Neko Health Privacy Notice

This notice explains how Neko Health, Inc. and its affiliates collect, use, and disclose your personal information across our website, Mobile App, AI Chat, waitlists, events, and other services. Neko Health, Inc. connects consumers with its affiliated medical clinics; the clinics have their own privacy notice for the healthcare services they provide.

What we collect and why

We collect information you give us (contact details, account information, communications, promotional preferences, survey responses, event details), information from third parties (social media, connected devices, health data from Neko-affiliated clinics, lead and prospect data), and information collected automatically (device, browsing, activity, and general location). We use it to run and improve our Services, communicate with you, market our offerings, plan events, protect our business, and meet legal obligations.

How we disclose it

We may disclose personal information to our subsidiaries and affiliates, vendors and service providers, third-party marketing and analytics providers, in support of business transfers, to meet legal obligations, to protect rights, and with your consent. We use cookies and similar tools for analytics, security, and advertising.

Your choices

You can manage account information, opt out of marketing and text messages, adjust mobile and cookie settings, and use industry ad choice programs. Contact our Privacy Office at dpo@nekohealth.com with any questions.

Neko Health Privacy Notice

Effective Date: 9 June 2026

Neko Health, Inc., and its affiliates and subsidiaries (“Neko Health,” “we,” “our,” or “us”) as well as our affiliated network of medical clinics and care providers, values your privacy. This Privacy Notice (“Notice”) describes how Neko Health, Inc. collects, uses, discloses, and otherwise processes personal information described in this Notice, as well as the rights and choices individuals have regarding such personal information. Neko Health, Inc. is a management services entity that connects consumers with its affiliated medical clinics for the provision of healthcare services. You can find the Privacy Notice for our affiliated Neko medical clinics here. For additional information about the privacy choices/rights you have regarding your personal information, please review Section 6. Your Privacy Choices.

By using our Services (as defined below), you agree that your personal information will be handled as described in this Notice. Your use of our Services and any dispute over privacy is subject to this Notice and our Terms of Use, including their applicable terms governing limitations on damages and the resolution of disputes.

Table of Contents

• 1. Scope
• 2. Personal Information Collected
• 3. Purposes for Collecting and Processing Personal Information
• 4. Disclosures of Personal Information
• 5. Cookies and Other Tracking Mechanisms
• 6. Your Privacy Choices
• 7. External Links and Features
• 8. Minor's Privacy
• 9. Security
• 10. Changes to this Policy
• 11. Contact Us

1. Scope

Except as otherwise described below, this Notice applies to our personal information processing activities including, but not limited to: visitors of our website where this Notice is posted, including nekohealth.com (the “Site”); users who download and use our mobile application (“Mobile App”); use of certain features available via the Site and Mobile App, including but not limited to the AI Chat and uploading of Third Party Device Data (as defined in the Terms of Use); information collected by us when you sign up for Neko Health's waitlists or request information about new clinic openings; individuals who register for or participate in our events, surveys or research conducted by us; individuals who subscribe to receive news, information, and marketing communications and other materials from us; and individuals who communicate or otherwise interact or engage with us or the services available through our Site, Mobile App, or other online services (collectively referred to as the “Services”).

Additional Notices. Depending on how you interact or engage with us, you may be provided with additional or supplemental privacy notices with additional details about our privacy practices or the privacy practices of the third parties with whom we partner, including with our affiliated medical clinics. When you provide your personal information for purposes of booking an appointment with one of our affiliated medical clinics, seek services from our medical clinics, or pay for services rendered by or through our affiliated medical clinics, the Clinic Privacy Notice will apply to the handling, use, and disclosure of that information.

2. Personal Information Collected

We collect personal information directly from you, from third-party sources, and automatically through your use of the Services. To the extent permitted by applicable law, we may combine the personal information we collect from publicly available or third-party sources. The personal information we may collect varies depending upon your use of our Services and our interactions with you.

