Effective date: September 22, 2026

This Privacy Policy describes how Lume Health Technologies Inc. ("Lume," "we," "us") collects, uses, and shares information when you visit lumehealth.io and any other websites we operate that link to this policy (the "Site"), and when you sign up for our newsletter or waitlist, register for an event, or contact us through the Site.

We are building a wearable for hormone rhythms. We have not yet released a product. If we launch an app or device, it will have its own privacy policy, and if we invite you into a research program, you will receive a separate consent form describing what that involves.

Information you provide.

• Newsletter and waitlist: your name and email address, and any optional details you choose to share when signing up, such as what you are interested in learning about.
• Wellness information: if the Site includes a quiz, survey, or waitlist question that asks about your wellbeing (for example, your sleep, energy, stress level, or whether you are experiencing perimenopause), we collect what you choose to tell us. These questions are always optional.
• Events: your name, email, and RSVP details, and any dietary, accessibility, or question submissions you provide.
• Contact: whatever you include when you email us or fill in a contact form.
• Careers: your résumé and application details if you apply for a role through the Site.

Information collected automatically

When you visit the Site, we and our service providers automatically collect your IP address, approximate location derived from it, browser and device type, operating system, referring page, the pages you view, and the time and duration of your visit. We collect this using cookies, pixels, and similar technologies described in Section 7.

Information from others.

If you register for an event through a ticketing platform, that platform passes us your registration details. If you sign up for our newsletter through a third-party form, that provider passes us your name and email.

We use the information we collect to:

•  Send you the newsletter or updates you signed up for, and hold your place on our waitlist.
•  Run our events and communicate with you about them.
• Respond to your messages and requests.
• Understand our audience, including which topics and wellness concerns are most common among the people who sign up, so we can build the right product and write useful content.
• Operate, maintain, secure, and improve the Site.
• Consider your application if you apply for a job.
• Comply with law and enforce our terms.

We may use wellness information you share, in aggregated or de-identified form, to describe our community (for example, "most people on our waitlist report disrupted sleep"). We do not use it to make individual health assessments, and nothing on the Site is medical advice.

What we do not do. 

We do not sell your personal information. We do not share wellness information with advertisers, data brokers, employers, or insurers, and we do not use it to target advertising to you.

We share personal information only in these circumstances:

• Service providers who process information on our behalf and are contractually limited to using it for that purpose: website hosting, email and newsletter platforms, form and survey tools, analytics providers, event-ticketing platforms, and applicant-tracking tools. 
• Legal and safety reasons, when required by law, subpoena, or court order, or when we believe in good faith it is necessary to protect the rights, property, or safety of you, Lume, or others.
•  Business transfers. If Lume is involved in a financing, merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will require the recipient to honor this policy or give you notice and a choice.
•  With your direction, when you ask us to share information with someone.
• Aggregated or de-identified information that cannot reasonably be linked to you. We will not attempt to re-identify it and require anyone we share it with to commit to the same.

We do not share personal information with third parties for their own marketing.

Some states, including Washington, Nevada, and Connecticut, give specific protections to "consumer health data." Wellness information you share through the Site (such as your stress level, sleep, or menopause status) may fall within those definitions. For those laws: the categories of consumer health data we collect are the self-reported wellness responses described in Section 1; the source is you; our purposes are those in Section 2; and the categories of recipients are the service providers described in Section 3. We collect it only with your consent, we do not sell it, and we do not share it with third parties for their own purposes. We do not use geofencing around any facility that provides health services. Your rights are described in Section 6.

We keep newsletter and waitlist information until you unsubscribe or ask us to delete it. We keep event registration information for 12 months after the event. We keep contact-form messages for as long as needed to respond and for 24 months afterward. We keep job applications for 12 months unless you ask us to delete them sooner or you are hired. Site analytics data is kept for 14 months. We may retain information longer where required for legal, tax, security, or dispute-resolution reasons, or in aggregated form that no longer identifies you.

Depending on where you live, you may have the right to know what personal information we hold about you, to receive a copy of it, to correct it, to delete it, to withdraw consent to our collection of wellness information, and to receive a list of third parties with whom we have shared it. We extend access, correction, and deletion to everyone regardless of location.

To exercise these rights, email admin@lumehealth.io. We will verify your identity, usually by confirming you control the email address on file, and respond within 45 days or sooner where the law requires. You may appeal our decision by replying to our response. We will not treat you differently for exercising your rights, and an authorized agent may act on your behalf with proof of authorization.

You can unsubscribe from our emails at any time using the link at the bottom of any message.

California residents. In the preceding twelve months we have collected the following categories of personal information: identifiers (name, email, IP address); internet or network activity (browsing and interaction data); geolocation (approximate, from IP address); professional information (from job applicants); health-related information (optional wellness responses); and inferences drawn from the above (such as topics of interest). We collect them for the purposes in Section 2 and disclose them to the categories of service providers in Section 3. We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than those permitted by California law. We have no actual knowledge of selling or sharing the personal information of anyone under 16.

The Site uses:

• Essential cookies needed for the Site to function, such as remembering your cookie preferences.
• Analytics cookies that help us understand how visitors use the Site: which pages are read, how people arrive, and where they leave. 
• Embedded content such as newsletter forms, event pages, or videos, whose providers may set their own cookies under their own policies.

Where required by law, we ask for your consent before setting non-essential cookies. You can change your choice at any time through your browser settings or our cookie preferences link, though blocking essential cookies may affect how the Site works. We honor Global Privacy Control signals as a request to opt out of any sale or sharing of personal information.

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit, access limited to team members and providers who need it, and confidentiality agreements with our service providers. No website is perfectly secure; if a breach affects your personal information, we will notify you and regulators as the law requires.

The Site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at admin@lumehealth.io and we will delete it.

Lume is a wellness technology company, not a healthcare provider, and we are not a "covered entity" under HIPAA. Information you share through the Site is protected by this policy and applicable consumer-privacy laws rather than by HIPAA. Content on the Site, including anything about hormone rhythms, cortisol, sleep, or stress, is for general information only and is not medical advice, diagnosis, or treatment.

The Site links to other websites and services we do not control. Their privacy practices are their own; please review their policies before sharing information with them.

Lume is based in the United States and processes information here. If you visit the Site from outside the US, your information will be transferred to and processed in the US, where privacy laws may differ from those in your country.

We may update this policy from time to time. We will post the revised version here and update the effective date. If a change materially affects how we use information you have already given us, we will notify you by email or with a notice on the Site.

Lume Health Technologies Inc. 

953 Indiana Street 

San Francisco, CA 94107

Email: admin@lumehealth.io