Neuraura Privacy Policy

This Privacy Policy describes how Neuraura Biotech Inc. ("Neuraura," "we," "us," or "our") collects, uses, shares, and protects your personal data when you use the MyLoOoP mobile application (the "App") and any related websites, subdomains, surveys, features, or services (collectively, the "Services"). It also outlines how Neuraura complies with privacy laws such as the General Data Protection Regulation ("GDPR") and other applicable privacy laws and explains your rights under those laws. We only collect data that is necessary to provide the Services. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

Neuraura is a company incorporated in Canada and acts as the data controller for the personal data processed through MyLoOoP.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the App.

We collect personal data about you when you use the Services, including when you subscribe to MyLoOoP or engage with Neuraura in any capacity related to the App. We may collect personal data directly from you when you create an account, enter information into the App, or communicate with us; automatically through your device, cookies, and similar technologies when you interact with the App or website; and from third-party integrations or services that you voluntarily authorize to share data with MyLoOoP.

Personal Information

• Name or preferred name (optional)
• Email address
• Phone number
• Mailing address
• Account details
• Language preferences, time zone, general location
• Payment information (e.g., credit card or other payment information) - We do not store your full payment information; it is processed directly by our payment processor.

You may also choose to enter a first name or preferred name. Providing this is completely optional and does not affect your ability to use the Services.

General Health, Well-Being, and Special Category Data

When using the Services, you may choose to provide personal data about yourself, including information considered "special category data" under the GDPR.

This information may include demographic details as well as data such as weight, height, BMI, body temperature, and menstrual cycle information. You may also log information related to your overall health and well-being, including aspects of your sex life, physical or mental health, and sleep patterns. Depending on how you interact with the Services, we may also generate or infer certain data, such as your sex or gender.

This information enables the App to generate insights related to your activities and enhances our ability to provide meaningful feedback. We process this data to improve and support the functionality and features of the App.

Communications

We collect any correspondence sent to or from Neuraura, including:

• Emails
• Support requests
• Chats
• Meeting notes

Device & Usage Information

We collect information about how you interact with MyLoOop and related Services, including which features you use, time spent within the App, and general interaction patterns. We may also collect technical information about your use of MyLoOoP, GetLoOoP.com, submission forms or surveys, and our websites or social media profiles.

We also collect device-related information when you use the Services. This may include your device type and model, operating system version, unique device identifiers, IP address (used only to infer approximate location), mobile network and operator details, app interaction data such as pages viewed, features used, and time spent in the App, as well as any accessibility settings you have enabled (such as display, hearing, or motor features). We may also use cookies and similar technologies as described in our Cookie Policy.

This information helps us understand how the Services are used, improve performance, and enhance your overall experience.

Neuraura uses your information to provide feedback and insights to yourself and other MyLoOoP subscribers, support product development, support business development and conduct research on behalf of Neuraura or our partners.

All of your personal health information will be de-identified at source, i.e., tied to your unique username within the MyLoOoP platform rather than personal identifiers. If you choose to download reports and send them to your email address, you are responsible for ensuring that the email address provided is correct and secure.

Neuraura is not responsible for any personal identifying information that you disclose through engagement with other users either within the MyLoOoP platform (e.g., in community threads) or if you provide your unique username and/or password to any third party.

Aside from personalized insights, your health information will be aggregated with data from other users in nearly all circumstances. We may aggregate, anonymize or de-identify your personal data so that it cannot be used to identify you.

We may process your information to fulfill our obligations to you, such as managing your MyLoOoP account and performing administrative tasks.

We use the data you provide for the following purposes:

• To analyze and deliver educational insights related to your symptoms and health patterns, based on your inputs or in comparison to the broader MyLoOoP user population;
• To communicate updates and provide notifications regarding your access to or use of MyLoOoP; and
• To conduct research and generate reports to inform our business and/or product development strategy, to support marketing and sales activities or as standalone deliverables for third parties.

Depending on the features you use, we may process your personal data on one or more of the following legal bases.

Consent

You may provide consent for us to process your health data in order to deliver the Services.

Legitimate interest

We assess our legitimate interests and balance them against potential impacts on your rights. We may process your personal data to improve and protect our Services, including to:

• Identify and resolve technical issues;
• Confirm genuine user activity;
• Monitor performance and reliability;
• Inform you about your subscriptions;
• Conduct vulnerability scanning; and
• Review aggregated usage trends.