Personal Information Collected Directly. We may collect the following personal information directly from you:

• Contact Details and Identifiers. We may collect certain contact details and other personal identifiers such as your name, address, email address, and phone number. Where you opt in to receive SMS text messaging from us, we collect your name and phone number for purposes of texting you for services you requested or which are part of Neko Health's service offering, and for marketing communications or market research opportunities, or other health or wellness related information that we think you may be interested in. You can opt out of receiving these messages at any time. The SMS opt-in data that we collect, and your consent, will not be shared with third parties; however, we may share such information with our service providers who provide functions on our behalf and our direction, including those who assist us with our text messaging service. Our service providers cannot use the information we share with them for their own purposes.
• Account Information. When you sign in or create an account in connection with our Services, we may collect your name, telephone number, country of residence, preferred location for a scan and preference to be on a waitlist, and email address. Except for Third Party Device Data and data we may get access to if you choose to activate the AI Chat (as defined in the Terms of Use), any additional information you submit through your account is controlled by the clinic with whom you engage to receive health-related services and subject to the privacy notice of that clinic.
• Communications and Interactions. When you email, call, or otherwise communicate or interact with us, including if you sign up for our mailing lists or waitlist, or complete forms on our Site, we may collect and maintain records of your contact details, communications and interactions, our responses, and communication records regarding information provided to us related to any customer support requests, if applicable. We may also collect any information you share over the phone (and may record and transcribe such calls; we will provide you with notice of such recording) or information you submit through our chat functions and/or virtual assistants we make available through the Services. If you decide to activate our AI Chat feature, we will also collect your user input and output (as defined in the Terms of Use) which may include information about health.
• Promotional Information. If you agree to receive marketing communications from us, we may collect your contact details, preferences, and if relevant, information about your account and profile, including the Services and features you use.
• Responses and Feedback. If you participate in surveys, questionnaires, or research conducted by us, such as for market research, user satisfaction, or other similar purposes, we may collect your responses and feedback, and any other information you choose to provide.
• Events and Registration Details. We may collect personal information related to your participation in our events, as well as other requests that you submit to us related to such events and our Services. For example, if you register for or attend an event that we host or sponsor, we may collect information related to your registration for and participation in such event.
• Preferences and Other Requests. We also may collect information about your preferences, including communications preferences, preferences related to your use of our Services, and any other preferences or requests you provide when interacting with us.

Personal Information Collected from Third Parties. We may also collect and receive certain personal information about you from third party sources, such as from business partners, data analytics and marketing providers, operating systems and social media platforms, publicly available sources, and other third parties who provide services or perform functions on our behalf. In addition, we may collect the following personal information from third-party sources:

• Social Media Information. While using our Services, you may choose to interact with or enable sharing information or content through various platforms or social networking websites. If you choose to share content, directly message us, or otherwise interact with our Services using such platforms or social networking websites, we may collect or receive personal information about you that you have provided to that platform and/or social networking website. For example, we may collect information related to your account and profile, public profile picture and postings, and other similar information available on your profile.
• Third Party Device Data: With your explicit permission, we may collect data from devices you connect to your account, including wearable devices such as fitness trackers and smart watches. Such data may include but is not limited to health and activity and other personal information.
• Health Data: With your explicit permission, we will collect your health information from Neko-affiliated clinics to support features such as the AI Chat. This information may include, but is not limited to, scan data and results, images, questionnaire responses, transcripts of consultations with clinicians, and account details.
• Lead and Prospect Information. We may receive lead and prospect information from third parties about prospective customers that may be interested in our Services. We may also engage with third parties to enhance or update our customer information. For example, we may receive certain personal information about you from data analytics and marketing providers for marketing and advertising purposes, and for purposes of reaching new customers.

