Consumer Health Data Privacy Policy

Effective November 7, 2026

9.1 Scope and Responsibility

This section applies to everyone in the United States and is written to meet the Washington My Health My Data Act, Nevada SB 370 and the Connecticut consumer health data provisions. Insilico Medicine, Inc. is responsible for the consumer health data described here. Contact [email protected].

9.2 Consumer Health Data We Collect and Its Sources

The only consumer health data we collect is what you choose to send us. That means laboratory and biomarker values, health history and goals, sleep and activity measurements, and other health information you include in MotherShip research contributions, in research notes or messages you email to us, or in a professional program application. Research contributions also carry your age band, sex, month-level dates and a contributor code. We process health-related inferences derived from those submissions when we analyze them. The sources are you, your Grok Bot environment for contributions you authorize, and our analysis of those submissions.

9.3 How We Use It

We store, organize and analyze research contributions for the longevity research described in your separate consent, including any commercial research expressly identified there, and we prepare aggregate findings. We use emailed research notes for the research purposes you send them for and to reply to you. We use application information to review applications and respond to you.

9.4 Who Receives It

Providers that host, store, relay, secure and deliver email for the Service receive the categories needed to perform those functions under our instructions. Individual coded contributions are accessible only to the research recipients named in your consent notice, as described in Section 4. No other Insilico Medicine group company receives consumer health data. Disclosures required by law remain subject to applicable legal restrictions.

9.5 No Sale, Advertising, Tracking or Geofencing

We do not sell consumer health data, do not use it for advertising, do not permit third parties to collect consumer health data through the Site for tracking across other websites or services, and do not use geofencing around health care facilities.

9.6 Your Rights and How to Exercise Them

Email [email protected] to confirm whether we collect or share your consumer health data, access or correct it, obtain a list of the third parties and affiliates with which we have shared it and their contact information, withdraw consent, or request deletion. You do not need to create an account. Section 5 explains authentication and deletion of coded contributions. For a valid deletion request, we delete active records within 30 days, remove them from backups within 90 days, and notify recipients of the deletion requirement.

We respond without undue delay and within 45 days of receipt. Where the law permits one extension of up to 45 days, we give you notice and reasons within the original period. Requests are free up to twice a year, and otherwise free unless applicable law permits a charge for manifestly unfounded, excessive or repetitive requests. You may appeal a denial by replying to our response. We decide appeals within 45 days, explain the decision and tell you how to complain to your state attorney general.

9.7 Changes

We post material changes to this section here and give notice through the Service or an email address you have supplied before changed practices begin. We obtain additional consent where required.

This policy is also Section 9 of our Privacy Policy.