Supplemental State Privacy Rights Notice

Last Updated: November 9, 2025

This Supplemental State Privacy Rights Notice (the “Supplemental Notice”) supplements the general Privacy Policy (the “Privacy Policy”) of JinIX Cosmos Inc., a Delaware corporation (the Company, we, our, or us). It applies to residents of states, other than California, that have enacted comprehensive consumer privacy laws, including but not limited to Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virginia (collectively, the “Applicable States”).

This Supplemental Notice describes how the Company collects, uses, and discloses personal information about residents of Applicable States and explains their privacy rights under those state laws. To the extent there is any conflict between this Supplemental Notice and our general Privacy Policy, this Supplemental Notice controls with respect to residents of those states.

1. Definitions

Capitalized terms used but not defined herein shall have the meanings ascribed thereto in the Privacy Policy.

2. Overview

We are committed to transparency and privacy. When you use our Services we collect only the minimum information necessary to operate securely. Identifiable health data are encrypted and deidentified immediately using our dual-key system. Once encrypted, we cannot link information back to you personally unless you voluntarily re-identify yourself.

3. Depending on your state of residence, you may have the right to:

  • confirm whether we process your personal data;
  • access and obtain a copy of your personal data;
  • correct inaccuracies in your personal data;
  • request deletion of your personal data;
  • opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or certain types of profiling; and
  • appeal a denial of your privacy request (where applicable law provides an appeal process).

4. Submitting a Request

You may exercise your rights by contacting us at contact@jinix.io. You may also designate an authorized agent to make a request on your behalf by providing written authorization. We will verify your identity (or your authorized agent’s authority) before processing any request, which may include confirming certain personal information previously provided to us. Verification is conducted solely to protect your privacy and prevent unauthorized access or deletion requests. We will never request sensitive identifiers such as your full Social Security number, driver’s license number, or financial account information as part of the verification process. We will respond to your request within the time period required by applicable law.

5. Automated Decision-Making and AI

Our AI tools analyze deidentified data to provide insights that may help users understand rare conditions or health patterns. These AI outputs are informational only and are not intended as medical advice. You may request information about automated decision-making processes by contacting us.

6. Deidentified and Aggregated Data

Data encrypted and deidentified under our dual-key system are no longer considered personal information under applicable state privacy laws. We may use such deidentified or aggregated data for research, analytics, and development purposes, provided they cannot reasonably identify any individual.

7. Global Privacy Control (GPC) Signals

We recognize and honor browser-based Global Privacy Control (GPC) signals where legally required. When detected, we will treat such signals as an opt-out request from sales or sharing of personal information.

8. Contact Us

For more information about this Statement or your privacy rights, please contact us at contact@jinix.io.

9. Law Enforcement and Safety Exception

We may disclose information when required by law or when necessary to prevent an imminent risk of death, serious physical injury, or other grave harm, consistent with our Privacy Policy. We will limit any disclosure to the minimum amount of information reasonably necessary to address the emergency.

10. Governing Law and Dispute Resolution

This Supplemental Notice is governed by the same Governing Law and Dispute Resolution provisions as set forth in the Company’s Terms of Use (the “Terms of Use”), including the arbitration clause designating New York, NY as the arbitration venue.

11. Incorporation

This Supplemental Notice forms part of and is incorporated into our Privacy Policy and Terms of Use.