates To host our database and store photographs
Venue lookup provider Coordinates at the time of a test, sent directly from your device To identify nearby venues
Sign-in provider Name, email address and account identifier To operate account sign-in
E-commerce and subscription providers Name, contact details and order and subscription records To process orders and subscriptions
Courts, regulators and law enforcement Information required by the legal process Where we are legally required to do so
A successor business Information transferred with our business In a merger, acquisition or similar transaction

Our service providers act under contract, only on our instructions and only to provide our services.

5. Your rights and how to exercise them

You have the right to:

  • confirm whether we collect, share or sell your consumer health data, and access that data, including a list of all third parties and affiliates with whom we have shared or sold it and an email address or online contact for each;
  • withdraw your consent to our collection and sharing of your consumer health data; and
  • ask us to delete your consumer health data.

How to make a request. In the App, go to Settings to export your tests or delete your account. You can also email info@nimanow.com with “Consumer Health Data Request” in the subject line, use our contact page at https://nimanow.com/pages/contact, or write to us at the address below. We will verify your identity before acting on a request.

Our response. We respond within 45 days after receiving your request. If we need more time, we may extend that period by up to 45 days and will tell you why within the first 45 days. When we delete consumer health data, we delete it from our records and network and tell our service providers and any third parties with whom we shared it to delete it as well. Requests are free at least twice a year.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing info@nimanow.com with “Appeal” in the subject line. We will respond in writing within 45 days, explaining what we did and why. If we deny your appeal, we will tell you how to submit a complaint to the Washington Attorney General, including online at https://www.atg.wa.gov/file-complaint

6. Contact us

Email info@nimanow.com or write to NIMA Partners, Inc., 200 Berkeley Street, 18th Floor, Boston, MA 02116.