Consumer Health Data Privacy Notice

‍RUNE LABS, INC.

TERMS OF USE

Last Updated on August 5, 2024

This Consumer Health Data Privacy Notice (the “CHD Notice”) supplements the Rune Labs Privacy Notice (the “Privacy Notice”) and applies to personal data defined as “consumer health data” (“CHD”) by the Washington state My Health My Data Act (“MHMDA”) and Nevada’s Consumer Health Data Privacy Law (“Nevada CHD Law”). Undefined capitalized terms shall have the meaning in the Privacy Notice.

Categories of CHD Collected

As described further in our Privacy Notice, and depending on how you interact with Rune Labs and applicable law, we may collect the following categories of CHD, as broadly defined in the MHMDA and Nevada CHD Law:

Individual health conditions, treatment, diseases, or diagnoses: E.g. if you use the StrivePD mobile app for disease management.
Social, psychological, behavioral, and medical interventions: E.g. through collection of your medical history through the StrivePD mobile app.
Health-related surgeries or procedures: E.g. through collection of your medical history through the StrivePD mobile app.
Use or purchase of prescribed medication: E.g. through collection of medications taken and/or prescribed in the StrivePD mobile app.
Bodily functions, vital signs, symptoms, or measurements of health information: E.g. through collection of certain health information, e.g. when you connect your Apple Watch to the StrivePD mobile app.
Diagnoses or diagnostic testing, treatment, or medication: E.g. through collection of your medical history, including medications taken and/or prescribed, through the StrivePD mobile app.
Data that identifies a consumer seeking health care services: E.g. through collection of your medical history through the StrivePD mobile app, or when you otherwise seek health care services through Rune Labs.
Other information that may be used to infer, derive, or extrapolate data related to the above or other health information.

Sources of CHD

As described further in our Privacy Notice, we collect information, which may include CHD, from the following sources: (1) directly from you; (2) automatically through your use of the Services; and (3) other third-party sources, such as from other apps on your mobile device if you connect your Apple Watch data to StrivePD.

Purposes for Collection of CHD

We describe the purposes for collection and use of CHD in the “How Do We Use the Information We Collect?” section of our Privacy Notice. As further described there and subject to applicable law, we may collect and use CHD as directed by you or with your consent, or (1) to provide and manage the Services; (2) to analyze and improve the Services; and (3) for legal purposes, such as to comply with laws or to establish, exercise, or defend our legal rights.

How and Why We Share CHD

We may share each of the categories of CHD described above for business purposes to the categories of entities described in the “When We Disclose Your Personal Information” section of our Privacy Notice. As further described in our Privacy Notice and subject to applicable law, we may share the categories of CHD:

to deliver products and services to you;
with your consent, such as disclosures to partners and collaborating organizations, or with family members or care providers you authorize to access the information in your account;
to protect Rune Labs and others, including to enforce our Terms of Use, Privacy Notice, or other contracts with you, and for fraud prevention;
to comply with our legal obligations; and
in connection with any negotiation or completed acquisition, merger, or purchase involving our business assets.

As described in our Privacy Notice, we reserve the right to create aggregated and anonymized data for a variety of purposes, and our use and disclosure of such de-identified information is not subject to any restrictions.

As further described in our Privacy Notice, we may share CHD with vendors that help us provide the Services. Subject to applicable law (e.g. subject to your consent in certain situations), we may also share CHD with the following categories of third parties and affiliates:

For the protection of Rune Labs and others (e.g. to governmental or regulatory agencies);

For legal purposes (e.g. to governmental entities in response to legal process);
As necessary for business transfers; and
At your direction or with your consent (such as sharing with family members and/or health care providers with your consent).

How To Exercise your MHMDA or Nevada CHD Law Rights

Subject to exceptions, the MHMDA and Nevada CHD Law extends certain rights to CHD. Depending on your jurisdiction, this may include requests (1) to confirm whether Rune Labs is collecting, sharing, or selling your CHD; (2) to access your CHD; (3) to delete your CHD; (4) to correct your CHD; and (5) to withdraw your consent to the collection or sharing of your CHD. You can seek to exercise these rights by sending an email to info@runelabs.io. Depending on the nature of your request, we may contact you for further information if appropriate to authenticate your identity.

If we deny your request in whole or in part, you may appeal that decision by sending an email to info@runelabs.io. If you are a resident of Washington and your appeal is denied, you can contact the Washington State Attorney General at www.atg.wa.gov/file-complaint. If you are a resident of Nevada and your appeal is denied, you can contact the Nevada Attorney General at https://ag.nv.gov/Complaints/File_Complaint/.

Updates to this CHD Notice

We reserve the right to change this CHD Notice at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised CHD Notice accessible through the Services, so you should review it periodically. The date this CHD Notice was last revised is identified at the top of the document. You are responsible for periodically monitoring and reviewing any updates to the CHD Notice. If we make a material change to the CHD Notice, we will provide you with appropriate notice in accordance with legal requirements. Your continued use of our Services after such amendments (and notice, where applicable) will be deemed your acknowledgment of these changes to this CHD Notice.

Contact Us

If you have any questions about this CHD Notice or Rune Labs's privacy practices, please contact us at: info@runlabs.io or by mail at 649 Irving Street, San Francisco CA 94122.

‍