Brie — Consumer Health Data Privacy Policy

Effective: September 29, 2026 Last updated: September 29, 2026

This policy applies to residents of Washington (under the My Health My Data Act, Ch. 19.373 RCW) and Nevada (under SB 370), and to anyone whose consumer health data is collected in Washington. It sits alongside our Privacy Policy, which applies to everyone.

Brie is not a health service and does not set out to collect health information. But these laws define "consumer health data" broadly enough to cover some of what we handle, so we're setting it out clearly here.

---

1. What consumer health data we collect

| Category | What it is | | -------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Biometric data | Your verification selfie. Washington's definition of biometric data expressly includes imagery of the face, with no exception for photographs — so your selfie falls within it, even though it is not used for any health purpose. | | Information you choose to share in your answers or profile | Brie asks questions about what you're looking for and what matters to you. If you choose to write about your health, your body, reproductive or sexual health, gender-affirming care, or related subjects, that information may be consumer health data. Nothing in Brie requires you to share any of this. | | Precise location | If you grant location permission, we store your device's coordinates. Precise location can be consumer health data where it would indicate an attempt to obtain health services. We do not use location for that purpose and do not analyse it against health facilities. |

What we do not do: we do not ask you about health conditions, diagnoses, treatments, medications, or procedures. We do not infer health status from your answers. We do not operate geofences around healthcare facilities, and we never will — that is prohibited by law and we have no interest in it.

2. Where it comes from

All of it comes from you: the selfie you take, what you write in your profile and answers, and the location your device reports if you grant permission. We do not buy consumer health data, and we do not obtain it from data brokers, advertisers, or other third parties.

3. Why we collect it

| Data | Purpose | | -------------------------- | -------------------------------------------------------------------------------------------------------- | | Verification selfie | To confirm you are the person in your profile photo, and to re-confirm when you change it. Nothing else. | | Profile and answer content | To build your profile and calculate compatibility with other members. | | Precise location | To help you set your neighbourhood and hometown, and to show you relevant people. |

We do not use consumer health data for advertising, and we do not run advertising on Brie.

4. Who we share it with

We share consumer health data with the following categories of third parties, and only these specific ones:

| Recipient | Category | What it receives | | -------------------------------------- | ---------------------------------------- | ------------------------------------------- | | Amazon Web Services, Inc. | Cloud service provider — face comparison | Your verification selfie | | Google Cloud Platform (Google LLC) | Cloud hosting and database | All stored data, as our hosting provider | | Cloudflare, Inc. | Media storage | Photos and selfies | | Google LLC (Google Places) | Mapping service | Coordinates you search for or drop a pin on |

Each acts as our processor under a written contract, may only process the data on our instructions, and may not use it for its own purposes.

Brie has no affiliates or subsidiaries. No affiliate receives consumer health data because none exists.

We do not sell consumer health data, and we will not. Washington law requires a signed written authorisation to sell consumer health data; we do not seek one because we do not sell it.

We may disclose consumer health data where required by law or valid legal process, or where we believe in good faith that disclosure is necessary to protect someone's safety.

5. Your rights

If you are a Washington or Nevada resident, you have the right to:

- Confirm whether we collect, share, or sell your consumer health data; - Access it, and receive a list of all third parties and affiliates with whom we have shared it, and contact details for each; - Withdraw your consent to our collection and sharing of it; - Delete it, including from our archived and backup systems. On request, we will also tell our processors to delete it.

How to exercise them. Email hello@itsbrie.com with the request and the phone number or Instagram handle on your account. We will verify who you are, and we will only use what you send for that purpose.

Our response time. We will respond within 45 days. If we need more time we may extend once by a further 45 days, and we will tell you why before the first period ends. We do not charge for this.

If we say no. You may appeal by replying to our decision or emailing hello@itsbrie.com with "Appeal" in the subject line. We will respond within 45 days with our decision and our reasons.

If your appeal is denied, you may submit a complaint to the Washington State Attorney General at www.atg.wa.gov/file-complaint, or to the Nevada Attorney General at ag.nv.gov.

6. Consent

We collect your verification selfie only after showing you a written notice and receiving your affirmative agreement, before the camera opens. We collect location only after you grant your device's location permission. You can withdraw either at any time — location in your device settings, and biometric consent by emailing hello@itsbrie.com (which will close your account, since verification is required to use Brie).

We will not collect additional categories of consumer health data, or use what we have for new purposes, without asking you again.

7. Security

We restrict access to consumer health data to the small number of people who need it to do their jobs, and to processors bound by written contract. We maintain administrative, technical, and physical safeguards that meet the reasonable standard of care in our industry, including encryption in transit and at rest, access controls, and access logging.

8. Changes

We may update this policy. We will post the updated version with a new effective date and link it prominently from our homepage, as Washington law requires.

9. Contact

Brie Labs Inc. 28 Geary St, Ste 650-1720 San Francisco, CA 94108, United States hello@itsbrie.com