Privacy Choices and Consumer Rights

Effective date: October 8, 2026

Paridym Agency Inc.
privacy@paridym.ai or support@paridym.ai
https://paridym.ai/privacy-choices

This Privacy Choices and Consumer Rights notice supplements the DON Privacy Policy. It explains how you may exercise privacy rights regarding personal information processed by DON and Paridym Agency Inc.

The rights available to you depend on where you live, the laws that apply, and the nature of the information involved. We may honor a request voluntarily even when a particular privacy law does not require us to do so.

DON is intended exclusively for adults who are at least 18 years old.

Your Privacy Choices

Depending on applicable law, you may have the right to:

Confirm whether we process your personal information
Request access to personal information associated with you
Request correction of inaccurate personal information
Request deletion of personal information
Receive certain information in a portable format
Withdraw consent when processing is based on your consent
Limit certain uses of sensitive personal information
Opt out of the sale or sharing of personal information
Opt out of targeted advertising
Opt out of certain profiling or automated decisions
Appeal the denial of a privacy request
Receive equal service and pricing without unlawful discrimination for exercising a privacy right

These rights are subject to applicable exceptions. For example, we may retain limited information when reasonably necessary to comply with law, protect security, prevent fraud, complete transactions, resolve disputes, enforce agreements, or establish and defend legal claims.

How to Submit a Request

You may submit a privacy request using either of the following methods:

Email privacy@paridym.ai with the subject “Privacy Request”
Email support@paridym.ai with the subject “Privacy Request”

Please describe the right you want to exercise and identify the DON account involved.

Do not send passwords, one-time codes, authentication tokens, government identification documents, medical records, full payment-card information, or other sensitive information in your initial email.

You may also delete your entire DON account through the app:

More → System & Privacy → Delete Account

Account deletion is permanent. Deleting the app from your device does not delete your account or cancel an Apple subscription.

Identity Verification

We may need to verify your identity before fulfilling a request to access, correct, export, or delete personal information.

Verification may include confirming control of the email address or authentication method associated with your DON account. The information requested will depend on the sensitivity of the data and the risk of unauthorized disclosure or deletion.

We will not require more information than reasonably necessary to verify and fulfill the request. Information collected for verification will be used only for verification, security, fraud prevention, and legal compliance.

Requests to opt out of sale, sharing, or targeted advertising will not require identity verification where applicable law prohibits it. We may still request limited information needed to identify the browser, device, account, or processing activity covered by the request.

Authorized Agents

Where permitted by applicable law, you may designate an authorized agent to submit a request for you.

We may require:

Proof that you authorized the agent to act for you
Verification of your identity directly with us
Confirmation that you gave the agent permission to submit the request

An authorized agent should email privacy@paridym.ai with the subject “Authorized Agent Privacy Request.”

We may deny a purported agent’s request if the agent cannot provide legally sufficient proof of authorization.

Response Timing

We will confirm and respond to privacy requests within the periods required by applicable law.

For requests governed by the California Consumer Privacy Act, we generally expect to confirm receipt within 10 business days and provide a substantive response within 45 calendar days. When legally permitted, we may extend the response period by an additional 45 days after notifying you and explaining the reason for the extension.

Other jurisdictions may impose different response periods. If we need additional information to verify or process your request, the response period may be affected as permitted by law.

We will ordinarily process legally required privacy requests without charge. We may charge a reasonable fee or decline a request when permitted by law—for example, if a request is manifestly unfounded, excessive, repetitive, technically infeasible, or made for fraudulent purposes.

Access and Portability

You may request information about the personal information we process, including, where required:

Categories of personal information collected
Specific pieces of personal information associated with you
Categories of sources from which information was collected
Business or commercial purposes for processing
Categories of service providers or other recipients
Categories of information disclosed to recipients
A portable copy of eligible personal information

A portable response may not include information that would disclose another person’s information, compromise security, reveal protected trade secrets, or violate applicable law.

Correction

You may request correction of inaccurate personal information associated with you.

When evaluating a correction request, we may consider the nature of the information, why it was collected, and the evidence you provide. We may decline to change information when we reasonably determine that it is accurate or when applicable law permits us to deny the request.

Correcting account information may not automatically change historical records, completed transactions, security logs, legal records, or content that accurately reflects what was provided or generated at an earlier time.

