aiCare Privacy Policy

Last updated: October 23, 2026

Effective date: October 21, 2026

Introduction

aiCare (the “App”) is a personal health management application developed and operated by AIH LLC (“we,” “us,” or “our”). By connecting to health devices such as smart rings, blood pressure monitors, pulse oximeters, thermometers, blood glucose meters, and body composition scales, the App helps you record and review your health information. You may also choose to share health information with other users you follow or authorize, including family members or friends.

We recognize the importance of your personal information and process it in accordance with applicable law, following the principles of lawfulness, fairness, necessity, and transparency.

This Policy applies when you select the App’s Global service region. The China service region has a separate privacy policy and a different operator and authentication and push notification services. Please read this Policy carefully before using the App, especially the provisions in bold. Selecting “Agree” indicates your consent to this Policy. Before processing sensitive personal information or sharing your personal information with other users, we will explain the relevant processing and obtain your separate consent. If you do not agree, you may choose not to use the App.

Health information, reminders, and reference classifications provided by the App are for everyday health management only. They do not replace professional medical diagnosis or treatment. In an emergency, call the appropriate emergency number immediately.

This Policy explains:

• I. How We Collect and Use Your Personal Information
• II. Device Permissions and Sensitive Device Access
• III. Automatic Startup and Opening Other Apps
• IV. Third-Party SDKs and Service Providers
• V. How We Store Your Personal Information
• VI. How We Share, Entrust, Transfer, and Disclose Your Personal Information
• VII. Your Rights
• VIII. How We Protect Your Personal Information
• IX. Protection of Minors’ Personal Information
• X. Changes to This Policy
• XI. How to Contact Us
• Appendix 1: Personal Information Collection List
• Appendix 2: Personal Information Sharing List

I. How We Collect and Use Your Personal Information

We collect and use personal information only to the extent necessary for the functions described below. Before you agree to this Policy, the App does not activate personal information collection functions or third-party SDK functions that collect personal information, or send business service requests. If you choose to open the Privacy Policy or Terms of Use webpage, the website processes technical information necessary to establish the connection, such as your IP address, access time, and page request, solely to deliver the page and provide necessary security. These pages do not load analytics, tracking, or other data collection SDKs.

1. Registration and Sign-In

• Email registration and sign-in: When you register or sign in using an email address, we process your email address and password to create your account and verify your identity. Password recovery uses your email address and email verification code. Without this information, email registration, sign-in, or password recovery will not be available.
• Google sign-in: On Android and iOS, you may choose to sign in with Google. With your authorization through Google, we receive your Google account identifier and the name, email address, and profile picture made available through your authorization, together with the credentials needed to complete sign-in. Available profile information may be used to prefill your account profile, which you can edit.
• Sign in with Apple: On iOS, you may choose Sign in with Apple. With your authorization, we receive your Apple sign-in account identifier, authentication credentials, and the name and email address you choose to share. If you choose Apple’s private email relay, we receive the relay address instead of your personal email address. The availability of name and email information depends on your authorization and Apple’s sign-in process.
• Global-region account authentication is provided through Auth0 (Okta). Phone-number/SMS sign-in, WeChat sign-in, and Authing authentication described in the China-region policy are not the Global-region sign-in methods covered by this Policy. See Section IV for information about authentication providers.

2. Personal Profile

To establish your profile and calculate and display health indicators relevant to you, you are asked to provide your name, sex, date of birth, and height. You may also provide a profile picture, weight, email address, and phone number, and select display units for height, weight, temperature, and blood glucose.

• Date of birth, sex, height, and weight are used to calculate body composition, health scores, and reference ranges based on age and sex. Not providing weight may prevent calculation of certain indicators, but does not prevent use of other functions.
• To set a profile picture, you may take a photo or select one from your photo library. The App crops and compresses the selected image on your phone before uploading it to our server. The App does not read other photos in your library.
• You can review and edit this information under “Me > Personal Information.”

3. Connecting Health Devices and Recording Health Information

The health information and associated device records below are sensitive personal information. We process them to provide device connectivity, health records, trends, health scores, and alerts. Unauthorized disclosure or misuse could affect your personal or financial safety or expose you to discrimination. Before first processing your health information, we will explain the purposes, methods, categories, necessity, and potential effects on your rights, and obtain your separate consent. This also covers accessing existing cloud health records, synchronizing device history, automatic synchronization, and subsequent analysis; agreeing to this Policy alone does not replace that consent. If you do not consent, you may still use account and messaging functions that do not involve processing health information. You can contact us to withdraw consent to health information processing and request that further processing stop and relevant information be deleted, as explained in Section VII.

