Privacy Policy

We collect information you provide directly to us, such as when you create an account, log cycle data, or contact us for support. This includes: • Account information: name, email address, and password • Health data: menstrual cycle dates, symptoms, flow intensity, mood, and related health information you choose to log • Delivery information: shipping address and product preferences (for auto-delivery subscribers) • Payment information: processed securely by our payment provider; we do not store full card numbers • Usage data: how you interact with the app, features used, and session information

We use the information we collect to: • Provide, maintain, and improve the Blushh app and services • Generate cycle predictions and personalized health insights • Process and fulfill auto-delivery orders • Send transactional emails (order confirmations, delivery notifications) • Respond to your comments and questions • Improve our prediction algorithm using anonymized, aggregated data • Comply with legal obligations We do not use your personal health data for advertising purposes.

We do not sell your personal data. We may share your information with: • Service providers: third-party vendors who help us operate our services (e.g., cloud hosting, payment processing, shipping). These providers are contractually bound to protect your data. • Legal requirements: if required by law, court order, or governmental authority • Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections We never share your health data with advertisers, data brokers, or marketing companies.

We take the security of your data seriously. We implement industry-standard security measures including: • End-to-end encryption for all health data in transit and at rest • Secure HTTPS connections for all app communications • Regular security audits and penetration testing • Access controls limiting employee access to personal data No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your Blushh account.

Depending on your location, you may have the following rights regarding your personal data: • Access: request a copy of the personal data we hold about you • Correction: request correction of inaccurate or incomplete data • Deletion: request deletion of your personal data (available in Settings → Account → Delete Account) • Portability: request your data in a machine-readable format • Objection: object to certain types of processing To exercise any of these rights, contact us at [email protected].

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

Blushh is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the app. Your continued use of Blushh after changes become effective constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us at: Blushh, Inc. [email protected] San Francisco, CA