Deletion

You may request deletion of personal information associated with your DON account.

Subject to applicable exceptions, deletion may cover:

Account and profile information
Goals and action plans
Intake responses
Conversations and coaching history
Uploaded or entered content
Saved preferences and memories
Connected-service information stored by DON
Health or wellness information stored by DON
Calendar or reminder information stored by DON
Device and usage information linked to the account

We may retain limited information when necessary to:

Complete a transaction you requested
Detect, investigate, or prevent security incidents or fraud
Maintain system integrity
Comply with legal or financial-recordkeeping obligations
Exercise or defend legal claims
Enforce our agreements
Document and honor your privacy choices
Maintain suppression records that prevent deleted information from being unintentionally reintroduced
Complete deletion from active systems and allow encrypted backups to cycle out

When information is retained under an exception, we will limit its use to the applicable purpose.

Deleting your DON account does not automatically cancel an Apple subscription. Apple subscriptions must be canceled separately through your Apple Account.

Depending on how you use DON, sensitive information may include:

Health and wellness information
Mental-health-related goals or conversations
Precise location information, if a feature requests it
Account credentials
Financial information
Contents of private communications
Information about race, ethnicity, religion, sexual orientation, or citizenship
Biometric or genetic information, if a future feature expressly collects it
Other information treated as sensitive under applicable law

DON will request permission before accessing device-controlled sources such as Apple Health, the microphone, calendars, reminders, or notifications when platform permission is required.

You may revoke device permissions through iPhone Settings. Revoking a permission generally prevents future collection through that permission but does not automatically delete information already stored by DON.

Where processing depends on consent, you may withdraw that consent by revoking the relevant permission, disconnecting the integration, changing an available setting, deleting the relevant information, or contacting us.

Withdrawal does not make processing performed before the withdrawal unlawful.

Consumer Health Data

DON may process information that could be considered consumer health data under certain state laws even when that information is not protected by the federal Health Insurance Portability and Accountability Act, commonly called HIPAA.

Consumer health data may include information concerning:

Physical or mental health conditions
Symptoms
Diagnoses voluntarily disclosed by a user
Medications or treatments voluntarily disclosed by a user
Exercise and fitness activity
Sleep
Nutrition
Reproductive or sexual health
Health-related goals
Health measurements imported from a connected service
Information that could reasonably identify a person’s past, present, or future health status

We may collect this information directly from you, from features you choose to use, from Apple Health or another connected service with your permission, or through inferences necessary to provide requested coaching and planning features.

We use consumer health data to:

Provide features you request
Personalize goals, plans, reminders, and analysis
Maintain and improve service reliability
Protect account and system security
Respond to support and privacy requests
Comply with law

We do not sell consumer health data. We do not use consumer health data for targeted advertising. We do not permit data brokers to use DON consumer health data to build advertising profiles.

We may disclose consumer health data to service providers that process information on our behalf, such as hosting, database, authentication, AI-processing, diagnostics, and security providers. Such providers are authorized to process the information only for contracted services and applicable legal obligations.

We may also disclose information when you direct us to connect a service, when required by law, or when reasonably necessary to protect legal rights and safety.

Subject to applicable law, you may request:

Confirmation of whether we collect or share your consumer health data
Access to that data
A list of relevant third parties or affiliates that received it
Withdrawal of consent
Deletion of consumer health data
An appeal if we deny the request

A request to delete consumer health data may require us to send a deletion instruction to processors, affiliates, or other recipients when legally required.

DON does not currently sell personal information for money.

DON does not currently share personal information for cross-context behavioral advertising, use personal information for targeted advertising, or use third-party advertising networks to track users across unrelated applications and websites.

Because we do not currently engage in those activities, there is no DON advertising profile that needs to be opted out of.

If our practices change, we will update our disclosures and provide any legally required “Do Not Sell or Share My Personal Information” or targeted-advertising control before beginning the applicable processing.

Global Privacy Control

Where legally required, we recognize qualifying browser-based universal opt-out preference signals, including Global Privacy Control, as requests to opt out of covered sale, sharing, or targeted-advertising activities.

Because DON does not currently sell or share personal information for targeted advertising, receiving a Global Privacy Control signal should not materially change DON’s current advertising practices.

A browser signal may apply only to the browser or device from which it is sent unless you are signed in and applicable law requires us to associate it with your account.

