CONSUMER HEALTH DATA PRIVACY NOTICE

My2MinuteReset

Effective Date: August 31, 2026 Last Updated: September 5, 2026

This is a separate, standalone notice required by the Washington My Health My Data Act, ch. 19.373 RCW, and Nevada SB 370 (2023), codified at NRS 603A.400-603A.560. It is linked by its own distinct link on our homepage, labeled “Consumer Health Data Privacy Notice,” separate from the general Privacy Policy link. It supplements, and as to consumer health data controls over, our Privacy Policy.

1. Why You’re Reading This

Our quiz asks a short set of questions we call the Safety Screen so we can avoid suggesting a product that would be wrong for you. Depending on your earlier answers, the quiz may also ask health-related questions outside the Safety Screen to generate the wellness profile and plan you asked us to create.

How does caffeine affect you?

Anything we should keep in mind? - Tree-nut allergy · Dairy or milk sensitivity · Pregnant or nursing · Taking medications · None of these apply

Your answers to the Safety Screen questions are consumer health data under Washington and Nevada law. Certain health-related quiz selections outside the Safety Screen are also consumer health data, including selections that may reference energy, cravings, sleep, skin, hair, nails, digestion, immune resilience, monthly cycle, hormones, intimate or urinary health, recovery, soreness, or similar health-related areas. So is the wellness profile the quiz generates from your other answers, to the extent it could be read as saying something about your health.

We take that seriously, and this notice tells you exactly what we do with it. The short version: we use Safety Screen answers to filter product suggestions and add the right safety notices. We use health-related quiz selections outside the Safety Screen to generate and preserve your wellness profile, identity headline, educational content, and plan. We never sell consumer health data, never share it with advertisers, never send it to Meta or any other ad platform, and never send it to the Creator Partner whose version of the quiz you took.

2. What Consumer Health Data We Collect

Other quiz answers that do not reveal or reasonably imply health information, such as your answers about what has gotten in the way for you before, what your typical day looks like, and how you prefer to start something new, are handled under our general Privacy Policy. Some quiz selections outside the Safety Screen are health-related; those are covered by this notice. We treat all wellness categories conservatively and never disclose your wellness category to any advertising platform.

We collect this data only from you, directly, and only when you choose to provide it. We do not purchase health data, obtain it from data brokers, or infer it from your location or browsing behavior.

We do not collect: precise geolocation of any kind; data about your visits to healthcare facilities; biometric or genetic data; diagnoses, medical records, prescriptions, lab results, or insurance information; gender-affirming or reproductive-care service data; or bodily measurements.

We do not use geofencing. We do not operate, and will not operate, any virtual boundary around a healthcare facility for any purpose.

3. Why We Collect It - and the Only Ways We Use It

We collect consumer health data for these purposes and no others:

(a) To remove product suggestions that are not right for you. Pregnant or nursing -> we suggest no products at all. The entire product section is replaced with a message asking you to talk to your doctor or midwife. You keep your free wellness profile, habits, and education. Tree-nut allergy -> we remove any suggested product containing tree nuts. Dairy or milk sensitivity -> we remove any suggested product containing dairy. Taking medications -> we add a notice at the top of your results asking you to check with your healthcare provider before starting any supplement. Caffeine sensitivity or avoidance -> we shift or remove caffeine-containing suggestions.

(b) To include the corresponding safety notice in your on-screen results and your emailed plan. (c) To generate and preserve your wellness profile, identity headline, educational content, and plan when a health-related quiz selection outside the Safety Screen is part of the result you asked us to create.

If you choose to send health information to us by email, reply, or another message, we use it only to read and respond to your message, do not use it for advertising or product suggestions, do not send it to Creator Partners, and delete or de-identify it when it is no longer needed to respond to you, administer the Services, or comply with law.

That is the complete list of our uses. We keep no health data in the compliance disclosure record itself; the record of what you were shown and what you chose contains no health information (see Section 6).

