consumer health data privacy notice.

Last updated: July 22, 2025

This Consumer Health Data Privacy Notice ("Notice") describes the practices of KENAI Therapeutics, Inc. and its affiliates ("KENAI, "we,” “us,” or “our”) for collecting, using, disclosing, and processing consumer health data, as defined in the Washington My Health My Data Act and other similar state laws.

This Notice supplements our Privacy Policy and applies to the websites and other services that link to this Notice.

Please read this Notice carefully to understand our policies and practices regarding your consumer health data and how we will treat it. If you do not agree with our policies and practices described in this Notice, please do not use the sites, products, applications, platforms, or other services that link to this Policy, and do not provide us with your consumer health data.

We may provide additional privacy notices to individuals at the time we collect their data.  For example, if we conduct a clinical trial, we provide a specific privacy notice to clinical trial participants that describes our privacy practices in connection with conducting the clinical trial.  

Consumer Health Data We Collect

We collect and use different types of consumer health data from and about you, including:

  • Your health conditions, treatments, diseases, diagnoses, diagnostic testing, or medication;

  • Genetic information;

  • Information that could identify your attempt to seek health care services;

  • Self-report health of medical information; and

  • Any inferences of the above categories derived, extrapolated, or inferred from non-health information.

How We Use Consumer Health Data

In general, we collect consumer health data as necessary to provide our Services, operate our business, and provide information that you request from us.  This may include the following:

  • Fulfilling the purposes for which you provided the data or that were described when it was collected.

  • Performing the services that you request from us and responding to your questions or requests for information.

  • Notifying you about changes and updates to our sites, applications, products, or services.

  • Undertaking activities to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted consumer health data or that otherwise threaten to compromise the performance, security, or integrity of our business.

  • Recordkeeping and auditing.

  • Complying with our legal obligations and risk management, audit, investigations and reporting, and other legal and compliance reasons.

  • Our internal research and product or service design and development.

  • Conduct research, analytics, and monitor and analyze trends.

  • Contact you and respond to your inquiries.

Additionally, we may deidentify or anonymize your consumer health data so that it cannot reasonably be reidentified by us or by a third-party, and we may use this deidentified data for any reason permitted by applicable law. If we deidentify information that was originally based on your consumer health data, we store and use that information in deidentified form and will not attempt to reidentify the data, except as otherwise permitted under applicable law.

Consumer Health Data Sources

We collect consumer health data from the following sources:

  • Directly from you, such as when you interact with us or our services.

  • Your device when you visit or interact with our websites, applications, or services, including through cookies, web beacons, and similar technologies that automatically send us information when you browse, use, visit, or otherwise interact with our websites or services.

How We Share Consumer Health Data

We do not sell your consumer health data.

We may share or disclose your consumer health data to processors, service providers, and contractors that help us provide products and services to you. Such third parties are permitted to use your consumer health data to provide services to us and in accordance with applicable law.

We may also disclose your consumer health data as permitted by applicable law, including:

  • With your consent.

  • To comply with a legal requirement, law, subpoena, judicial proceeding, court order, governmental request, or legal process.

  • To prevent, detect, protect from, or respond to security incidents, identity theft, fraud, harassment, or malicious or deceptive activities.

  • In connection with the sale, purchase, merger, asset sale, financing, reorganization, liquidation or dissolution of KENAI, including the evaluation thereof;

  • To investigate, report, or take legal action to protect our rights, property, and safety and the rights, property, and safety of others.

  • To protect your or others' vital interests, including health and safety.

Your Privacy Rights

You have the following rights with respect to your consumer health data:

  • Right to confirm and access your consumer health data, including a list of all third parties and affiliates with which we have shared your consumer health data. By exercising this right, you can confirm whether we are collecting or sharing your consumer health data and request a list of third parties with whom we have shared your consumer health data, and an email address or other online mechanism that you may use to contact them. Note that we do not sell your consumer health data.

  • Right to correct your consumer health data.

  • Right to withdraw consent from collection or sharing of your consumer health data.

  • Right to delete your consumer health data. 

You may submit a request to exercise your privacy rights by emailing us at jhonggonzalez@kenaitx.com. We may require additional information to verify your identity before acting on your request.  We may deny requests that we cannot verify, or as permitted by applicable law.  We will respond to your requests within timelines permitted by applicable law.

You may appeal our refusal to take action on your privacy rights request.  To make an appeal please jhonggonzalez@kenaitx.com. 

Changes to this Notice

We may update this Notice from time to time, including in response to changing laws, regulations, and industry practices. We reserve the right to modify, add or remove portions of this Notice at our discretion. If we make changes to this Notice, we will post the updated version on this page. If we make material changes to this Notice, we will provide notice in writing (including by email) where required under applicable law.

 

Contact Us

If you have any questions about this Notice or data protection at Kenai, you can contact us at jhonggonzalez@kenaitx.com.