• Device information: When you add a device, we collect its Bluetooth MAC address, serial number, model, name, and firmware version to identify and manage devices associated with your account and distinguish the sources of your records.
• Smart ring: Heart rate, blood oxygen saturation, temperature, step count, distance, calories burned, sleep information (sleep and wake times and durations of awake, light sleep, deep sleep, and rapid eye movement sleep), and heart rate variability, together with sleep, activity, and recovery scores calculated from these data. Heart rate variability is used only locally on your phone to calculate scores and is not uploaded to servers.
• Blood pressure monitor: Systolic pressure, diastolic pressure, and pulse rate.
• Pulse oximeter: Blood oxygen saturation and pulse rate.
• Thermometer: Temperature.
• Blood glucose meter: Blood glucose readings and measurement periods, such as fasting, before a meal, or after a meal.
• Body composition scale: Weight, impedance, and heart rate where supported, and calculated body fat percentage, muscle mass, bone mass, body water percentage, protein percentage, visceral fat rating, basal metabolic rate, body age, body type, and other body composition indicators, based on weight, impedance, height, age, and sex. The scale provider’s cloud algorithm service calculates body composition; see Section VI.2. Impedance is used for body composition calculations and is not uploaded to our own business servers. Complete measurement records and pending-upload caches stored locally on your phone may contain impedance for displaying results, recalculating, and performing uploads or retry uploads you have authorized. When you connect a scale that supports offline history, the App also uses the local SDK to send account and member association identifiers, age, sex, and height to the scale for member recognition and offline records. This local SDK/device interaction is separate from cloud algorithm processing; see Section IV.
• Manual records: You can manually enter, edit, and delete heart rate, blood oxygen, blood pressure, blood glucose, weight, and temperature records.
• Ring SOS records: When you make the SOS gesture on the ring, we record the trigger time and the ring’s MAC address and serial number for you to review. An SOS record does not notify emergency services, your family, or other users. The App does not automatically make a call, send an SMS, or obtain your location in response to this gesture. In an emergency, call emergency services directly.

Measurement error reports and device synchronization diagnostics may contain information related to health measurements. Their purposes, recipients, and scope are described in Sections I.10 and IV; processing that involves health information is subject to the separate consent described above.

4. Health Goals and Measurement Reminders

• Health goals: When you set daily step, sleep duration, or target weight goals, we store the target values you set to display your progress.
• Measurement reminders: If you set reminders for blood pressure, blood oxygen, temperature, heart rate, or blood glucose measurements, the reminder times are stored only on your phone and the operating system delivers local notifications at the scheduled times.

5. Health Alerts and Emergency Numbers

• Health alerts: Our servers analyze your health information to identify situations that may need attention, such as a high blood pressure reading, and notify you within the App or by push notification. If you mark an alert as read, handled, or ignored, we store the status you select.
• Emergency numbers: When a health alert offers an emergency call option, the App reads your mobile network country or region code, which does not require a permission prompt, to display the appropriate number. Only if that code is unavailable and you have already granted location permission does the App read your most recent approximate location once, locally, to derive a country or region code. Location coordinates are not uploaded or saved; only the country or region code is used to look up the emergency number. You must actively select the number to open the system dialer. The App does not automatically place the call.

6. Following, Authorization, and Communication

• Finding other users: You can search by name or aiCare ID for other users you wish to follow.
• Following and authorizing access: Before you follow another user and authorize access to your health information, the confirmation page will identify the actual recipient by name, contact details, and organization, if any, and explain the purposes, methods, and information covered. We will obtain your separate consent. Once you consent, the recipient identified on that page may view your name, sex, date of birth, height, weight, profile picture, and all your health information, including health alerts, for the health information communication and management you choose. Your phone number and email address are excluded from this sharing. You can stop following at any time under “Me > My Doctors.” We then stop providing health information access based on that following relationship. “My Doctors” is a navigation label in the App; this Policy does not imply that every user found there holds a professional qualification. Retention of messages already sent and records lawfully retained is explained in Sections V.2 and VII.
• Messaging: When you communicate with another user you follow, we process message content, sending times, and read status to deliver and synchronize messages. The other user may send notification cards about meetings, reports, or intervention plans. Selecting a card may open another of our apps, as explained in Section III.