We do not use consumer health data to target advertising, to build advertising audiences, to measure ad performance, to train any model, or for any purpose you would not expect from the list above.

4. Who We Share It With - and Who We Don’t

We share consumer health data in the limited ways described in this section: with the specific service providers (“processors”) named below, and as Product-link click-through information with Yū LLC and its affiliate tracking provider only when you choose to click a product link and leave the Services.

The categories of consumer health data each recipient receives are described in the tables below. Except as described in this section, we share consumer health data with no one else.

One further category of consumer health data is shared, and it is shared with a party that is not a processor. It is set out here, affirmatively, in the same form as the table above.

Other than this product-link click-through information, we do not send Yū LLC or its affiliate tracking provider your consumer health data.

We generate your personalized plan document ourselves, within our own systems. No separate vendor produces it; the storage provider named above holds the finished file.

Our separate marketing email/CRM provider is not listed above because it never receives consumer health data. It receives your email address and your non-health quiz answers only. Nothing from the Safety Screen or any health-related quiz selection is transmitted to that provider. Resend is listed above because it sends rendered email content that may include safety notices or reflect a safety-filtering outcome. See Section 8.

We do not share consumer health data with any statutory affiliates, meaning legal entities under common control with us as defined by applicable consumer health data law. If that changes, we will name them here before sharing consumer health data with them.

We also disclose consumer health data: where you specifically direct or consent; and where required by law, subpoena, or valid legal process, or to establish, exercise, or defend legal claims.

We do NOT disclose your consumer health data to:

✕ Meta, Google Ads, Google Analytics, or any other advertising, retargeting, or website-analytics platform - no pixel, no Conversions API event, no server-side transmission, in any form, hashed or otherwise. We also do not transmit the identity of any product suggested to you to any advertising, retargeting, or website-analytics platform, because that would reveal what we filtered out. This is different from a product link you choose to click, which is addressed separately above for our Brand Partner and its affiliate tracking provider.

✕ Creator Partners - the influencer, coach, or business whose branded version of the quiz you used receives your email address and your non-health quiz answers, and nothing from the Safety Screen or any health-related quiz selection. We generate and send your results email and plan ourselves, precisely so that consumer health data never reaches a Creator Partner’s system.

✕ Our marketing email provider

✕ Data brokers - ever, under any circumstances

5. We Do Not Sell Your Health Data

We do not sell consumer health data, and we do not offer it for sale.

Washington law (RCW 19.373.070) and Nevada law require a separate, signed authorization - distinct from consent - before any sale of consumer health data. We do not seek such authorization because we do not sell this data.

We understand “sell” broadly, as those statutes do, to include exchange for monetary or other valuable consideration. Product links may be affiliate links and may result in commissions, referral fees, platform fees, or other compensation to us, to the Creator Partner whose version of the quiz you used, or to another party involved in promoting or operating the Services. When you choose to click a product link, your browser may communicate the product page you selected and the applicable referral code to the Brand Partner or its affiliate tracking provider. We do not send them your quiz answers, Safety Screen answers, health-related quiz selections, wellness profile, product-suitability rules, or the reason any product was or was not suggested. Compensation is not paid in exchange for consumer health data, and we do not sell consumer health data.

6. Our Basis for Collecting It, and How You Control It

We collect Safety Screen answers because they are necessary to provide the personalized plan you asked us for. You asked us for product suggestions. We cannot responsibly suggest products without knowing whether you are pregnant, nursing, allergic to something in them, or taking medications they could interact with. We collect health-related quiz selections outside the Safety Screen because they are necessary to generate and preserve the wellness profile, identity headline, educational content, and plan you asked us to create. Washington law permits collection on this basis, to the extent necessary to provide a product or service the consumer has requested (RCW 19.373.030(1)(a)(ii)).