Principles of processing

We only process personal data for the purposes for which it was collected or otherwise authorized by you.

No sale of personal data

We do not sell or rent your personal data. We do not use your data for advertising or tracking. We share it only as described in this Privacy Policy, including with service providers that support our operations.

Your health data is processed only with your explicit consent, and we never share identifiable or pseudonymized health information with partners; only fully anonymized or aggregated data may be used for business development or research purposes.

We may share your anonymized information with third parties as necessary to operate MyLoOoP, particularly in the following contexts:

• Legal Requirements: If required by law or to protect our rights and safety.
• Funding Partners: We may share your anonymized information with current and future institutional investors, venture capital firms, angel investors, accelerators, incubators, family offices, or syndicates ("Funding Partners") that are part of our network. These partners may use your information to assess the suitability of our business for investment or collaboration.
• Corporate Partners: We may also share your data with corporate entities ("Corporate Partners") that collaborate with Neuraura to offer technology solutions or co-marketing capabilities. This may include companies in sectors such as marketing, public relations, distribution, medtech, pharma and consumer health.
• Future Partners: We reserve the right to share your information with new partners we engage with in the future, including those not yet formally announced or added at the time of your submission. These partners are contractually or operationally affiliated with our platform and are expected to uphold similar confidentiality obligations.
• Service Providers: We may share limited data with third-party vendors who help us operate, maintain, and improve our Services, such as analytics providers, form submission platforms, cloud hosting partners, CRM systems, customer support tools, and email delivery services. These service providers are only permitted to use your data for the specific services they perform for us and are contractually required to protect your information, keep it confidential, and never use it for their own purposes.

Information posted by you

The App includes community threads where members with similar interests can share information and support each other. Posting personal data that can directly identify you or others in such groups is not allowed and violates our rules. Any information you share in these community thread areas is accessible to the MyLoOop community. Please think carefully before posting anything that could identify you in any public forum. Remember, what you post can be seen, disclosed, or collected by others and may be used in ways beyond our control, including contacting you for unauthorized purposes. If you accidentally post personal data and want it removed, email us at mylooop@neuraura.com.

Our app is not intended for children, and we do not knowingly collect personal data from anyone under 13. For legal reasons, residents of the EEA, the UK, or Canada must be at least 16 (or the age of digital consent in their country, which may vary between 13 and 16). If you know of someone under 16 using the Services, please contact us at mylooop@neuraura.com.

We retain subscriber information for as long as necessary to provide services to you, conduct research, and improve our services. If you would like your data removed, you may submit a written request to our team at mylooop@neuraura.com. However, please note that once your information has been shared with third parties, we cannot guarantee its deletion from their systems, though we encourage our partners to respect similar privacy standards. This retention period allows users to restore historical health trends and account information if they choose to reactivate their account within three years.

We will keep your personal data for as long as necessary to provide you with the Services or fulfill the purposes for which it was collected (except as noted below).

You can deactivate your account at any time. We will process your request within one month. In some cases, it will take up to 90 days to completely erase your personal data from our backup systems. If you choose to deactivate your account, MyLoOop will delete your personal data, and it will not be recoverable should you later create another account.

Deleting the App or inactivity

If you delete the App from your device or your account becomes inactive, we will retain your personal data for three years in case you decide to reactivate the Services or reinstall the App. After three years of inactivity, your personal data will be deleted. MyLoOop will apply this standard retention policy. However, you can still request earlier deletion by contacting us at any time.

Limitations

Even after your account is deleted, we may need to retain certain personal data and other information. This is required or permitted by applicable law, like the GDPR, and may include situations like: complying with legal obligations; managing and handling legal claims; and archiving for public interest, scientific or historical research, or statistical purposes.

Neuraura takes commercially reasonable measures to protect your personal and business information from unauthorized access, misuse, or disclosure. While we strive to protect your information, we cannot guarantee absolute security, nor can we ensure that your personal data won't be intercepted during transmission to us. By submitting information, you acknowledge this risk.

