Consumer Health Data Privacy

"Consumer health data" is information that identifies or can reasonably be linked to you and describes your physical or mental health. In Liminal, that can include: • What you choose to record about your nights and how you feel: your dreams (voice recordings, transcripts and text), the emotions, lucidity, sleep and wake times and techniques you tag, your own read of a dream, reality checks and practice logs, and photographed journal pages. • Your conversations with Kairos, our AI dream specialist: chat messages, voice-call transcripts and the short memory made after conversations. • What Liminal writes from your journal: titles, summaries, detected themes and dream signs, readings, the Sunday reflection and the Deep Read. • A record that our automatic crisis check ran on something you said to Kairos (when, where in the app and which kind), never your words. We do not collect diagnoses, prescriptions, test results, readings from health devices or precise location, and we do not track your location near health care facilities.

We use consumer health data only to provide what you ask for: • to keep your dream journal, transcribe your recordings and show you the patterns in your own entries; • to hold your conversations with Kairos and remember them for continuity (a switch you can turn off in About Kairos); • to write the readings you ask for; • to share with one linked partner only the dreams you choose to share; • to keep you safe: our crisis check and content filters read what you say to Kairos to spot a crisis or content we don't allow; • to answer you when you contact support, and to keep the service secure and working. We do not sell consumer health data, use it for advertising, or use it to train AI models.

• From you: what you type, say, photograph or record in the app. • From a partner you link, if they choose to share a dream with you. • From our own processing of what you give us: transcripts, titles, summaries, dream signs, readings, conversation memory and crisis-check records.

We share consumer health data only with the service providers (processors) that run Liminal for us, under contracts that let them use it only to provide their service to us: • AI providers: Anthropic (titles, summaries, themes, readings and the crisis check), Google (Gemini: transcription of your recordings, reading of photographed pages, and, on some app versions, the live replies in Kairos conversations, reached through Inworld), OpenAI (GPT-6: the live replies in Kairos conversations, reached through Inworld) and Inworld AI (speech-to-text, voice synthesis and model routing for voice calls). They receive the text or audio a feature needs, such as a dream and your read of it, or your conversation with Kairos. • Cloud hosting and storage: Google Cloud and Firebase (your account data, journal, recordings, photos, conversations and readings). We have no affiliates that receive consumer health data, and we do not share it with advertisers or data brokers. Our error-reporting tool (Sentry) never receives what you write or say. Payment providers (Apple, Google and RevenueCat) do not receive consumer health data. A partner you link receives only the dreams you choose to share. Third parties do not collect consumer health data about your activity over time and across other websites or apps through Liminal. Liminal uses no analytics SDK.

You can: • confirm whether we collect or share your consumer health data, get a copy of it (the in-app export at Profile → Storage & export gives you everything), and get a list of every service provider that received it, with a way to contact each one; • withdraw your consent: delete the content, turn Kairos's memory or journal access off, unshare a dream, or delete your account; • have your consumer health data deleted, including from our service providers. Delete your account in the app (Profile → Delete account) or ask us by email. Backups are overwritten within 35 days. To make a request, email support@programu.app with the subject "Consumer health data request". We may need to confirm it is you. We answer within 45 days; if we need more time, we tell you why within those 45 days and take at most 45 more. Requests are free, up to twice a year. We never treat you differently for using these rights.

If we decline your request, you can appeal by replying to our decision email with "Appeal" within 30 days. We answer your appeal in writing within 45 days and explain our reasons. If we deny it, you can complain to your Attorney General: Washington at atg.wa.gov/file-complaint, or Nevada at ag.nv.gov.

If we change this policy in a material way, we tell you in the app before the change applies, and update the date above. Questions: support@programu.app. ProgramU LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States.