Personal Information Collected Automatically. We and our third-party service providers may automatically collect or derive certain personal information about you related to your use of our Services, including through the use of cookies, pixel tags, and other similar technologies. The personal information automatically collected may include:

• Device and Browsing Information. When you use our Services, we and third-party providers may collect browser type, domain name, page views, access times, date/time stamps, operating system, language, device type, unique ID, Internet service provider, referring and exiting URLs, clickstream data, and other similar device and browsing information.
• Activities and Usage. We also may collect activity information related to your use of the Services, such as information about the links clicked, searches, features used, items viewed, time spent within the Services, your interactions with us within the Services, and other similar activity and usage information.
• Location Information. We also may collect or derive general location information about you, such as through your IP address.

3. Purposes for Collecting and Processing Personal Information

Generally, we may collect, use, disclose and otherwise process the personal information we collect for the following purposes:

• Services and Support. To provide and operate our Services including to visualize Third Party Device Data, operating the waitlist and AI Chat and notifying you of new affiliated medical clinic locations, manage your account, communicate with you about your use of the Services, provide troubleshooting and technical support, and for other similar support purposes, and to otherwise run our day-to-day operations.
• Analytics and Improvement. To better understand how users access and use the Services, and for other research and analytical purposes, such as to evaluate and improve the Site and Mobile Apps, our Services, and business operations, including to develop our Services and their features, and for internal quality control and training purposes.
• Communication. To respond to your questions and inquiries, fulfill your requests, manage and communicate information regarding our waitlist and your account, send you requested materials and newsletters, as well as information and materials regarding our Services and our offerings. We may also use this information to send administrative information to you, for example, information regarding the Services and changes to our terms, conditions, and policies. Where required by applicable law, certain communications, such as marketing messages and SMS/text messages, will only be sent with your prior consent, which we will collect separately where needed.
• Customization and Personalization. To tailor content we may send or display on the Services, including to offer location customization and to otherwise personalize your experiences and offerings.
• Marketing and Advertising. For marketing and advertising, and other promotional purposes. For example, sending you promotional information about our Services, including information about sales, discounts, and new offerings, as well as any other information that you sign up to receive.
• Research and Surveys. To administer surveys and questionnaires, such as for market research or user satisfaction purposes.
• Insight Development and Data Enhancement. We may combine personal information collected through the Services with other information that we or third parties collect about you in other contexts for insight development and data enhancement purposes. In most cases, the information that we may combine with the personal information collected through the Services for market research, such as demographic information, does not directly identify consumers.
• Planning and Managing Events. For event planning and other management-related purposes, such as event registration and attendance, connecting you with other event attendees, and contacting you about relevant events, webinars, and presentations.
• Security and Protection of Rights. To protect the Services and our business operations, our rights and those of our stakeholders and investors, to prevent and detect fraud, unauthorized activities and access, and other misuse of our Site, Mobile App, and Services, including where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use.
• Compliance and Legal Process. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, to respond to a subpoena, warrant, court order, or other legal process, or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.
• Auditing, Reporting, and Other Internal Operations. To conduct financial, tax and accounting audits, audits and assessments of our operations, including our privacy, security and financial controls, as well as for risk and compliance purposes. We may also use personal information to maintain appropriate business records and enforce our policies and procedures.
• General Business and Operational Support. To assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings, and to administer our business, accounting, auditing, compliance, recordkeeping, and legal functions.

We may also process personal information in an aggregated or deidentified manner for purposes such as research, analysis, modeling, marketing, and improvement of our Services. Where we use, disclose or otherwise process deidentified data, we will maintain and use the information in deidentified form and not attempt to reidentify the information, except in order to determine whether our deidentification processes are reasonable and adequate pursuant to applicable privacy laws.