We implement reasonable measures to safeguard and protect your information from unauthorized access, use, or disclosure. This includes:

• Encryption: your personal data is encrypted both in transit and at rest;
• Vulnerability scanning: we conduct regular scans and penetration testing;
• Data integrity protection: we have measures in place to protect the integrity of your data;
• Organizational and legal measures: access is limited to what is necessary for operating the Services and hold our employees accountable for any disclosure, unauthorized access, alteration, destruction or misuse of your personal data; and
• Privacy assessments: we conduct regular data protection impact assessments to ensure that the Services comply with privacy principles. We also commit to a privacy audit in the event of MyLoOop's merger or takeover.

Please keep your password secure and don't share it with others. Consider adding a passcode or another extra layer of protection.

If there is a security breach and where required by law, we will either post a notice or try to contact you by email. We will take reasonable steps to fix the issue according to applicable laws and this Privacy Policy. For potential personal data breaches, we may take additional actions, such as logging you out from all the devices, resetting your password and other necessary steps to address the situation.

If you want to report a security incident related to the Services, please email us at mylooop@neuraura.com.

You have rights regarding the personal data we process about you. Only you, or someone legally authorized to act on your behalf, may exercise these rights. We may need to verify your identity or the authorization of anyone acting for you. Your consent is required for us to use your health data and information. You can withdraw this consent at any time by either contacting us or deleting your account through the App.

You have the right to:

• Access the data you have provided to us. You have the right to know what personal data we process about you. You can request access to all your personal data and to receive a copy of it.
• Request corrections or updates to your information. If you think your personal data that we hold is incorrect, you can contact us to request a correction.
• Restriction of processing. You can request that we limit the processing of your personal data in certain circumstances. For example, if you believe your personal data is inaccurate, you can ask us to restrict the processing while we verify it.
• Request deletion of your personal data from our internal systems. You can ask us to delete your personal data at any time. Keep in mind that deleting some personal data might affect your experience with certain features that depend on historic information.
• Withdraw your application or opt out of future communication.
• Objection to the processing of your personal data. You can object to the processing of your personal data, such as if we use it for direct marketing purposes. We will handle your request within one month of receiving it. In some cases, such as for complete deletion of your personal data stored in our backup systems, it may take 90 days. If we need more time to action your request, we will let you know and explain the reason for the delay. Please be aware that once the deletion process begins, it can't be undone. This is because your personal identifiers are immediately unlinked from your App information, which means we can no longer identify you, even if some data temporarily remains in our backup systems.
• Request for data portability. You can request your personal data in a format that lets you easily move, copy or transfer it to third parties for other services or purposes.

To exercise any of these rights, please contact our team at mylooop@neuraura.com

MyLoOop is based in Canada. The personal data we collect is transferred to and processed in Canada, where it is subject to Canadian laws and to other countries (where it follows the laws of those countries). These transfers are usually cloud-based and occur when you use our Services. Please note, the laws in these countries may not offer the same protections as those in your country.

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or any jurisdiction that provides for similar protections under applicable GDPR data protection laws, the following additional terms apply:

a. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Consent – when you voluntarily provide health information or other personal data within the App.
• Legitimate Interests – to evaluate investment opportunities and operate our venture platform efficiently.
• Contractual Necessity – where processing is required to fulfill pre-contractual steps related to your subscription.

b. International Transfers

Your data may be transferred to and processed in countries outside of the EEA or UK, including the United States. By submitting your information, you consent to this transfer. We take reasonable steps to ensure any such transfers comply with applicable data protection laws and that your data remains protected.

c. Your Rights Under GDPR

In addition to the rights listed above, if you are subject to GDPR, you have the right to: Object to or restrict the processing of your data. Lodge a complaint with your local data protection authority. Request data portability, allowing you to obtain and reuse your data across different services. To make any GDPR-related requests, please contact us. We will respond in accordance with applicable law and within the required time frame.

When we transfer personal data outside of these areas, we apply appropriate safeguards to ensure your personal data is protected. You may withdraw your consent to international transfers at any time.

Neuraura reserves the right to modify this Privacy Policy at any time. We will notify you of any changes by updating the "Last Updated" date and, if required, providing additional notice. Continued use of MyLoOoP after any such changes constitutes your acceptance of the new terms.

If you have any questions or concerns about this Privacy Policy or how your information is used, you may contact us at: mylooop@neuraura.com