WEARABLE DATA SHARING CONSENT

1 Connection and data covered

You authorize the provider you select to transmit the data categories you approve to Viction. Connections may operate through the provider's platform, a health data hub, or an integration service acting for Viction. Only supported and approved permissions apply; this form does not mean every listed device or metric is available.

Depending on your selections, data may include activity type, steps, distance, duration, pace, speed, elevation, calories, exercise intensity, training load and estimated VO2 max; heart rate, resting heart rate, heart rate variability, respiratory rate, blood oxygen and skin temperature; sleep timing, duration and stages; and provider-generated stress, recovery, readiness and activity scores. Associated timestamps, units, device details, account identifiers and connection credentials may be processed to match and synchronize your records.

Precise GPS routes, reproductive or menstrual information, and other sensitive categories beyond those above are excluded unless separately described and expressly approved. This consent provides read access only; writing data back to a connected account requires separate permission.

Before you connect, the app and provider permission screens identify your selected provider, requested data categories, available historical import period and whether ongoing synchronization is requested. Your approved selections define this consent. Approved future records may sync automatically in the background until you withdraw permission. A provider may offer bundled permissions; review them before approving.

2 How wearable and biomarker data work together

Viction uses your approved wearable data to display trends, calculate fitness and performance scores, refine your fitness identity, and personalize educational insights. When biomarker results are available in your account and separately authorized for these features, Viction may analyze them together with wearable metrics and relevant profile information, such as age, sex, goals and fitness identity.

Combined analysis may compare activity, sleep and recovery patterns with biomarker values and trends to generate category scores, overall performance readiness scores, and education about training, recovery, nutrition and supplements. For example, sleep and training trends may provide context alongside biomarker results when presenting recovery insights. These outputs are estimates; they do not establish that one measurement caused another or that a laboratory result describes your current state.

AI and other automated methods may produce these scores and insights. Combined results can reveal sensitive information beyond an individual measurement and receive the same protections described here. This consent authorizes the combined use described above, but does not authorize laboratory testing, specimen collection, a new medical-record connection, or access to biomarker results you have not separately authorized. Connecting a wearable does not send biomarker results back to its provider.

Viction also processes data to synchronize records, troubleshoot and secure these features. This consent does not authorize sale, targeted advertising, research participation, or training or improving AI models using your identifiable wearable or combined biomarker data. Any such additional use requiring consent must be presented separately.

3 Who may receive the data

Access is limited to authorized Viction personnel and service providers performing integration, hosting, storage, security, support and the analysis described above under contractual restrictions. These providers process only the data needed to perform their services for Viction. This permission does not authorize them to use your wearable data for their own advertising or model training.

Connecting a device does not make your data public or authorize disclosure to employers, insurers, coaches, other users or independent partners. Optional disclosure to a recipient you choose requires the separate selection in the optional consent section. Disclosures required by applicable law may occur independently of consent.

4 Your choices and withdrawal

Connection is voluntary. Declining or withdrawing may limit features that depend on your data; other available features remain accessible. Revoke provider access through its connected-app or health-data settings, or submit a request through Viction's in-app support channel. Specify whether to stop collection, combined analysis, optional sharing, or all three. You may stop optional sharing without disconnecting your wearable.

Revoking provider access stops new imports through that connection. To also stop further use of previously imported wearable data in combined biomarker analysis, include that instruction in your withdrawal request to Viction. Withdrawal does not reverse processing already lawfully completed or automatically delete stored records and scores. Request deletion separately if desired. Viction will apply requests within applicable legal time limits; affected scores and insights may become unavailable or less complete.

5 Retention and privacy requests

Viction retains imported metrics and derived scores only as long as reasonably necessary to provide your requested features, maintain your authorized performance history, or meet applicable legal obligations. When those purposes end, Viction deletes or de-identifies the data, subject to lawful retention exceptions. After withdrawal, retained data will not be used for new consent-dependent processing without a valid basis. Submit access, correction, export or deletion requests through Viction's in-app support channel. Viction may verify your identity and will respond within applicable legal time limits. Viction's HIPAA and Privacy Statement describes additional privacy rights and protections.

6 Important limitations

Wearable records and calculated scores may be incomplete, delayed or inaccurate. Viction's fitness and performance insights are educational and do not provide diagnosis, treatment or emergency monitoring. Consumer wearable data is not automatically protected by HIPAA; HIPAA applies only where the parties and services fall within its scope. This form is not a HIPAA authorization for release of clinical records.

Electronic transmission and storage carry risks, including unauthorized access. The connected provider and any independent recipient apply their own privacy practices to the data they hold. Read those notices before connecting or sharing. This consent does not waive your privacy rights or authorize broader purposes through a later policy change; additional consent will be sought where required.

7 In app acknowledgment and consent

By selecting "Agree and Connect," I consent to my selected provider sharing approved wearable data with Viction and to Viction collecting, storing and using it as described, including analysis with biomarker results separately authorized for these features. I understand the historical and ongoing access shown before connection, how to withdraw, and that I control the account I am connecting.

Consent requires your affirmative action. Viewing this notice, continuing to use the app or leaving a screen open does not give consent. Select "Not Now" to decline. A connection starts only after this consent and any required provider permissions are approved.

8 Optional consent to share with a separate recipient

Additional sharing is optional and requires a separate action for each recipient. Before requesting consent, the app identifies the recipient, its category and privacy contact, the data, purpose, date range, frequency and duration. Wearable-only sharing does not include biomarker results or combined scores unless they are explicitly listed and approved. Combined scores may reveal information about both sources even when underlying results are not shared.

By selecting "Agree and Share" on that separate screen, I authorize only the disclosure shown to the named recipient for the stated purpose and duration. I may withdraw future sharing without disconnecting my wearable. Withdrawal does not recall copies already received; I may request deletion from the recipient. Selecting "Not Now" leaves optional sharing disabled and does not prevent device connection.

Your electronic consent is associated with your Viction account and records the consent version, date and time, approved connection or recipient, and permissions selected. You do not need to print or sign this document.