CONSUMER HEALTH DATA PRIVACY POLICY

Effective Date: September 8, 2026

IQBID Helios Limited ("Company," "we," "us," or "our") issues this Consumer Health Data Privacy Policy to comply with applicable state privacy laws regulation-mandated in the United States, including the Washington My Health My Data Act ("MHMDA"), Nevada Senate Bill 370, and equivalent statutory frameworks.

This Policy applies exclusively to users residing in the United States ("US Users") who submit text prompts, structured queries, or digital files containing potential health-related information to our artificial intelligence (AI) model aggregation service (the "Service").

1. ABSOLUTE MEDICAL DISCLAIMER (NO MEDICAL ADVICE)

THE COMPANY IS A TECHNOLOGY SOFTWARE AGGREGATOR. THE COMPANY IS NOT A MEDICAL PROVIDER, HEALTHCARE INSTITUTION, OR LICENSED MEDICAL PROFESSIONAL.

THE SERVICE, INCLUDING ALL AUTOMATED OUTPUTS GENERATED BY THIRD-PARTY AI MODELS (E.G., OPENAI, GOOGLE), IS PROVIDED FOR GENERAL INFORMATIONAL AND EDUCATIONAL PURPOSES ONLY. NO AUTOMATED OUTPUT CONSTITUTES, REPLACES, OR SHOULD BE INTERPRETED AS PROFESSIONAL MEDICAL ADVICE, DIAGNOSIS, CLINICAL INTERPRETATION, PROGNOSIS, OR TREATMENT. ALWAYS SEEK THE ADVICE OF YOUR PHYSICIAN OR OTHER QUALIFIED HEALTHCARE PROVIDER WITH ANY QUESTIONS YOU MAY HAVE REGARDING A MEDICAL CONDITION. NEVER DISREGARD PROFESSIONAL MEDICAL ADVICE OR DELAY IN SEEKING IT BECAUSE OF SOMETHING YOU HAVE READ ON OR GENERATED THROUGH THIS SERVICE.

2. CATEGORIES OF CONSUMER HEALTH DATA WE MAY PROCESS

Depending on how you interact with our aggregated AI models, you may voluntarily upload or input information that falls under the statutory definition of "Consumer Health Data" under US state laws. This includes:

• Information Regarding Health Conditions: Any text prompts describing physical or mental health conditions, clinical symptoms, diseases, syndromes, or medical histories.
• Medical Diagnostic Documentation and Images: Uploaded files, including but not limited to, photographs of dermatological conditions, digital copies of laboratory blood tests, medical imaging data (X-rays, MRIs), or pharmaceutical prescriptions.
• Biometric Data: Facial features or physiological structures processed from uploaded photographic inputs by the third-party generative vision models.
• Inferences: Technical conclusions or structured summaries generated automatically by the aggregated AI models regarding your health baseline based on your submitted User Inputs.

3. PURPOSE OF PROCESSING AND LEGAL BASES

We collect, cache, and transmit Consumer Health Data strictly for the following operational reasons:

• Real-Time Generation: To forward your prompts and uploaded files via secure API to third-party AI models (Sub-processors) to execute the automated processing you explicitly request.
• Temporary Session Caching: To display your immediate historical workspace logs within your personal account dashboard.
• Strict Security Auditing: To evaluate whether submitted prompts violate our Usage Policy or contain prohibited materials.

CRITICAL POLICY ENFORCEMENT: UNLESS YOU PROVIDE SEPARATE, EXPLICIT, AFFIRMATIVE CONSENT, THE COMPANY STRICTLY PROHIBITS THE UTILIZATION OF CONFIRMED CONSUMER HEALTH DATA CATEGORIES FOR INTERNAL SOFTWARE TRAINING, MACHINE LEARNING, OR CORPORATE MODEL FINE-TUNING ACTIVITIES.

4. TRANSMISSION TO THIRD-PARTY SUB-PROCESSORS

To deliver our aggregation functionality, your submitted health-related data must be transmitted to third-party artificial intelligence infrastructure developers (such as OpenAI, LLC and Google LLC) via encrypted API channels. These third parties process data as independent infrastructure providers. We do not sell, rent, monetize, or lease your Consumer Health Data to commercial data brokers, marketing firms, or insurance agencies under any circumstances.

5. YOUR STATUTORY US PRIVACY RIGHTS

If you are a US resident, you possess distinct legal rights over your Consumer Health Data:

• Right to Confirm Processing & Access: The right to confirm whether we are processing health data about you and to obtain a list of all third-party sub-processors to whom your data has been transmitted via API.
• Right to Delete: The right to request the complete, permanent erasure of your cached personal health data and historical logs from our system and to compel our infrastructure providers to do the same.
• Right to Withdraw Consent: The right to immediately revoke any previous authorization regarding the processing or collection of your health data.

To exercise any of these statutory rights, you must submit a formal verification request via email to our dedicated data privacy department at privacy@iqbid.ai with the subject line "Consumer Health Data Request."

6. STATUTORY CONTACT AND DISCLOSURE REQUIREMENTS

This Consumer Health Data Privacy Policy is governed by the laws of the state jurisdiction of the consumer to the extent mandated by laws such as the Washington MHMDA. Any regulatory or consumer inquiries regarding our organizational data engineering pipelines can be submitted to:

• Email Contact: privacy@iqbid.ai
• Attn: Health Data Privacy Officer
• Corporate Entity: