Information Security and Privacy Policy Statement

Following its strategic business objectives, Healthy.io management and all employees are committed to the Information Security Management System and Privacy Information Management System (ISMS), a policy that enables overseeing Security and Privacy and Information Management Systems.

To that end, Healthy.io endeavors to:

• Develop and implement both internal and external measurable policies and processes while protecting all of Healthy.io’s information assets from threats.

• Foster customer confidence by enacting well-known security standards and best practices to foster customer confidence.

• Continually improve the Information Security and Privacy Information Management System by establishing and regularly reviewing measurable security objectives at relevant functions and organizational levels.

• Commit to complying with business and legal regulatory requirements and contractual security obligations.

• Provide systems for protection against unauthorized access.

• Ensure confidentiality, integrity, and availability of customers’ data.

• Develop, implement, and test Business Continuity Plans.

• Create mechanisms to identify and review the risk and impact of breaches in protected information.

• Communicate all relevant security and privacy policies to employees and other interested parties as applicable.

Healthy.io management is committed to the Information Security and Privacy Information Management System. It ensures that it communicates this policy and that it is understood, implemented, and maintained at all levels of Healthy.io. It also reviews the policy regularly for continuous sustainability.