7. Health Sharing with Family or Friends

• Search and invitations: You can search for and invite family members or friends by aiCare ID, name, or email address. Search results show only the person’s name, profile picture, and aiCare ID. We process invitations, relationships, note names, and each person’s sharing settings.

• Allowing others to find you: Other users can find you by searching for your exact aiCare ID. To be found by name or email address, you must actively enable “Allow others to find me by name or email.” This setting is off by default. Search results display only your name, profile picture, and aiCare ID, without revealing your email address or phone number. You can turn this option off under “Me > General Settings > Privacy Settings.” Doing so immediately stops discovery by name or email. It does not affect existing relationships or chats and does not itself end health sharing. New relationships and health sharing still require your separate confirmation.

• Providing information to family or friends: When sending or accepting an invitation, you must actively choose what the other person can view. The App does not preselect a sharing scope for you:

  • “All data”: The other person can view your vital signs, sleep, activity, all measurement records, and health alerts.
  • “Not allowed”: The other person cannot view your health information; you can still chat with each other.

  You can change the viewing scope or end the relationship at any time under “Me > Health Sharing,” with immediate effect. For existing relationships previously set to “Alerts and summary only,” the other person can view only your health alerts and periodic health summaries (average, maximum, and minimum values), without access to individual records.

• Alert notifications: Family members or friends whom you authorize to view “All data” may choose to receive notifications when you have a health alert.

• Family and friend messaging: We process message content, sending times, and read status when you communicate with family members or friends.

8. Ring Message and Incoming Call Reminders

The following functions operate only when you actively enable them, and you can turn them off at any time:

• Message reminders: You must grant notification access in your phone’s system settings. The App reads only the identifier of the app that generated a new notification, checks whether it is on your selected reminder list, and, if so, makes the ring vibrate. The App does not read, store, or upload notification titles or content. When you open the reminder app selection page, the App reads your installed app list (app names and icons) once so you can choose which apps trigger reminders. This list is used only on your phone and is not uploaded.
• Incoming call reminders: You must grant phone state access. The App uses ringing, answered, and ended call states to control ring vibration. It does not read phone numbers, contacts, call content, or call history.

9. Push Notifications

The Global service uses Firebase Cloud Messaging (FCM) to deliver messages from other users, family messages, and health alerts. On iOS, delivery also uses Apple Push Notification service (APNs). We generate a random app installation identifier and upload it, together with the push token assigned for your installation, to our servers to address notifications to your device. Information processed by notification service providers is described in Section IV. You can turn off notifications for the App in your phone’s system settings.

10. Service Stability, Diagnostics, and Security

Our servers record network request logs, including access times, requested endpoints, and IP addresses, to investigate faults and protect accounts and services.

The Global service also uses Firebase Crashlytics and Firebase Analytics to diagnose crashes and measurement or synchronization failures and understand App usage. These services process installation or app-instance identifiers, device model, operating system and App versions, crash and diagnostic logs, and App usage events. Measurement error reports can include the measurement type, platform, and the raw measurement/error value received by the App. Scale history synchronization events include the scale’s reported name, device capability information, read outcome, counts of received and saved records, counts of records without timestamps, and whether saving failed. These reports help identify faults and determine whether device history functions work correctly. They are not used for advertising. Information related to health measurements remains protected as personal information and is subject to the health processing consent described in Section I.3.

11. Processing Without Consent Where Permitted by Law

Where applicable law permits or requires processing without consent, we may process personal information as necessary to perform a contract with you, comply with a legal obligation, respond to a public health emergency, or protect a person’s life, health, or property in an emergency. Processing for a legally recognized public interest or of lawfully public information will occur only within the scope permitted by applicable law. We do not treat these exceptions as blanket permission to process information for other purposes.

12. Processing We Do Not Undertake

• The App itself does not read your contacts, SMS messages, call history, or clipboard, and does not continuously obtain or upload your location. Device information processed by third-party SDKs is described in Section IV.
• We do not use your personal information for personalized recommendations, targeted advertising, displaying advertisements, or marketing. Service and health notifications described in this Policy are used to provide the functions you choose.
• We do not use your personal information for purposes outside this Policy without first obtaining your consent where required by applicable law.

II. Device Permissions and Sensitive Device Access

The App requests the following permissions only when needed for the corresponding function and explains their purpose at the time of the request. You can refuse a request or withdraw permission in system settings. Doing so affects the corresponding function without preventing use of unrelated functions. Availability and permission names depend on your phone and operating system.

