LAST UPDATED: JULY 1, 2025

Privacy Notice

This Privacy Notice (“Notice”) is designed to help you understand how Sidekick Wellness Inc. (“Sidekick”, “we”, “us”, or “our”) collects, uses, and shares your personal information and help you understand and exercise your privacy rights. This Notice applies to Sidekick’s processing of personal information including on our website available at www.sidekickwellness.com and our other online or offline offerings which link to, or are otherwise subject to, this Notice (collective, the “Services”).

1. UPDATES TO THIS PRIVACY NOTICE

2. PERSONAL INFORMATION WE COLLECT

3. HOW WE USE PERSONAL INFORMATION

4. HOW WE DISCLOSE PERSONAL INFORMATION

5. YOUR PRIVACY CHOICES AND RIGHTS

6. SECURITY OF YOUR INFORMATION

7. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

8. RETENTION OF PERSONAL INFORMATION

9. SUPPLEMENTAL NOTICE FOR NEVADA RESIDENTS

10. CHILDREN’S PERSONAL INFORMATION

11. THIRD-PARTY WEBSITES/APPLICATIONS

12. CONTACT US

ANNEX A: SUPPLEMENTAL CONSUMER HEALTH DATA PRIVACY STATEMENT

1. UPDATES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time in our sole discretion. If we do, we’ll let you know by posting the updated Privacy Notice on our website and/or we may also send other communications.

2. PERSONAL INFORMATION WE COLLECT

We collect personal information you provide to us, personal information we collect automatically when you use the Services, and personal information from third-party sources, as described below.

We may collect personal information that you provide to us.

We may collect personal information automatically when you use the Services.

We may collect personal information about you from third parties.

3. HOW WE USE PERSONAL INFORMATION

We use personal information for a variety of business purposes, including to provide the Services, for administrative purposes, and to market our products and Services, as described below.

We use personal information to fulfill our contract with you and provide the Services, such as:

We use personal information for various administrative purposes, such as:

Your personal information may be used to tailor and provide you with marketing and other content as permitted by applicable law

California Shine the Light: If you are a California resident, you may annually submit a request to us to find out whether we have shared your personal information with third parties for the third parties’ direct marketing purposes. If you would like to submit such a request, please “Contact Us.

If you have any questions about our marketing practices, you may contact us at any time as set forth in “Contact Us.” below.

We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information, with your consent, or as otherwise directed by you.

We may engage in automated decision making, including profiling. Sidekick’s processing of your personal information will not result in a decision based solely on automated processing that has a legal or other similarly significant effect on you unless such a decision is necessary as part of a contract we have with you, we have your consent, or we are permitted by law to engage in such automated decision making.

If you have questions about our automated decision making, you may contact us as set forth in “Contact Us.” below.

4. HOW WE DISCLOSE PERSONAL INFORMATION

We disclose personal information to third parties for a variety of business purposes, including to provide the Services, to protect us or others, or in the event of a major business transaction such as a merger, sale, or asset transfer, as described below.

We may disclose any of the personal information we collect to the categories of third parties described below.

  • Service Providers. We may disclose personal information and chat communications with our AI agents (“Sidekicks”) to third-party service providers who use that information to help us provide our Services and provide our chat features. This includes, but is not limited to, service providers who provide us with platform support, including IT support, hosting, payment processing, customer service, and quotes and other information for banking, legal, insurance, analytics, and related services.
  • Third-Party Services With Whom You Share or Interact. The Services may link to or allow you to interface, interact, share information with, direct us to share information with, access and/or use third-party websites, applications, services, products, and technology (each a “Third-Party Service”).

    Any personal information shared with a Third-Party Service will be subject to the Third- Party Service’s privacy policy. We are not responsible for the processing of personal information by Third-Party Services.

  • Our Clients (Authorized Users Only). In cases where you use our Services as an authorized user of our client, we may provide that client with usage data associated with your use of the Services (e.g., number of minutes engaged with a Sidekick). However, we will not provide our client with access to your private conversations with our Sidekicks unless subject to Section 4(B) below. We are not responsible for the client’s processing of your personal information.

  • Affiliates. We may share your personal information with our corporate affiliates.

  • We may access, preserve, and disclose any information we store associated with you to external parties, if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

    If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, purchase or sale of assets, transition of service to another provider, or other similar corporate transaction, your personal information may be disclosed, sold, or transferred as part of such a transaction as permitted by law and/or contract.

