Sensitive context, narrow use.

This Consumer Health Data Privacy Notice (the “Health Data Notice”) supplements our Privacy Policy. It applies to personal information submitted through the LooksMaxx VC application form that may be considered “consumer health data,” “consumer health information,” biometric data, or similarly sensitive information under an applicable state law because of its appearance-related context.

The current application is not a health service, diagnostic tool, medical assessment, biometric-identification service, or cosmetic-procedure service. We do not use submitted information to identify your past, present, or future physical or mental health status. This Notice applies out of caution and does not concede that a particular record is legally regulated consumer health data.

Guess poll selections and aggregate ratings are not based on Company-run face analysis or health information and are outside the application-photo processing described here.

Depending on what you choose to submit, the covered categories are:

• Photo access information: front-facing and side-profile photo URLs, plus the images and visible information available when an authorized reviewer opens those links;
• Appearance context: your optional self-selected tier and the fact that you requested an appearance-related application review;
• Assessment information: limited internal observations or notes an authorized reviewer may create while performing the requested review; and
• Linked identifiers: your name, email, company or project, application UUID, submission time, and the version and time of your consent.

We do not ask you to provide a diagnosis, medical record, medication, treatment, cosmetic-procedure history, genetic information, precise location, or government identifier. Do not include those items or an image of a minor.

We collect covered information only from:

• You, directly, when you enter a URL, choose a tier, provide consent, or communicate with us about the application;
• The photo host you choose, at your direction, when an authorized reviewer opens the URL you submitted; and
• Our authorized reviewer, if the reviewer creates limited notes while conducting the assessment you requested.

We do not purchase covered information from a data broker, append medical records, or collect appearance information across unrelated websites. A third-party photo host may independently process your use of its service under its own privacy notice.

We collect and use covered information only to:

• receive and organize the application you asked us to review;
• allow a limited group of authorized personnel to access submitted links;
• conduct and document the requested application assessment;
• communicate with you about the application;
• protect the application system and investigate misuse;
• honor a consent withdrawal, access, correction, deletion, or appeal request; and
• comply with law and establish, exercise, or defend legal claims.

The current Website stores the submitted URLs and related application fields in a private application record. An authorized person may open a link and visually review the image. We do not extract a faceprint, calculate an identifying facial-geometry template, compare the image against an identity database, infer a protected trait, diagnose health, or make a solely automated decision producing legal or similarly significant effects.

We will not add a new category, source, or purpose materially inconsistent with this Notice without first updating the Notice and obtaining affirmative consent where required.

We disclose covered information only as necessary to provide the review you requested or for another legally permitted purpose:

• Vercel, as a processor: website hosting, server functions, security, and private Blob storage for the application record;
• Authorized LooksMaxx VC personnel and contractors: limited application review, communication, rights administration, and security;
• Professional advisers: lawyers, auditors, insurers, or security specialists where reasonably necessary and subject to appropriate obligations;
• Authorities or affected parties: when disclosure is required by law or reasonably necessary to protect rights, safety, people, or systems; and
• A transaction successor: in a merger, acquisition, financing, reorganization, bankruptcy, or asset transfer, subject to applicable legal protections.

We have no specific affiliate with which we share covered information. We do not share covered information with Neon or place it in the Guess vote database. If we propose a sharing activity that requires consent and is not necessary to provide the service you requested, we will request separate, distinct consent before that sharing.

We do not sell or offer to sell consumer health data or appearance-related application information. We do not use it for targeted or cross-context behavioral advertising, combine it with a data-broker profile, or provide it in exchange for money or other valuable consideration. We do not use a geofence around a healthcare facility to identify or target a person seeking healthcare.

Before the application form accepts appearance-related information, we ask you to take a separate affirmative action confirming that you voluntarily consent to our collection and use of the categories described in Section 2 for the purposes in Section 4. That consent is separate from general Terms acceptance and the separate arbitration authorization.

You may withdraw consent to future collection or use by emailing looksmaxxvc@gmail.com with the subject “Withdraw Health Data Consent.” Withdrawal does not affect processing already lawfully completed and may prevent us from continuing the requested photo-based review. We will not unlawfully discriminate against you for withdrawing consent or exercising a covered right.

Subject to applicable law and verification, you may ask us to: confirm whether we collect, share, or sell covered data; provide access to it; provide a list of third parties with which it was shared; correct it; delete it; or cease future collection, sharing, or sale. We do not sell covered data.

Email looksmaxxvc@gmail.com with the subject “Consumer Health Data Request.” Include your name, application email, the right you wish to exercise, and enough information to locate the application. We may request additional information reasonably necessary to verify identity or authority. We generally respond within 45 days after authentication, may use a legally permitted extension with notice, and will process a verified deletion request within the period required by applicable law.

If we refuse to act, email the same address with the subject “Consumer Health Data Appeal” within 30 days after our decision and explain the basis for your appeal. We will review it and provide a written response and, where required, the appropriate regulator's contact information.

We retain covered information only for active and reasonably anticipated application review, communication, consent and rights administration, security, compliance, and legal claims. We consider sensitivity, volume, review status, relationship history, limitation periods, legal holds, and whether a record can be deleted or deidentified. The current system does not promise automatic deletion on a fixed date.

After a verified deletion request, we delete covered information from active records and notify relevant processors or recipients as required. Isolated backup copies may remain until overwritten or until the maximum period permitted by applicable law, and will not be restored to active use except for disaster recovery and required deletion handling. We may retain a minimal request and consent record where legally permitted.

We use safeguards designed for the sensitivity of the information, including private Blob storage, encryption in transit, managed encryption at rest, restricted credentials, input validation, and role-limited review. No system is perfectly secure, and we cannot guarantee absolute security.

We will post a revised Health Data Notice with a new effective date and provide a conspicuous notice before a material change. We will not collect or share a new category, use covered data for a materially new purpose, or add a materially new recipient in a way that requires consent without first making the required disclosure and obtaining affirmative consent.

Third parties do not collect consumer health data through our Services over time and across unrelated websites for advertising. A photo host you independently choose may collect information under its own notice when its URL is opened.

Questions, requests, withdrawals, and appeals may be sent to looksmaxxvc@gmail.com. Use the specific subject line described above. Do not email an identity document or a copy of a sensitive image unless we first provide a secure and proportionate verification method.

Effective date: August 27, 2026