WEARABLE TECHNOLOGIES INC.

UNIFIED NOTICE OF PRIVACY PRACTICES

(HIPAA • CMIA • CCPA/CPRA)

Effective Date: 2/20/2026

THIS NOTICE DESCRIBES HOW YOUR MEDICAL AND PERSONAL INFORMATION MAY BE USED AND DISCLOSED AND EXPLAINS YOUR RIGHTS UNDER FEDERAL AND CALIFORNIA LAW.

PLEASE REVIEW IT CAREFULLY.

 

Who We Are

Wearable Technologies Inc. (“WTI”) provides devices and digital services that collect, store, and

securely transmit vital sign data to your health care providers. WTI acts as a:

 

• Business Associate under the federal Health Insurance Portability and Accountability Act (HIPAA)
• A handler of “medical information” under the California Confidentiality of Medical Information Act (CMIA)
• A “business” subject to the California Consumer Privacy Act (CCPA) as amended by the

 

California Privacy Rights Act (CPRA)

WTI does not provide medical treatment. Your doctor, clinic, or hospital remains responsible for your medical care.

 

Information We Collect

We may collect:

• Vital sign data (e.g., heart rate, oxygen saturation, blood pressure, mobility data)
• Identifying information (name, date of birth, device ID)
• Contact information
  
• Technical and device performance data
• System logs and security monitoring data

Under CPRA, much of this qualifies as “Sensitive Personal Information.”

 

How We Use Your Information

WTI uses your information only to:

• Collect and transmit vital sign data to your designated health care providers
• Maintain and support system performance
• Ensure device reliability and safety
• Improve service functionality
• Comply with legal and regulatory requirements

We do NOT:

• Sell your personal information
• Share your information for cross-context behavioral advertising
• Use your information for marketing
• Use your information for employment or insurance decisions

 

Legal Bases for Use

Our use and disclosure of your information is permitted under:

 

HIPAA

• Treatment
• Payment
• Health care operations
• As required by law

 

CMIA

• Patient authorization
• Treatment and care coordination
• Limited statutory exceptions
  

 

CCPA/CPRA

• Providing requested services
• Security and fraud prevention
• Legal compliance
• Quality assurance

 

Your Rights Under HIPAA

You have the right to:

• Access and receive copies of your health information
• Request amendments to incorrect information
• Receive an accounting of certain disclosures
• Request restrictions on certain uses
• Request confidential communications
• Receive breach notifications

Requests must be submitted in writing to our Privacy Officer.

 

Your Rights Under CMIA (California Medical Privacy Law)

You have the right to:

• Prevent unauthorized disclosure of your medical information
• Sue for damages if your medical information is improperly disclosed
• Receive notification of unauthorized access
• Control disclosure of certain sensitive information

CMIA provides additional protections beyond HIPAA and may allow direct legal remedies.

 

Your Rights Under CCPA/CPRA

If you are a California resident, you have the right to:

 

Right to Know

Request disclosure of:

• Categories of personal information collected
• Specific pieces of personal information
• Categories of disclosures

 

Right to Correct

Request correction of inaccurate personal information.

 

Right to Delete

Request deletion of personal information, subject to exceptions (e.g., health care service obligations).

 

Right to Limit Use of Sensitive Personal Information

Request that sensitive personal information be used only for providing services or as legally required.

 

Right to Data Portability

Receive your data in a usable electronic format.

 

Right to Non-Discrimination

You will not receive discriminatory treatment for exercising your rights. To exercise these rights, contact us using the information below.

 

Our Responsibilities

WTI is required by law to:

• Maintain the privacy and security of your information
• Implement administrative, physical, and technical safeguards
• Maintain Business Associate Agreements with Covered Entities
• Limit use to the “minimum necessary” standard under HIPAA
• Provide breach notification as required by HIPAA, CMIA, and California breach laws
• Not retaliate against you for exercising your rights
  

 

Security safeguards include:

• Encryption of data in transit and at rest
• Role-based access controls
• Multi-factor authentication
• Routine security monitoring
• Vendor oversight and contractual protections

 

Breach Notification

If a breach of unsecured protected health information occurs, we will:

• Notify your health care provider without unreasonable delay
• Notify you when required by HIPAA and California law
• Report to regulatory authorities as required

 

Data Retention

We retain your information only as long as necessary to:

• Provide services
• Comply with legal obligations
• Meet health record retention requirements

 

Changes to This Notice

We reserve the right to update this Notice.

Changes will apply to all information we maintain and will be posted on our website and made available upon request.

 

Complaints

If you believe your privacy rights have been violated, you may:

• Contact WTI’s Privacy Officer
• File a complaint with the U.S. Department of Health & Human Services (OCR)
• File a complaint under California law

You will not be retaliated against for filing a complaint.

 

Contact Information

Privacy Officer

Wearable Technologies Inc.

Email: Philip.Konkel@Wear-Tech.com [Web Portal for Privacy Requests]