4. Disclosures of Personal Information

We may disclose the personal information we collect for the purposes described above with the following recipients and in the following circumstances:

• Subsidiaries and Affiliates. We may disclose the personal information we collect to our subsidiaries and affiliated companies (i.e., our parent company, our affiliated medical clinics and other companies under common ownership, control or management with us), including but not limited to Third Party Device Data (if you choose to connect such data to your account). If you integrate your account with Third Party Services like Apple Health, your data will be made available to medical staff involved in your for care related purposes.
• Vendors and Services Providers. We may disclose the personal information we collect to vendors and service providers who perform functions on our behalf, such as IT and website hosting providers, marketing and marketing research providers, customer support, data storage, data analytics providers, auditors, consultants, and legal counsel.
• Third Party Marketing and Analytics Providers. We may also disclose certain personal information, such as device and browsing, and activities and usage information, and other similar information, to third party marketing and data analytics providers, and other companies who provide marketing, advertising, campaign management, or analytics services on our behalf.
• In Support of Business Transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer the personal information we have collected from you with or to the other company in accordance with applicable laws. We may also disclose certain personal information as necessary prior to the completion of such a transaction or other corporate transaction such as a financing or restructuring, to lenders, auditors, and third-party advisors, including attorneys and consultants.
• Compliance and Legal Obligations. We may also disclose personal information to third parties to the extent required by applicable law and legal obligations. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators, government entities, and law enforcement, including responding to national security or law enforcement disclosure requirements, or as otherwise required by law or legal process. In addition, we may disclose the names of sweepstakes and contests winners in accordance with applicable law.
• Security and Protection of Rights. Where we believe doing so is necessary to protect the Services, our rights and property, or the rights, property, and safety of others. For example, we may disclose personal information to (i) prevent, detect, investigate, and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the Services, (ii) situations involving potential threats to the health, safety, or legal rights of any person or third party, or (iii) enforce, detect, investigate, and take action in response to violations of our Terms of Use. We may also disclose personal information related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
• Other Disclosures. We may disclose personal information in other ways not described above that we notify you of or that we obtain your consent for, or that are otherwise authorized or required by law.

5. Cookies and Other Tracking Mechanisms

We and third-party providers use cookies, pixels, local storage objects, log files, and other mechanisms to automatically collect browsing, activity, device, and similar information within our Services. This may include Google Analytics and software development kits (SDKs) from our technology partners. We use this information to, for example, analyze and understand how users access, use, and interact with our Services, to identify and resolve bugs and errors in our Services, to assess, secure, protect, optimize and improve the performance of our Services, as well as for marketing and analytics purposes, and to personalize content in our Services.

Cookies. Cookies are alphanumeric identifiers we transfer to your device's hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within the Services.

Pixel Tags. Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users, and help us manage content and compile usage statistics. We may also use these in our emails to let us know when they have been opened or forwarded, so we can track response rates and gauge the effectiveness of our communications.

Software Development Kits (SDKs). We may use third-party SDKs in our Mobile App. An SDK is a collection of software tools and resources third party developers often use to build applications for specific platforms. SDKs allow us, our service providers, and third-party partners to collect information about your device and usage patterns. We use SDKs to, for example, add features or functionality to our Mobile App, provide us with analytics regarding your use of our Mobile App, to integrate with social media, or to facilitate advertising.

Third-Party Analytics and Tools. We use third party tools, such as Google Analytics, which are operated by third-party companies. These third-party analytics companies may use cookies, pixels, and other similar tools to collect usage data about our Services in order to provide us with reports and metrics that help us evaluate usage of our Services and improve performance and user experiences. To learn more about Google's privacy practices, please review the Google Privacy Policy at https://www.google.com/policies/privacy/partners/. You can also download the Google Analytics Opt-out Browser Add-on to prevent data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Cross-Device Tracking. We and our third-party providers may use the information we collect about you within our Services and on other third-party sites and services to help us and these third parties to identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.).

Third-Party Advertising. We work with third parties, such as ad networks, analytics, marketing partners, and others (“third-party ad companies”) to personalize content and display advertising within our Services, as well as to manage our advertising on third-party sites. We and these third-party ad companies may use cookies, pixels tags, and other tools to collect browsing and activity information within our Services (and on third-party sites and services), as well as IP address, unique ID, cookie and advertising IDs, and other online identifiers. We and these third-party ad companies may use this information to provide you more relevant ads and content within our Services and on third-party sites, and to evaluate the success of such ads and content.