III. Automatic Startup and Opening Other Apps

To restore measurement reminders and deliver notifications, the system may start App components in the circumstances below. The App does not automatically open other apps in the background.

1. Automatic Startup

(1) Restoring measurement reminders

• Purpose: Restore scheduled local reminders after a phone restart or App update, when the system clears their schedules.
• Triggers: Device startup completion (BOOT_COMPLETED or QUICKBOOT_POWERON) or completion of an App update (MY_PACKAGE_REPLACED).
• Component: The local notification component’s reminder restoration receiver (ScheduledNotificationBootReceiver).
• Information involved: Reads locally saved reminder times only, without additional personal information collection or network requests.

(2) Push notification delivery

• Purpose: Deliver messages and health alerts promptly.
• Triggers: After you agree to this Policy and use the Global service, FCM and, on iOS, APNs may deliver notifications while the App is in the background or start the relevant notification handling component when a notification arrives, subject to system restrictions.
• Components: Firebase Cloud Messaging and system notification services.
• Information involved: See Sections I.9 and IV.

(3) Background ring connection

• Purpose: Maintain the ring connection so message and call reminders work.
• Triggers: Only when you enable “Background Running” and ring message or incoming call reminders. During App use, Android runs a foreground service with an ongoing notification; the service stops when you close the App.
• Component: The ring connection foreground service.
• Information involved: No additional categories of personal information beyond those required for the ring functions you enabled.

(4) Notification listener service

• Purpose: Enable ring message reminders.
• Triggers: After you grant notification access, the system binds the App’s notification listener service according to its own rules.
• Information involved: Only the identifier of the app that generated a notification, as described in Section I.8.

2. Opening Other Apps

The App opens the following only when you actively select the corresponding action:

• Google or Apple sign-in pages, system sign-in interfaces, or the browser, when you select those sign-in methods;
• Our aiSpine (AIHealth) app, when you select “View in aiSpine” on a message card; if it is not installed, an app store page is opened so you can download it;
• The system dialer, when you select an emergency number;
• System settings, when you choose to manage Bluetooth, notifications, notification access, battery optimization, or related settings.

3. Your Controls

You can:

• Turn off the background connection under “Me > General Settings > Background Running”;
• Turn off measurement reminders under “Me > Measurement Reminders,” after which those reminders no longer need startup restoration;
• Turn off automatic startup, background operation, notifications, and notification access in your phone’s system settings.

These choices may affect measurement reminders, push notifications, and ring message or incoming call reminders, but do not prevent use of other functions.

IV. Third-Party SDKs and Service Providers

The App integrates the SDKs and services below to provide the functions in this Policy. Functions that collect personal information or access business services are enabled only after you agree to this Policy and process information only as necessary for the corresponding function. We assess providers’ security capabilities and require them to comply with applicable law and our arrangements with them.

In the table, “local processing” means an SDK runs on your phone or exchanges information with your connected device through Bluetooth, without thereby sending the listed information to the SDK provider. “Processing on our behalf” means a provider processes information for agreed service purposes under our instructions. For providers that process information for their own service purposes, their privacy policies also explain that processing. Account association identifiers remain personal information even when hashed or otherwise de-identified; they are not treated as anonymous merely because a name has been removed.

China-region Authing authentication and WeChat sign-in, including WeChat OpenSDK for iOS, are covered by the China-region policy and are not Global-region sign-in services. Switching regions changes the applicable service and privacy policy; it does not itself constitute consent to new processing.

V. How We Store Your Personal Information

1. Storage Locations and International Processing

• When you select the Global service, your account, profile, health records, and other service information are stored on our operating servers outside mainland China. The Global service and its authentication, notification, diagnostics, and device service providers may process information in more than one country or region. The processing locations may differ from your country of residence.
• We protect information transferred between countries or regions in accordance with applicable law, explain relevant recipients, purposes, methods, and information categories, and obtain separate consent or take other measures where required. This Policy does not mean that all Global information is stored in one country or that every provider uses the same storage location.
• If you switch to the China service, processing under that service is governed by its separate privacy policy. Before a change involving transfer of your information across borders, we will provide the required information and obtain your separate consent where applicable. Changing the region alone does not authorize the transfer of your existing records.

