Effective Date: May 12, 2026
Updated: May 12, 2026
This AI Data Processing, Consent, and Wellness Disclosure Agreement (the “Agreement”) is a legally binding contract between you and 101.plus. Please read it carefully before submitting any information or using our services.
By creating an account, submitting any information, or clicking an acceptance or consent button or checkbox referencing this Agreement, you acknowledge that you have read, understood, and agree to be bound by this Agreement, including the Wellness Only / No Medical Advice Disclosure in Article VIII and the Exhibits.
ArticleI. Plain Language Summary (Non-Contractual Aid)
This Article I is provided for convenience only and does not modify the legal termsin later Articles. In the event of any conflict, the other Articles control.
- What we do 101.plus is an AI technology company. You provide lab results and other health-related information. We use proprietary AI models to analyze that information and generate wellness-oriented insights and recommendations. You receive a report that includes:
- The data you submitted
- Our findings and observations
- General wellness-focused recommendations and ideas to discuss with a licensed healthcare provider
- What we do not do We do not provide medical advice, diagnosis, treatment, prescriptions, or emergency care. Our services and reports are for general wellness, education, and informational purposes only. You must always consult a licensed healthcare provider before acting on any information from us.
- What data we collect We collect:
- Lab results and related health information you or a lab submit
- Health, biomarker, lifestyle, and questionnaire data you submit
- Basic account information (name and email) needed to deliver our services
- How we use your data We use your data to:
- Provide our services, run our AI models, and generate reports
- Comply with legal obligations and protect our rights and users
- Improve our models and services (usually using de-identified data where practicable)
- How we share data We use trusted service providers (cloud hosting, payment processing, support tools) under strict contracts. We do not sell your User Health Data for third-party marketing. We may use de-identified data for research and analytics.
- Your rights Depending on where you live, you may have rights to:
- Access your data
- Correct inaccurate data
- Delete your data
- Opt out of certain uses
- Withdraw consent for future processing
- Security and breaches We use reasonable administrative, technical, and physical safeguards. If a data breach occurs that affects your information, we will notify you as required by law.
- Liability To the extent allowed by law, our liability is limited, and you assume the risks of using our wellness information. You must not use our services instead of proper medical care or emergency services.
Article II. Definitions
For purposes of this Agreement, the following terms have the meanings set forth below:
Article III. Collection and Processing of User Health Data
- Account or User Account means the individualized account you establish to access our services, submit data, and receive reports.
- Affiliate means any entity that directly or indirectly controls, is controlled by, or is under common control with 101.plus.
- AI Models or Proprietary AI Models means our proprietary artificial intelligence algorithms and machine learning models developed using publicly available scientific literature and datasets. These models are not cleared or approved medical devices and are not intended to provide medical diagnoses, treatments, or prescriptions.
- Applicable Jurisdiction means the state or states in which you reside and/or in which your User Health Data is collected, processed, stored, or used (including the State of Arkansas as further described in Exhibit A-1).
- Company, 101.plus, we, us, or our means 101.plus, a [State of Formation] [entity type], and its Affiliates, successors, and permitted assigns.
- Confidential Information means all non-public information disclosed by one party to the other that is designated as confidential or that should reasonably be understood as confidential. With respect to the Company, this includes User Health Data.
- Consent means your affirmative, informed, and voluntary agreement to the collection, processing, use, and disclosure of your Personal Data and User Health Data as described in this Agreement.
- De-Identified Data means data processed to remove direct and indirect identifiers so that it cannot reasonably be used to identify you.
- Findings means analytical observations, patterns, or associations identified by our AI Models.
- Personal Data means any information that identifies, relates to, describes, or can reasonably be linked to a particular individual.
- Recommendations means wellness-focused, educational, and informational suggestions produced by our AI Models. These are not medical advice.
- Report means the document or digital output we providesummarizing your User Health Data, Findings, and Recommendations.
- Sensitive Personal Data means a category of Personal Data that includes health information. User Health Data is treated as Sensitive Personal Data.
- User, you, or your means the individual who creates an Account, submits User Health Data, or uses our services.
- User Health Data or Health Information means any information related to an individual’s past, present, or future physical or mental health or condition, including:
- Laboratory test results, biomarker values, and diagnostic reports
- Vital signs, biometrics, and device-generated health metrics
- Medical history, medications, supplements, and family history
- Lifestyle, nutrition, exercise, sleep, and wellness information
- Genetic data, if voluntarily submitted
- Derived data such as scores or indices computed from the above
Article III. Collection and Processing of User Health Data
1. Categories of Data Collected
1.1 Laboratory and Diagnostic Data
- Blood, urine, saliva, or other lab test values and reference ranges
- Diagnostic imaging reports (if uploaded)
- Other lab or diagnostic reports submitted by you or your lab
1.2 Biometric and Biomarker Data
- Blood pressure, heart rate, heart rate variability
- Height, weight, BMI, and body composition
- Activity, exercise, and sleep metrics from authorized devices
1.3 Medical and Health Profile Information
- Self-reported medical conditions, diagnoses, and procedures
- Current and past medications and supplements
- Allergies and adverse reactions
- Family health history
1.4 Lifestyle, Nutrition, and Behavior
- Dietary patterns and nutrition preferences
- Exercise and physical activity habits
- Sleep quality, duration, and perceived stress
- Substance use information you choose to share
1.5 Genetic Information (if provided) We do not perform genetic testing but may process genetic data you voluntarily submit
1.6 Account and Contact Information
- Name and contact details
- Username, password, and basic profile information
- State of residence
1.7 Account and Contact Information
- Device identifiers, IP addresses, and log information
- Usage data and interactions with our platform
2. Methods and Sources of Collection
- Direct submission by you (web/app uploads or forms)
- Submission by authorized labs or healthcare providers
- Connected third-party health platforms (with your explicit consent) We do not engage in unrelated passive collection of sensitive health data.