Custom Lists and Matching. We may share or make available certain customer list information (such as your name, email address and other contact details) with third parties so that we can better target ads and content to you across third-party sites, platforms and services, and in some cases, these third parties may help us to enhance our customer lists with additional demographic or other information, so we can better target our advertising and marketing campaigns.

6. Your Privacy Choices

We make available several ways that you can manage your preferences and privacy choices related to your personal information. Some of these choices are browser and device specific, which means that you may need to set the preference for each browser and device you use to access our Services. In addition, if you delete or block cookies, you may need to reapply these preferences to each browser and/or device used to access our Services. The preferences and privacy choices we make available include:

• Account Information. You may access, export, update, and delete certain personal information by accessing and adjusting your account information or settings directly within our Services. You may also revoke consent to certain data processing activities to which you have consented to.
• Marketing Communications. We may send periodic promotional emails or other similar communications to you, in accordance with applicable law. You may opt out of these communications by following the instructions provided to you in the communication. If you opt out of receiving promotional content from us, we may still send you communications about your account or any services you have requested or received from us.
• Text Messages. If you affirmatively consent to receive text messages from us and enroll in such a program, you will receive updates via text unless you opt out of the text message program. You may opt out of these messages by following the instructions provided to you in the message. Message frequency may vary based on the Services.
• Mobile Settings. You can manage the type of push notifications you receive from us by adjusting your device settings. In addition to the above, our Mobile App may include third-party advertising and analytics. You can change your targeting and advertising preferences for the Mobile App by adjusting your device settings (mechanisms for managing ad preferences differ between platforms (e.g., iOS vs. Android)).
• Cookie Preferences and Settings. You can review or change your preferences for certain cookies on our Site, other than those that are necessary, by adjusting your cookie settings through our cookie preference center available via our website. To prevent cookies from tracking your activity on our Site or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set. You can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Site, but some features may not function.
• Browser Signals. Our Site and Mobile App currently do not respond to “Do Not Track” signals.
• Industry Ad Choice Programs. You can also control how participating third-party ad companies use the information that they collect about your visits to our Site and those of third parties, in order to display more relevant targeted advertising to you. If you are in the U.S., you can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance). Opting out of participating third-party ad networks does not opt you out of being served advertising. You may continue to receive generic or “contextual” ads on our Site. You may also continue to receive targeted ads on other websites, from companies that do not participate in the above programs.

7. External Links and Features

Our Services may contain links to third-party websites or features or provide certain third-party connections or integrated services. Any access to and use of such linked websites, features, or third-party services is not governed by this Notice, but instead is governed by the privacy policies of those third parties. We are not responsible for the information practices of such third parties, including their collection, use, and disclosure of your personal information. You should review the privacy policies and terms for any third parties before proceeding to those websites or using those third-party features or services.

8. Minor's Privacy

Our Services are not designed for minors, and we do not knowingly collect personal information from individuals under the age of eighteen (18). If you are a parent or legal guardian and you believe we have collected your minor's information in violation of applicable law, please contact us.

9. Security

We have implemented safeguards aimed at protecting the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our best efforts, no data security measures can guarantee security.

10. Changes to this Policy

This Notice is current as of the effective date set forth above. We may change this Notice from time to time, so please be sure to check back periodically. We will post any updates to this Notice on this page. If we make material changes to how we collect, use, or disclose the personal information we have previously collected about you, we will endeavor to provide you prior notice, such as by emailing you or posting prominent notice on our website or within the Services.

11. Contact Us

If you have any questions or concerns regarding this Notice or our privacy practices, you may contact our Privacy Office at dpo@nekohealth.com.

Last Updated: 9 June 2026