Effective date / last updated: August 19, 2026

This Consumer Health Data Privacy Policy applies to "consumer health data" collected by Dozzi Sleep Systems LLC ("Dozzi," "we," "us") — through the Dozzi app, the Dozzi hub, and the chat assistant on our website — from Washington residents and consumers whose consumer health data is collected in Washington, under the Washington My Health My Data Act (RCW 19.373), and from Nevada residents under Nevada's consumer health data law (NRS 603A.400–603A.560). It supplements our general Privacy Policy, which describes our broader privacy practices. If this policy conflicts with the general Privacy Policy with respect to consumer health data covered by these laws, this policy controls.

Consumer Health Data We Collect and Why

We collect the following categories of consumer health data, only with your consent or as necessary to provide the monitoring service you request from us:

If you opt in to Algorithm Contribution, we additionally use de-identified nightly summaries derived from the categories above to improve our monitoring algorithms. This is optional and off unless you turn it on.

We do not use consumer health data for advertising or marketing, and we do not sell consumer health data.

Sources of Consumer Health Data

• Apple HealthKit, for heart rate, resting heart rate, and Apple Watch sleep stages — read only with the HealthKit permissions you grant
• Your Apple Watch's motion sensors, read directly by the Dozzi watch app during an active monitoring session
• The Dozzi hub in your baby's room, which detects crying on the device itself
• The Dozzi app, which computes derived measures (HRV, sleep-stage estimates, wakeability scores) from the above
• You, when you generate and submit a diagnostic report, or type a message to the in-app support assistant or the chat assistant on our website

Consumer Health Data We Share

Washington. Under RCW 19.373.010, disclosure to a processor is not "sharing." We do not sell consumer health data, and there are no third parties or affiliates with whom we share consumer health data as that term is defined in the Act. Categories of consumer health data shared: none. Categories of third parties with whom we share consumer health data: none. Specific affiliates with whom we share consumer health data: none.

Nevada. Nevada defines "share" more broadly and does not exclude processors (NRS 603A.480). Under Nevada's definition we share the categories of consumer health data listed above with the service providers in the table below, and only with them, as necessary to provide the monitoring service you requested (NRS 603A.500(2)). We do not sell consumer health data. The categories of third parties are: cloud infrastructure and analytics providers; push-notification providers; and AI service providers used for automated diagnosis and in-app support. The specific third parties are named below. We have no affiliates with whom consumer health data is shared.

We require these service providers by contract to process consumer health data only on our instructions and not for their own purposes:

Additional Disclosures for Nevada Residents (NRS 603A.495)

The following disclosures are required by Nevada law and are included here because Nevada residents are covered by this policy.

• Effective date: August 13, 2026.
• Purposes of collecting, using, and sharing. We collect and use consumer health data solely to deliver the infant-monitoring service you request — routing cry alerts to a caregiver, showing you your own session and sleep summaries, and diagnosing problems you report to us. We do not sell consumer health data or use it for advertising, marketing, or profiling unrelated to monitoring.
• How consumer health data is processed. Data is transmitted over encrypted connections, stored in access-controlled cloud databases operated on our behalf, and processed by automated scoring and alert-routing logic. Retention periods are listed in our general Privacy Policy; diagnostic reports are automatically deleted 90 days after submission, and de-identified Algorithm Contribution data is retained indefinitely because it cannot be linked to you.
• Reviewing and requesting changes. You can review your session and sleep summaries in the Dozzi app's Insights tab; for a full copy of your consumer health data, email info@dozzisleep.com. We do not offer a self-service correction tool for consumer health data; to request a correction, email info@dozzisleep.com and we will correct or delete the record.
• Material changes. If we materially change this policy we will notify you in the Dozzi app and, if you have given us an email address, by email, before the change takes effect.
• Cross-site tracking. No third party collects consumer health data through the Dozzi app or our website over time or across different websites or online services.

Your Rights

If you are covered by either law (Washington residents and consumers whose consumer health data is collected in Washington; Nevada residents), you have the right to:

• Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data, including a list of the third parties and affiliates (if any) with whom we have shared it and how to contact them;
• Withdraw consent to our collection or sharing of your consumer health data;
• Delete your consumer health data.

How to exercise these rights:

• Delete in the app: Settings → Advanced Settings → Account → Delete Account removes your account and the consumer health data associated with it. Problem reports you submitted are deleted immediately. Copies held in encrypted archival storage are deleted within 90 days of your request. De-identified data contributed under Algorithm Contribution is not deleted, because it is no longer linked or reasonably linkable to you.
• Withdraw consent: Email info@dozzisleep.com — this is the complete withdrawal mechanism; we will stop collecting your consumer health data and delete what we hold. You can also reduce collection yourself at any time: ending a monitoring session (or removing the Dozzi watch app) stops heart-rate and motion collection, and turning off Dozzi's access in iPhone Settings → Privacy & Security → Health → Dozzi stops resting-heart-rate and Apple sleep-stage reads. These self-service steps stop new collection but do not by themselves delete data we already hold.
• Stop optional algorithm contribution: Settings → Advanced Settings → Privacy & Data.
• Email us: info@dozzisleep.com for any access, confirmation, withdrawal, or deletion request.

We may need to verify your identity before acting on a request. We will respond within 45 days of receiving a verifiable request, and we may extend that period once by up to 45 additional days where reasonably necessary — if we do, we will tell you within the first 45 days and explain why. Account and profile data is deleted immediately on request; encrypted archival copies are deleted within 90 days.

We will not unlawfully discriminate against you for exercising your rights. Withdrawing consent does change how the service works: Smart Mode routing needs your heart-rate and motion data, so the app falls back to Alternating mode. Cry alerts continue either way.

Appeals: If we decline to act on your request, you may appeal by replying to our response or emailing info@dozzisleep.com with the subject line "Consumer Health Data Appeal." We will respond to your appeal within 45 days. If your appeal is unsuccessful, you may contact:

• Washington residents: Washington State Office of the Attorney General — www.atg.wa.gov/file-complaint
• Nevada residents: Nevada Office of the Attorney General — ag.nv.gov/Complaints

Contact

Dozzi Sleep Systems LLC — info@dozzisleep.com — 5900 Balcones Drive, STE 100, Austin, TX 78731, US