§1 — Who We Are

DhanVriddhi Capital LLC ("we," "us," "our") is a limited liability company organized under the laws of the State of Tennessee, United States. We operate HiShona (hishona.com), a free baby health tracking progressive web application for parents and caregivers.

§2 — What Is Consumer Health Data Under MHMDA

The Washington My Health My Data Act (RCW 19.373) defines "consumer health data" as personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. This includes, but is not limited to:

• Individual health conditions, treatment, diseases, or diagnoses
• Social, psychological, behavioral, and medical interventions
• Health-related surgeries or procedures
• Use or purchase of prescribed medication
• Bodily functions, vital signs, symptoms, or measurements
• Diagnosis or diagnostic testing, treatment, or medication
• Gender-affirming care information
• Reproductive or sexual health information
• Biometric data
• Genetic data
• Precise geolocation data collected in connection with a health service or condition
• Any data that identifies a consumer's attempt to seek health care services

For HiShona, the relevant consumer health data is the data about the child entered by the parent or guardian, as well as related caregiver data (e.g., pump logs). See §3 for the complete list.

§3 — Categories of Consumer Health Data We Collect (RCW 19.373.020(1)(a)(i))

HiShona collects the following categories of consumer health data from Washington residents:

We also collect parent/caregiver account data (name, email, Google User ID) and technical data (session tokens, device metadata) as described in our general Privacy Policy. This account data is linked to the child health data and is therefore covered by this policy.

§4 — Purposes for Collection and Use (RCW 19.373.020(1)(a)(ii))

We do not use consumer health data for any of the following purposes:

• Advertising, marketing, or behavioral profiling
• Sale, brokering, or transfer for monetary consideration
• Training, fine-tuning, or improving any artificial intelligence or machine learning model
• Insurance underwriting, credit decisions, or eligibility determinations
• Third-party research (with identifiable data)
• Cross-context behavioral tracking or profiling of children
• Any purpose other than providing the baby tracking service you have requested

We may create aggregated and de-identified statistical data from your consumer health data as described in our general Privacy Policy (§4.5) and as permitted by RCW 19.373 when data is no longer linkable to any individual. Any future change to this practice with respect to Washington residents would require a valid, signed authorization under RCW 19.373.070 before it takes effect.

§5 — Sources of Health Data (RCW 19.373.020(1)(a)(iii))

All consumer health data is collected from a single source:

Some data displayed in HiShona is derived from your input — for example, statistical averages (next-feed and next-sleep predictions) and growth percentile calculations are computed from data you have entered. These derived values are computed locally and/or on our servers solely for display to you; they are not shared, sold, or used for any secondary purpose.

§6 — Third Parties and Specific Affiliates We Share Data With (RCW 19.373.020(1)(a)(iv))

DhanVriddhi Capital LLC does not share consumer health data with third parties for advertising, marketing, research, or any commercial purpose.

Consumer health data is disclosed to the following infrastructure sub-processor solely to operate the Service:

No other third parties or affiliates receive your consumer health data. Specifically, the following entities do not receive consumer health data:

• Google LLC (receives authentication signals only — not health data)
• Advertising networks of any kind
• Data brokers or data aggregators
• Analytics providers (no analytics SDK operates inside the authenticated app)
• AI or machine learning companies
• Insurance companies or healthcare organizations

§7 — No Sale of Consumer Health Data (RCW 19.373.070)

Under RCW 19.373.070, any sale of consumer health data requires a valid authorization that is:

• Presented as a standalone document, separate and distinct from any other consent or terms;
• Written in plain language;
• Signed by the consumer;
• Limited to one year in duration;
• Specific as to the recipient, the data sold, and the purpose.

We have not obtained any such authorization from Washington consumers. We will not sell consumer health data without first obtaining a valid, fully compliant authorization under RCW 19.373.070. If we ever contemplate doing so, we will provide Washington residents with advance notice and an opportunity to provide or withhold the required authorization.

Note: Truly de-identified and aggregated data (data that cannot be used to identify any individual) is not "consumer health data" under MHMDA and may be used for product improvement and research. Any claim that data is de-identified will be subject to the technical standards required by applicable law.

§8 — No Geofencing of Healthcare Facilities (RCW 19.373.030)

§9 — Your Rights Under the Washington My Health My Data Act (RCW 19.373.040)

As a Washington State resident, you have the following rights with respect to your consumer health data:

§10 — How to Exercise Your Rights (RCW 19.373.020(1)(a)(v))

§10.1 Submitting a Request

To exercise any of the rights described in §9, submit a request using any of the following methods:

§10.2 Response Time

We will respond to rights requests within forty-five (45) days of receiving your verified request. In complex cases, we may extend the response period by an additional thirty (30) days with notice to you.

§10.3 Verification

We will verify your identity before processing any rights request that involves accessing, disclosing, or deleting personal information. Verification typically involves confirming your account email address and, for sensitive requests, an additional verification step.

§10.4 No Fee for First Two Requests

There is no fee to exercise your MHMDA rights for the first two (2) requests in any 12-month period. For additional requests in the same period, we reserve the right to charge a reasonable fee, with advance notice.

§10.5 Appeal Process

If we deny any rights request in whole or in part, we will provide you with a written explanation of the reasons within the response period. You may appeal the denial within thirty (30) days by re-submitting your request to privacy@hishona.com with the subject "MHMDA Appeal" and an explanation of why you believe the denial was incorrect. We will respond to your appeal within thirty (30) days. If your appeal is denied, you may file a complaint with the Washington State Attorney General's office.

§11 — Enforcement and Private Right of Action

DhanVriddhi Capital LLC takes its MHMDA compliance obligations seriously. This policy is designed to satisfy the requirements of RCW 19.373.020(1)(a) in full. If you believe we have violated your MHMDA rights, please first contact us at privacy@hishona.com to give us an opportunity to resolve the issue. If we are unable to resolve your concern, you may:

• File a complaint with the Washington State Attorney General's Office: atg.wa.gov
• Pursue a private right of action in Washington State court under RCW 19.86 (Washington Consumer Protection Act)

§12 — Contact Information