Methodology is a food company. We ask health questions so we can match meals to your body and your goals. We are not a doctor, hospital, or health plan, and we do not diagnose, treat, or manage any medical condition. This policy covers the health-related information you choose to share with us, described below.

Two kinds of information, and we treat them differently:

Dietary needs, foods you avoid, and allergies. We collect this so we can prepare and deliver meals that are safe for you. Because it is essential to fulfilling your order safely, we ask for it as a necessary part of setting up and running your subscription, not as an optional add-on.

Optional personalization. We collect the following only when you choose to share it in our onramp, and only after you agree. If you don't, we skip these questions and personalize your box on your tastes instead:

• Your health goals (for example, lose weight, heart health, blood sugar)
• Whether you take a GLP-1 medication (for example, Ozempic, Wegovy, Mounjaro)
• Your weight and height, if you provide them
• Self-reported biomarker flags (for example, "high LDL" or "low iron"), if you choose to enter them

Your biomarkers are self-reported. We do not connect to any lab, and we never store lab documents.

Directly from you, when you fill out our onramp or update your profile. We do not buy health data, and we do not collect it from other companies.

For one purpose: to score and personalize the meals we recommend and deliver to you. We do not use it to make decisions about your eligibility for anything, and we do not use it to diagnose or treat.

• We do not sell your health data. Ever.
• We do not share it with advertisers or marketing platforms.
• We do not use it for targeted advertising.
• The only parties who handle it are service providers that run our own systems (like our hosting and database infrastructure), under contracts that require them to protect it and bar them from using it for their own purposes. They act for us, not as independent recipients.

If we ever wanted to share your health data for a new purpose, we would ask for your separate, specific consent first.

You are in control of your health data. You can:

• Withdraw your consent at any time. We will stop using your optional personalization data (goals, GLP-1 status, weight and height, biomarker flags) to personalize your meals going forward.
• Access it. Ask us to confirm what health data we hold about you, and get a copy.
• Delete it. Ask us to delete your health data and we will, and we will direct our service providers to do the same. Deleting your health data removes your optional health profile: your goals, GLP-1 status, weight and height, and biomarker flags. For most members it does not remove the dietary needs, foods you avoid, and allergies we use to keep your meals safe; we keep those so we never send you food that could make you sick. If you want that dietary and allergy information deleted too, email us at help@gomethodology.com and we will delete it, but because we can't safely prepare your meals without it, that will pause or end your meal service.

Washington and Nevada residents. Your state's health-data law gives you a broader right to delete, so when you delete your health data we also delete your dietary needs, foods you avoid, and allergies, and we will tell you at the time. You can add those back yourself at any point. Until you do, we cannot flag or automatically remove menu items that contain your allergens, so please review ingredients yourself in the meantime.

To make any of these requests, email us at help@gomethodology.com. We will respond within 45 days (we may extend once by another 45 days for complex requests, and we will tell you if we do). If we deny a request, you can appeal by replying to our response, and we will review it.

Your health data is encrypted, access is limited to the people and systems that need it to personalize and safely fulfill your meals, and we keep it only as long as we need it for those purposes.

We do not use geofences around any health care location to collect data from you or to send you messages.

If we update this policy, we will post the new version here with a new effective date, and where required we will ask for your consent again.

Questions or requests: help@gomethodology.com.