We also give you a clear choice, every time. On the Safety Screen itself, alongside the questions, we tell you briefly why we ask, what your answers are used for, that we never sell them or share them with advertisers, how long we keep them, and how to have them deleted, with a link to this notice for the full detail. Answering a question is your affirmative choice to give us that answer. We do not pre-fill answers, we do not treat inaction as agreement, and we do not use any design intended to steer your choice. When health-related quiz selections appear outside the Safety Screen, you provide those answers directly as part of asking us to generate your personalized result.

Every question is optional, and the whole screen is skippable. A clearly visible “Skip this step” link sits alongside the questions. If you skip, we do not collect the data and we do not filter your suggestions - we tell you so on screen, and we show you a general consult-your-provider notice instead.

Where we share consumer health data, we share it only in the limited ways described in Section 4: with the processors who act on our behalf under written contract, and as Product-link click-through information when you choose to click a product link and leave the Services. Washington law does not require separate consent for disclosures to processors. Except for those processors and the limited Product-link click-through information described in Section 4, we share consumer health data with no one else.

If our practices ever change, if we ever collect health data for a purpose beyond those described in this notice, or disclose it to anyone who is not a processor other than the Product-link click-through information described in Section 4, we will first obtain your separate, opt-in consent through an unchecked affirmative selection, and we will not condition your access to the Services on your giving it.

You can delete your consumer health data at any time. Every results email carries a link. Open it, select “Confirm deletion” on the page that appears, and consumer health data associated with that email address in our records is deleted immediately. No account, no login, no form to fill in, and no reason required.

This confirmation step helps prevent accidental deletion if an email security tool checks the link before you open it. This link works while your consumer health data is retained. After it expires or is deleted, there is no health data left for this link to delete.

You may also request deletion by emailing healthdata@my2minutereset.com.

Deletion is immediate and prospective; it does not undo processing that already occurred. If we are relying on your consent for any processing, you may withdraw it by the same means.

We keep a record of what you were shown and what you chose - the version of this notice shown when consumer health data was collected, the timestamp, and whether you answered, partly answered, or skipped where applicable. That record contains no health information.

7. How Long We Keep It

We retain Safety Screen answers and safety-filtering determinations for 90 days from the date your results are generated, after which an automated process deletes them or irreversibly de-identifies them.

On the same 90-day schedule, we also purge the health-revealing product-suitability elements of your stored results and hosted plan document, for example, the record that your product section was replaced because you told us you were pregnant or nursing, or that a consult-your-provider notice was added because you told us you take medications.

We keep the Safety Screen answers for this limited window so we can re-send your plan if you ask and resolve support issues.

Health-related quiz selections outside the Safety Screen may be retained with your wellness profile and plan so the personalized result you asked us to create remains available to you. If you ask us to delete your consumer health data, we will delete these selections as part of that request. After deletion, your plan may no longer display the same personalized identity headline or content.

Health information you send us in a message is deleted or de-identified from the dedicated mailbox on a 90-day schedule, or sooner once it is no longer needed to respond to you or administer the Services, unless we need to retain it longer to comply with law or to establish, exercise, or defend legal claims.

Technical request logs produced by our hosting provider may contain request paths and query strings needed to route the Services. They are retained for no more than one day, are not forwarded to any other party, and are accessible only through the hosting provider’s dashboard by authorized personnel. Our own application logs are designed to redact identifiers and health terms before they are written.

Disclosure records - which version of this notice you were shown, when, and whether you answered, partly answered, or skipped where applicable - are kept for 3 years from the date of the relevant interaction, as evidence of compliance. They contain no health data.

8. How We Protect It

Consumer health data is stored in an access-restricted table with row-level security, encrypted in transit and at rest. Access is limited to the minimum number of personnel with a genuine operational need, subject to role-based controls and logging.

Health data fields are excluded from analytics payloads and from every outbound advertising or CRM integration by design, enforced by server-side allowlists that drop non-permitted fields and block the transmission entirely if a prohibited field is present, not by manual practice. If error logging is enabled, error events are rebuilt from named allowlists before transmission to our error-logging provider, so full request objects, request URLs, bodies, headers, cookies, local variables, and unapproved fields are not sent. Identifiers and health terms are redacted from the limited fields that remain. Your personalized plan document is served through a long, random, opaque token, so it is not publicly reachable by guessing a URL. The plan link does not expire automatically because your Reset Roadmap is intended to remain available to you. If you delete your consumer health data, the plan document is deleted and the link will no longer work.

Consumer health data is stored and processed only in the United States. Our separate marketing email/CRM provider, which stores contact data outside the United States, never receives consumer health data. See Section 12 of our Privacy Policy for where other information is processed.

9. Your Rights Regarding Consumer Health Data

If you are a Washington or Nevada resident (and we extend these rights to all users regardless of residency), you have the right to:

Confirm whether we are collecting, sharing, or selling your consumer health data;

Access that data, including a list of all third parties and statutory affiliates with whom we have shared it, and an active contact for each;

Withdraw consent to our collection and sharing of it;

Delete it - and, upon a valid deletion request, we will delete consumer health data associated with the verified email address from all of our records, including archived and backup systems. We will also notify every service provider and any other party that received your consumer health data, within thirty (30) days, and either direct it to delete the data or, where the provider deletes it automatically on a fixed schedule and offers no deletion facility, confirm the date on which that deletion will occur and inform you of it. Where a backup cannot be altered in place, we isolate the record from all use, write a minimal non-health restore tombstone so deleted health data is not restored, and delete the backup copy at the next scheduled rotation; and

Appeal a denial of any request.

(Washington rights: RCW 19.373.040. Consent requirements: RCW 19.373.030. Authorization to sell: RCW 19.373.070.)

How to exercise these rights:

Results email link: open the “Delete my health answers” link in any results email, select “Confirm deletion” on the page that appears, and consumer health data associated with that email address in our records is deleted immediately. No account, no login, no form to fill in, and no reason required.

Email: healthdata@my2minutereset.com or privacy@my2minutereset.com

Mail: A.G. Talent Management and Consulting, LLC, 1705-A Feagin Drive, PMB #216, Lufkin, TX 75904

Our response. We will verify your request by reference to the email address associated with your quiz session. We will respond within forty-five (45) days, extendable once by an additional forty-five (45) days where reasonably necessary, with notice to you. There is no charge for up to two requests in a twelve-month period.

Appeals. If we deny your request, we will tell you why and how to appeal. We will decide your appeal in writing within forty-five (45) days. If we deny the appeal, we will provide you a method to contact your attorney general:

Washington State Attorney General - https://www.atg.wa.gov/file-complaint

Nevada Attorney General, Bureau of Consumer Protection - https://ag.nv.gov/Complaints/File_Complaint/, or (702) 486-3132 / (775) 684-1100

Washington residents: a violation of the My Health My Data Act is a violation of the Washington Consumer Protection Act, and you may have a private right of action.

Nevada residents: Nevada’s consumer health data law is enforced by the Nevada Attorney General as a deceptive trade practice. It does not provide a private right of action - the private right of action described above is a feature of Washington law only. Nevada residents may also opt out of the sale of “covered information” under NRS 603A.340 by writing to privacy@my2minutereset.com.

10. Employees and Contractors

This notice concerns only consumer health data collected through the Services. It does not apply to information we hold about our own employees or contractors in that capacity.

11. Changes to This Notice

We will not use or share previously collected consumer health data in any materially new way without first obtaining your consent. If we change this notice materially, we will update the “Last Updated” date, post the change prominently, and notify you by email where we have your address.

12. Who to Contact

A.G. Talent Management and Consulting, LLC 1705-A Feagin Drive, PMB #216, Lufkin, TX 75904

Consumer health data inquiries: healthdata@my2minutereset.com Privacy generally: privacy@my2minutereset.com

© 2026 A.G. Talent Management and Consulting, LLC. All rights reserved.