    5. YOUR PRIVACY CHOICES AND RIGHTS

    If you would like to exercise any of these rights, please contact us as set forth in “Contact Us.” below. We will process such requests in accordance with applicable laws.

    Only you, or someone legally authorized to act on your behalf in certain jurisdictions, may make a request to exercise the rights listed above regarding your personal information. If your personal information is subject to a law that allows an authorized agent to act on your behalf in exercising your privacy rights and you wish to designate an authorized agent, please provide written authorization signed by you and your designated agent using the information found in “Contact Us.” below and ask us for additional instructions.

    To protect your privacy, we will take steps to verify your identity before fulfilling requests submitted under applicable privacy laws. These steps may involve asking you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. Examples of our verification process may include asking you to confirm the email address we have associated with you.

    Some laws may allow you to appeal our decision if we decline to process your request. If applicable laws grant you an appeal right, and you would like to appeal our decision with respect to your request, you may do so by informing us of this and providing us with information supporting your appeal.

    6. SECURITY OF YOUR INFORMATION

    We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, no system is 100% secure and we cannot ensure or warrant the security of any information you provide to us. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.

    By using our Services or providing personal information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on our Services, by mail or by sending an email to you.

    7. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

    All personal information processed by us may be transferred, processed, and stored anywhere in the world, including, but not limited to, the United States or other countries, which may have data protection laws that are different from the laws where you live.

    8. RETENTION OF PERSONAL INFORMATION

    We and our service providers store the personal information collected as described in this Privacy Notice for as long as you use the Services, or as necessary to fulfill the purpose(s) for which it was collected, provide the Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

    To determine the appropriate retention period for personal information, we may consider applicable legal requirements, the amount, nature, and sensitivity of the personal information, certain risk factors, the purposes for which we process your personal information, and whether we can achieve those purposes through other means.

    9. SUPPLEMENTAL NOTICE FOR NEVADA RESIDENTS

    If you are a resident of Nevada, you have the right to opt out of the sale of certain personal information to third parties who intend to license or sell that personal information. Please note we do not currently sell personal information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as described in “Contact Us.” below.

    10. CHILDREN’S PERSONAL INFORMATION

    The Services are not directed to children under 16 and we do not knowingly collect personal information from children.

    If you are a parent or guardian and believe your child has uploaded personal information to the Services in violation of applicable law, you may contact us as described in “Contact Us.” below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child’s account if applicable.

    11. THIRD-PARTY WEBSITES/APPLICATIONS

    The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.

    12. CONTACT US

    If you have any questions about our privacy practices or this Privacy Notice, or to exercise your rights as detailed in this Privacy Notice, please contact us at:

    Sidekick Wellness Inc.

    PO Box 261160

    Encino, CA 91426

    legal@sidekickwellness.com

    ANNEX A – SUPPLEMENTAL CONSUMER HEALTH DATA PRIVACY STATEMENT

    This Supplemental Consumer Health Data Privacy Statement (“Consumer Health Data Privacy Statement”) supplements our Privacy Notice.

    This Supplemental Consumer Health Data Privacy Statement only applies to personal information we process that is “consumer health data” subject to the Connecticut Data Privacy Act, as amended (“CTDPA”), Nevada’s Consumer Health Data Privacy Law (“NVCHDPL”), Washington My Health My Data Act (“MHMDA”), or other states with consumer health data privacy laws (as applicable).

    Terms used in this Supplemental Consumer Health Data Privacy Statement that are defined in the CTDPA, NVCHDPL, or MHMDA will have the meaning set forth in those laws to the extent such laws are applicable.

    CONSUMER HEALTH DATA WE COLLECT

    Under CTDPA, “consumer health data” is defined as “any personal data that a controller uses to identify a consumer's physical or mental health condition or diagnosis, and includes, but is not limited to, gender-affirming health data and reproductive or sexual health data.”

    Under NVCHDPL, “consumer health data” is defined as “personally identifiable information that is linked or reasonably capable of being linked to a consumer and that a regulated entity uses to identify the past, present or future health status of the consumer.”

    Under the MHMDA, “consumer health data” is defined as “personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status.”

    Because consumer health data is defined very broadly, many of the categories of personal information that we collect under our Privacy Notice may also be considered consumer health data.

