B-Healthy Platform Mobile App Instance - Version 1.0, May 2024

Privacy and security are of utmost importance to BlueSkeye AI and we strive to ensure that our technical and organisational measures in place respect your data protection rights. Wherever possible we minimise the amount of personal data we
collect. Where data is collected it is with informed consent.

This Privacy Policy describes how we collect, manage, process and store personal data in connection with an instance of the B-Healthy Platform App “My Fertility Journey with Aria”, ‘Mobile App’ hereafter, for what purposes, and your rights in relation to your personal data.

Definitions and interpretation

In this Privacy Policy, the following definitions are used:

Data Collectively all information, including Personal Data (as defined in the Data Protection Laws), that you submit to, or we otherwise collect from, BlueSkeye AI
via the Mobile App.

Data Protection Laws
Any applicable laws and regulations relating to the processing of Personal Data and privacy as may be applicable from time to time, which at the date of
publication means the Data Protection Act 2018 and the UK GDPR.

UK GDPR
Has the meaning given to it in section 3(10) (as supplemented by section 205(4)) of the Data Protection Act 2018.

BLUESKEYE, we or us
BlueSkeye AI Ltd, a company incorporated in England and Wales with registered number 11953581 whose
registered office is at The Ingenuity Centre, Triumph Road, Nottingham, England, NG7 2TU.

Sponsor
Aria Fertility Clinic

App
Means the Mobile App, as defined above.

About BLUESKEYE

1. For purposes of the applicable Data Protection Laws, and in relation to the Data, BLUESKEYE is the "data controller". This means that BLUESKEYE
determines the purpose for which, and the manner in which, your Data is processed. The Sponsor is a ‘'data controller’' for purposes of the same Data Protection Laws and in respect of their use of the Data in connection with the Study.

2. The BLUESKEYE Data Protection Officer is Dr Anthony Brown. Any queries regarding Data Protection issues should be addressed to them at
dataprotection@blueskeye.com

About the Study

3. The Study is a research and development activity undertaken by the Sponsor, who has contracted BLUESKEYE to collect (part of) the data for that research. You will receive a participant information sheet that outlines the purpose of the Study.

Data collected

4. As part of the "onboarding" process for the Study, the Mobile App will require you to complete a personality questionnaire (BFI-10). The Mobile App will also record your face and speech as you read out a short passage of text; this video and audio is not sent to our servers for ongoing storage. However anonymous speech and facial biomarkers are extracted from the video and will be used later when you undertake a task to assess your mood.

5. Throughout the period of your participation in the Study, the Mobile App will process video recordings of you talking on camera. The video of these recordings will not be sent to our servers for ongoing storage and nor will they be seen by anyone involved in the study (including the Sponsor). However, data extracted from these recordings will be sent to BLUESKEYE’s servers and shared with staff at the Sponsor.

6. Throughout the period of your participation in the Study, the Mobile App will gather self-reported feedback on your mood. This data will be sent to
BLUESKEYE’s servers and shared with staff at the Sponsor.

7. Some of the Data we collect may constitute "special category personal data", in the form of information relating to your health.

Why we collect your information

8. BlueSkeye collects your information in order to undertake the Study. The purpose of the Study is set out in the Participant Information Sheet.

How do we lawfully use your data?

9. We rely on the following lawful basis/bases to process Data:
Article 6 (1) (a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes, and;
Article 9 (2) (a) the data subject has given explicit consent to the processing of those personal data for one or more specified purposes.

10. As set out further in the section on your rights below, you have the right to withdraw your consent at any time

How we collect Data

We collect Data in the following ways:

a. data is given to us by you; and
b. data is collected automatically.

Data that is collected by us

12. BLUESKEYE will collect your Data through:
a. Responses to self-report questionnaires;
b. Behavioural insights derived from the video taken when using the App;
and
c. Behavioural insights derived from the audio taken when using the App

in all cases, in accordance with this Privacy Policy.

13. For the avoidance of doubt we do not keep or otherwise retain the video or audio taken during your use of the Mobile App; we only retain and otherwise
use (as described in this Privacy Policy) the behavioural insights and your response to the self-reported mood questions.