Colorado currently recognizes Global Privacy Control as a valid universal opt-out mechanism for covered processing. Colorado Attorney General guidance.

Profiling and Automated Decisions

DON uses artificial intelligence to generate coaching, summaries, suggested goals, action steps, analysis, reminders, and other personalized output.

DON’s AI output may influence what content or recommendations you see, but DON is not intended to make legally significant decisions concerning employment, housing, credit, education, insurance, healthcare eligibility, access to essential services, or other similarly consequential matters.

DON should not be used as the sole basis for decisions that produce legal or similarly significant effects.

Where applicable law grants a right to opt out of covered profiling or automated decision-making, you may submit a request to privacy@paridym.ai.

Certain AI processing may be essential to the service you requested. If we cannot provide a feature without the processing you have asked us to stop, we will explain the consequence of your choice before completing the request when required by law.

Appeals

If we deny a privacy request, residents of jurisdictions providing an appeal right may appeal by emailing privacy@paridym.ai with the subject “Privacy Request Appeal.”

Include:

The date of the original request
The email address used for the request
A short explanation of why you believe the decision should be reconsidered

A person not involved in the original decision should review the appeal when reasonably practicable.

We will respond within the period required by applicable law. If the appeal is denied, we will provide any legally required instructions for contacting the appropriate state regulator or attorney general.

California Privacy Rights

California residents may have rights under the California Consumer Privacy Act, as amended, including rights to:

Know what personal information is collected, used, disclosed, sold, or shared
Access specific pieces of personal information
Correct inaccurate personal information
Delete personal information, subject to exceptions
Opt out of sale or sharing
Limit certain uses and disclosures of sensitive personal information
Receive information in a portable format
Receive equal service and pricing without unlawful discrimination

DON does not currently sell or share personal information as those terms are used for cross-context behavioral advertising under California law.

We do not currently use or disclose sensitive personal information for purposes that would require a separate “Limit the Use of My Sensitive Personal Information” link. If that changes, we will provide the required notice and control before beginning the covered use.

California requires covered businesses to recognize qualifying opt-out preference signals, such as Global Privacy Control, for sale and sharing opt-outs. California also generally requires confirmation of deletion, correction, and access requests within 10 business days and a substantive response within 45 calendar days, subject to a permitted extension. California Privacy Protection Agency guidance.

Financial Incentives

DON does not currently offer a financial incentive, price difference, or service difference in exchange for the collection, retention, sale, or sharing of personal information.

Ordinary subscription plans that provide different product features at different prices are not intended to assign a monetary value to personal information.

If we introduce a program covered by financial-incentive or loyalty-program laws, we will provide the required notice and obtain any legally required opt-in consent before enrollment.

Non-Discrimination

We will not unlawfully discriminate against you for exercising a privacy right.

Exercising a privacy right will not, by itself, result in:

Denial of service
Unlawful changes in price
Reduced service quality
Retaliation
A requirement to waive another privacy right

Some choices may affect functionality. For example, deleting information, withdrawing consent, or revoking Health, microphone, calendar, or reminder access may prevent DON from providing features that depend on that information.

A functional consequence resulting directly from your privacy choice is not intended as discrimination.

Requests Involving Another Person

Privacy rights generally apply only to information associated with the person making the request.

We will not provide access to another person’s account or personal information without legally sufficient authorization.

If a request would reveal another person’s information, we may redact that information, provide a limited response, or deny the affected portion of the request as permitted by law.

Retention of Privacy Requests

We may retain records of privacy requests, verification steps, correspondence, decisions, and completed actions as necessary to:

Demonstrate legal compliance
Prevent fraud or repeated unauthorized requests
Maintain security
Resolve disputes
Honor continuing opt-out or deletion choices

These records will not be used for unrelated marketing or advertising.

Changes to This Notice

We may update this notice to reflect changes in law, technology, or DON’s practices.

If a change materially affects how we use previously collected personal information, we will provide legally required notice and obtain consent when required before applying the new practice.

The effective date at the top identifies the current version.

Contact Us

For privacy questions or requests:

Paridym Agency Inc.
Email: privacy@paridym.ai
Alternative email: support@paridym.ai
Subject: Privacy Request

Privacy Policy: https://paridym.ai/privacy
Support: https://paridym.ai/don-support
Terms of Service: https://paridym.ai/terms