    Examples of consumer health data that you may provide to us, or that we may otherwise collect, may include:

    SOURCES OF CONSUMER HEALTH DATA

    We collect consumer health data that you provide to us, consumer health data we collect automatically when you use the Services, and consumer health data from third-party sources, as described in our Privacy Notice and below.

    WHY WE COLLECT AND USE CONSUMER HEALTH DATA

    We collect and use consumer health data for the purposes and in the manner described in the “How We Use Personal Information” section of our Privacy Notice.

    Primarily, we collect and use consumer health data as reasonably necessary to provide you with the products or Services you have requested or authorized. This may include delivering and operating the products or Services and their features, personalization of certain product or Service features, ensuring the secure and reliable operation of the products or Services and the systems that support them, troubleshooting and improving the products and Services, and other essential business operations that support the provision of the products and Services (such as analyzing our performance and meeting our legal obligations).

    We may also use consumer health data for other purposes for which we give you choices and/or obtain your consent as required by law.

    SHARING OF CONSUMER HEALTH DATA

    We may share each of the categories of consumer health data described above for the purposes described above and in the How We Disclose Personal Information section of our Privacy Notice.

    We only share or disclose your consumer health data as needed to provide you with the products or Services you request or with your explicit consent. We may share or disclose any or all the above categories of consumer health data to the following entities, who shall use the data only as permitted for the purposes set forth above, and within the bounds of our contracts with them.

    These general categories of third parties:

    In addition, we may share or disclose consumer health data as permitted or required by law, such as (i) to an acquiring organization if we are involved in a sale or a transfer of our business, (ii) as needed to prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, (iii) in situations that may involve violations of our terms of use or other rules, (iv) to protect our rights and the rights and safety of others, (v) as needed to support external auditing, compliance and corporate governance functions, (vi) as needed to preserve the integrity or security of our systems, or (vii) to investigate, report, or prosecute those responsible for any action that is illegal under applicable state or federal law.

    HOW TO EXERCISE YOUR RIGHTS

    The CTDPA, MHMDA, and NVCHDPL provide consumers with certain rights with respect to consumer health data.

    Under CTDPA, we are required to obtain consumer consent prior to selling or offering to sell, consumer health data. Consumers have the right to: (i) confirm whether we are collecting or sharing consumer health data; (ii) have us provide the categories of consumer health data that it shares with third parties and the categories of third parties with which it shares consumer health data; and (iii) withdraw consent from our selling of consumer health data.

    Under NVCHDPL, consumers have the right to: (i) confirm whether we are collecting, sharing or selling consumer health data; (ii) have us provide the consumer with a list of all third parties with whom we have shared consumer health data relating to the consumer or to whom we have sold such consumer health data; (iii) request that we cease collecting, sharing, or selling consumer health data relating to the consumer; and (iv) request that we delete consumer health data.

    Under MHMDA, consumers have the right to: (i) confirm whether we are collecting, sharing, or selling consumer health data and to access such data; (ii) withdraw consent from our collection and sharing of consumer health data; and (iii) request that we delete consumer health data.

    The rights afforded to consumers under CTDPA, NVCHDPL, and MHMDA are subject to certain exceptions.

    Subject to certain legal limitations and exceptions, you have the following rights with respect to any consumer health data we may collect about you:

    You may submit a request pursuant to any of these rights by contacting us as described in the “Your Privacy Rights” section of the Privacy Notice.

    We will not discriminate against you for exercising any of your rights. We will make reasonable efforts to respond promptly to your requests in accordance with applicable laws. Please allow 45 days for a response. We may, after receiving your request, require additional information from you to authenticate your request and verify your identity. Please be aware that we may be unable to afford these rights to you under certain circumstances, such as if we are legally prevented from doing so. If we deny your request, you have the right to appeal that denial by contacting us as described in the “Your Privacy Rights” section of the Privacy Notice. We will process and respond to your appeal within the time permitted by applicable law.

    If you are a Washington resident and your appeal is unsuccessful, you may file a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.

    CHANGES TO OUR CONSUMER HEALTH DATA PRIVACY STATEMENT

    We may update this Consumer Health Data Privacy Statement from time to time. When we do update it, for your convenience, we will make the updated statement available on this page. Our intention is to use consumer health data in accordance with the Consumer Health Data Privacy Statement in place at the time the consumer health data was collected.