2. Retention

We retain your personal information for no longer than necessary for the purposes described in this Policy:

• Account details, profile information, health records, and messages are kept during the account’s existence to the extent needed to provide the corresponding service. When you delete a record, we delete the corresponding record in online business systems. Backup copies are removed through backup rotation and are no longer used for routine business processing.
• Complete measurement records and pending-upload caches on your phone are kept only as long as needed to display results, recalculate, and perform uploads or retry uploads you have authorized.
• Security logs are retained for the periods required by applicable law. Other diagnostic and operational logs are kept for the shortest period needed for their purpose, then deleted or anonymized. We do not apply one statutory retention period to every kind of log.
• After you request account deletion, our processing target is to complete deletion or anonymization of your personal information within 15 working days after receiving the request. If identity verification is needed, we request only the minimum necessary information; see Section VII.
• Where legally required retention has not expired, or deletion is technically difficult, we restrict processing to storage and necessary security protection. Backup copies are cleared according to rotation schedules, and effective deletion requests continue to apply if a backup is restored.
• Messages you have already sent to other users may be lawfully retained by them, and records subject to legal retention requirements follow the relevant periods. Deleting your account does not unconditionally erase messages lawfully held by another person or records an organization must retain. We stop further health information access based on your former following and sharing relationships.

VI. How We Share, Entrust, Transfer, and Disclose Your Personal Information

1. Sharing with Others

We do not sell your personal information. We do not provide it to others except in the following circumstances:

• With your separate consent, we provide your profile and all your health information to the other users you choose to follow and authorize, within the scope explained in Section I.6.
• With your separate consent, we provide health information to family members or friends you invite or accept, within the scope you actively select, as explained in Section I.7.
• Other users can find you using your exact aiCare ID. They can find you by name or email only after you actively enable that option. Search results display only your name, profile picture, and aiCare ID; see Section I.7 for controls.
• We may provide information where required or permitted by applicable law, for lawful dispute resolution, or in response to a lawful request from an authorized public authority.

Information processed directly by third-party SDK or service providers when you use the relevant functions is described in Section IV.

2. Service Providers Processing on Our Behalf

• We engage cloud infrastructure providers to supply servers and data storage for the Global service.
• We use Auth0 (Okta) for Global account authentication and Firebase services for diagnostics, analytics, and push delivery, within the purposes and information scope described in Sections I and IV.
• We engage 深圳市乐福衡器有限公司 (Lefu) to calculate body composition using weight, impedance, height, age, sex, and other necessary algorithm parameters. Although the business parameters do not include your name, phone number, or account identifier, measurement and profile parameters and necessary network communication information remain personal information. Removing your name does not make them anonymous. The provider may process the information only for the agreed calculations and necessary security, not for unrelated purposes, and retention is limited to what is necessary and legally required. Account association identifiers sent to the scale through its local SDK are separate from the business parameters of the cloud algorithm request.

For processing on our behalf, we specify the purposes, duration, methods, personal information categories, safeguards, and respective rights and responsibilities in our arrangements with providers and oversee their processing activities. A provider’s processing for its own service purposes, where applicable, is also addressed in its privacy policy.

3. Business Transfers

We do not transfer your personal information to another company, organization, or person without your separate consent, except where a merger, division, dissolution, bankruptcy, or similar transaction requires a transfer in accordance with applicable law. We will notify you of the recipient’s name and contact details and require the recipient to continue meeting this Policy’s obligations. If the recipient changes the purposes or methods of processing, it must obtain fresh consent where required by applicable law.

4. Public Disclosure

We do not publicly disclose your personal information unless you separately consent or applicable law or a binding request from an authorized authority requires disclosure.

VII. Your Rights

You can exercise your rights through the following channels, subject to applicable law:

• Access and correction: Review and edit your profile under “Me > Personal Information.” View your health records on the relevant health indicator pages, and edit or delete manually entered records.

• Deletion: You can delete manual records within the App. For device-synchronized health information, contact us as described in Section XI or delete your account. You may request deletion when the purpose has been achieved, cannot be achieved, or no longer requires the information; when we stop providing a service or its retention period expires; when you withdraw consent; or when we process information contrary to applicable law or our agreement.

• Sharing controls: Stop following under “Me > My Doctors,” or change the viewing scope or end a sharing relationship under “Me > Health Sharing.”

• Account deletion: You can use either of these methods:

  1. In the App: “Me > General Settings > Account Security > Delete Account.”
  2. By email: Write to info@aihnet.com from the email address associated with your account, with the subject “Delete aiCare Account.” If you cannot access that address, contact us for the minimum verification necessary. Our target is to complete processing within 15 working days after receiving your request.