Data that is collected automatically

14. To the extent that you access the App, we automatically collect some information about your App usage. The data collected automatically is
high-level generalised/anonymised data which informs us when the App is used and what screens are viewed and when.

Who do we share data with?

15. We will, with your consent, share your Data with the Sponsor who will be responsible for ensuring that their use of your Data complies with Data Protection Laws.

16. We will also share Data with trusted third-party service providers to facilitate a range of optional features in the App, including anonymous usage reporting. You may decide whether to opt in to these features. If the App crashes, a crash report will be generated and may be sent to a third-party service
provider, who will process this information on our behalf to help fix bugs in the App.

17. To the extent that Personal Data is shared for these purposes, we rely on the following lawful basis/bases to process Data:

"Article 6(1)(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child."

Keeping Data secure

18. The transfer of your Data from your smartphone to BLUESKEYE’s data servers will be secured through encryption and the data servers themselves will be
password protected and will be accessible only to the research team members. Data on these servers will also be encrypted at rest.

19. Your Data will be held at BLUESKEYE secure storage on BLUESKEYE premises and Google cloud services. All your data will be stored in encrypted files and access will be restricted to include only those who are directly involved with the research.

20. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised
access to your Data, please let us know immediately by contacting us via this e-mail address: dataprotection@blueskeye.com.

Data retention

21. All Data recorded during the usage of App for purposes directly connected with research (including audio-visual data) will be stored for a minimum of 7
years, but can be retained for longer periods of time if required; its retention will be reviewed at the end of this research project and then every 2 years
after the end of the project.

22. Other Data not directly connected with research (such as contact details) will be stored only for 6-12 months after the study has ended, unless you have
consented to be contacted for similar future studies in which case your personal data will be retained for more than 3 years.

Your rights

23. You have the following rights in relation to your Data:

24. Right to access - the right to request copies of the information we hold about you at any time. If we provide you with access to the information we hold
about you, we will not charge you for this, unless your request is "manifestly unfounded or excessive." Where we are legally permitted to do so, we may
refuse your request. If we refuse your request, we will tell you the reasons why.

a. Right to correct - the right to have your Data rectified if it is inaccurate or incomplete.
b. Right to restrict our use of your Data - the right to "block" us from using your Data or limit the way in which we can use it.
c. Right to data portability - the right to request that we move, copy or transfer your Data.
d. Right to object - the right to object to our use of your Data including where we use it for our legitimate interests.

25. You have the right to withdraw your consent at any time, using the contact details in paragraph 2 above, and we will have to stop any further use of your
Data unless there is another lawful basis enabling us to process it further.

Any withdrawal of consent does not affect processing of your Data prior to the date on which it was withdrawn.

26. To make enquiries or to exercise any of your rights set out above, please contact us via this e-mail address: dataprotection@blueskeye.com

27.Please note that if you have any queries regarding the Sponsor's use of your Data, and/or to exercise your rights in respect of their use of your Data, then
you should contact the Sponsor directly.

28. If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner's Office (ICO). The ICO's contact details can be found on their website at
Information Commissioner's Office (ICO)

29. It is important that the Data we hold about you is accurate and current. Please keep us informed if your Data changes during the period for which we hold it.

General

30. You may not transfer any of your rights under this Privacy Policy to any other person. We may transfer our rights under this Privacy Policy where we reasonably believe your rights will not be affected.

31. If any court or competent authority finds that any provision of this Privacy Policy (or part of any provision) is invalid, illegal or unenforceable, that
provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this
Privacy Policy will not be affected.

32. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

33. This Agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.

Changes to this Privacy Policy

34. BLUESKEYE reserves the right to change this Privacy Policy as we may deem necessary from time to time or as may be required by law. Updated versions of this Privacy Policy will be posted on the App from time to time, and you are deemed to have accepted the terms of the Privacy Policy on your first use of the App following the alterations. If you are dissatisfied with any aspect of our Privacy Notice, please contact the Data Protection Officer.