  After account deletion, your account, profile, health information, messages, and following and sharing relationships are deleted or anonymized as explained in Section V.2 and cannot be restored once processing is complete. We stop health information access through the former account and relationships. Backup rotation, legal retention, and messages already received by others remain subject to Section V.2; account deletion does not unconditionally erase messages or records lawfully held by others.

• Withdrawal of consent:

  1. Withdraw permission for the corresponding processing by turning off Bluetooth, camera, notifications, phone state, notification access, or other permissions in your phone’s system settings.
  2. Withdraw consent to this Policy under “Me > General Settings > Privacy Settings > Withdraw Consent.” The App then signs you out and stops collecting your personal information. You must agree to the Policy again to resume use.
  3. To withdraw consent specifically for health information processing, email info@aihnet.com. You can request that further health collection, synchronization (including retry uploads), cloud analysis, and sharing based on that consent stop, and request deletion of existing health information. Turning off Bluetooth or ending one sharing relationship does not automatically withdraw consent for all other health processing. Information subject to required retention is handled under Section V.2.
  4. You can also withdraw all consent under this Policy by deleting your account.

  Withdrawal does not affect the lawfulness of processing based on your consent before withdrawal.

• Review this Policy and the lists: Under “Me > General Settings > Privacy Settings,” you can view this Policy, the Terms of Use, the Personal Information Collection List, and the Personal Information Sharing List.

• Obtain a copy: Contact us using Section XI to request a copy of your personal information.

• Request an explanation: You can ask us to explain the personal information processing rules described in this Policy.

• Other rights under applicable law: Where the law applicable to you provides additional rights, such as restrictions on processing, objection, or data portability, you may contact us to exercise them.

We will respond within 15 working days after receiving your request, or within a shorter period if applicable law requires. To protect your information, we may verify your identity using only the information necessary for that purpose. Verification does not restart the response period. If we cannot fulfill your request, we will explain why and describe available complaint or other redress channels.

VIII. How We Protect Your Personal Information

• We use technical safeguards such as encrypted transmission (HTTPS/TLS), access controls, and authentication to protect personal information against unauthorized access, disclosure, alteration, and loss. Health information access follows your consent, the identified recipient, and the scope of authorization. Staff and provider access is restricted.
• Staff who may access personal information are subject to least-privilege access, access auditing, and confidentiality obligations.
• We maintain procedures for responding to personal information security incidents. If an incident occurs, we will notify you and relevant authorities as required by applicable law, explaining the incident, possible effects, response measures taken or planned, and actions you can take to reduce risk.
• Keep your passwords and verification codes secure. No internet service can guarantee absolute security. Contact us promptly if you notice unusual account activity.

IX. Protection of Minors’ Personal Information

The App is primarily intended to provide health management services to adults.

• If you are under eighteen, read this Policy with a parent or other guardian and obtain their consent before using the App, subject to the requirements of applicable law.
• Before processing personal information of children under fourteen, or children subject to a higher age threshold or additional protections under applicable local law, we will obtain the required consent from a parent or other guardian and establish the specific information processing rules required by that law. Guardians can contact us under Section XI to access, correct, or delete a child’s information or withdraw consent.
• If we learn that we collected a child’s personal information without the guardian consent required for that processing, we will delete the relevant information as soon as practicable.

X. Changes to This Policy

We may update this Policy. For a material change, we will display the updated Policy in a notice when you next launch the App and ask for your consent again. If you do not agree, you can stop using the App and delete your account. Material changes include changes to processing purposes, methods, or personal information categories; third-party SDKs or service providers; recipients of sharing, transfers, or public disclosure; methods of exercising your rights; or our contact information.

XI. How to Contact Us

If you have questions, suggestions, or complaints about this Policy or personal information protection, or wish to exercise your rights, contact us:

• Operator: AIH LLC
• Personal information protection email: info@aihnet.com

We will respond within 15 working days after receiving your request, or sooner if applicable law requires. Any identity verification is limited to what is necessary and does not restart that period. If we refuse a request, we will explain our reasons and available redress. If you are dissatisfied with our response, you may contact the competent data protection, consumer protection, or other regulatory authority in your jurisdiction.

Appendix 1: Personal Information Collection List

Appendix 2: Personal Information Sharing List

Developer: AIH LLC

App name: aiCare

Last updated: October 23, 2026