3. Purposes of Processing
Primary Purpose: To analyze your data using our AI Models and generate Reports containing Findings and wellness Recommendations.
Secondary Purposes (subject to applicable law):
- Improve service quality and AI Models (typically using de-identified data)
- Account administration and customer support
- Compliance with legal obligations and risk management
- Research and analytics using de-identified data
4. Prohibited Uses
We do not:
- Sell your User Health Data for third-party marketing
- Disclose your data to insurers or employers for underwriting or employment decisions without explicit authorization
- Use your User Health Data for direct marketing of unrelated products without required consents
5. AI Model Characteristics and Limitations
Our AI Models:
- Use statistical and machine learning techniques
- Are trained on publicly available literature and datasets
- Are not cleared or approved medical devices
- Are not individually tailored by a clinician
You acknowledge that AI outputs have limitations and may contain errors. You agree not to rely solely on any Recommendation for medical decision-making and to consult a licensed healthcare provider.
Article IV. User Consent and Choices
- Obtaining Informed Consent
Consent is obtained before you submit User Health Data for the first time, typically through clear affirmative action (e.g., checking “I Agree” or clicking a consent button). - Withdrawal of Consent
You may withdraw consent at any time by closing your account or contacting us. Withdrawal may limit or terminate your access to services, and we may still retain data as required by law. - Jurisdiction-Specific Consents
Depending on your state of residence (including Arkansas), you may receive supplemental notices. By accepting them, you consent to any additional processing described therein.
Article V. Third Parties, Processors, and Disclosures
We engage trusted Third-Party Processors under strict contractual obligations. Wedo not sell your User Health Data.
Data is primarily stored and processed in the United States. Cross-border transfers (if any) are protected by appropriate safeguards.
Article VI. Data Retention, Deletion, and De-Identification
We retain your data only as long as reasonably necessary to provide services,comply with law, or protect legitimate interests. You may request deletion of your Account and associated data. We will honor such requests subject to legal retention requirements. De-identified data may be retained indefinitely for research and improvement.
Article VII. Security and Breach Notification
We implement reasonable technical, administrative, and physical safeguards. In the event of a reportable data breach, we will notify you as required by applicable law.
Article VIII. Wellness Only / No Medical Advice Disclosure
Important: Our services, AI Models, Reports, Findings, and Recommendations are for general wellness, educational, and informational purposes only. They do not constitute medical advice,diagnosis, or treatment.
- No doctor-patient relationship is created by using our services.
- You must consult a licensed healthcare provider before acting on any information or Recommendation.
- Our services are not for emergencies or urgent medical situations. In an emergency, contact emergency services or your healthcare provider immediately.
Arkansas Residents: See Exhibit A-1 for additional Arkansas-specific disclosures.
Article IX. User Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your data. See Exhibit B for how to exercise these rights.
Article X. Limitation of Liability, Disclaimers, and Indemnification
Ourservices are provided “as is.” To the fullest extent permitted by law, wedisclaim all warranties and limit our liability. You assume the risksassociated with using wellness information.
You agree to indemnify us for claims arising from your breach of this Agreement or misuse of our services.
Article XI. HIPAA, Regulatory Status, and Relationship to Other Entities
101.plus is generally not a HIPAA covered entity when you submit data directly. In limited cases where we act as a business associate, a separate agreement governs.
Our services are designed for wellness purposes and are not regulated medical devices.
Article XII. General Provisions - We may update this Agreement with notice. Continued use constitutes acceptance of changes.
- Governing law is the laws of the State of Arkansas, subject to non-waivable rights under your state law.
- This Agreement, together with its Exhibits, constitutes the entire agreement between you and 101.plus
Exhibit A-1: Arkansas-Specific Supplemental Disclosures
- This Exhibit A-1 supplements the Agreement and applies specifically to residents of the State of Arkansas. In the event of any conflict between this Exhibit and the main body of the Agreement, this Exhibit controls with respect to Arkansas residents.
- A-1.1 Applicable Arkansas Law. 101.plus acknowledges that the processing of health-related and personal data of Arkansas residents may be subject to applicable Arkansas law, including the Arkansas Personal Data Protection Act (Ark. Code Ann. § 4-110-101 et seq., as amended) and, where applicable, the Arkansas Health Information Exchange Act. 101.plus processes User Health Data in a manner designed to comply with such laws to the extent they apply to our services.
- A-1.2 Arkansas Wellness Disclosure. 101.plus is not a licensed medical provider in the State of Arkansas and does not hold itself out as such. The services, Reports, Findings, and Recommendations provided by 101.plus are for general wellness, educational, and informational purposes only and do not constitute the practice of medicine, nursing, pharmacy, or any other licensed health care profession under Arkansas law. Nothing in our services creates a provider-patient relationship under Arkansas law. You are encouraged to share any Reports or Recommendations with a licensed Arkansas health care provider before taking any action based on the information provided
- A-1.3 Arkansas Resident Data Rights. To the extent required by applicable Arkansas law, Arkansas residents have the right to: (a) confirm whether 101.plus is processing their Personal Data and access a copy of that data; (b) correct inaccurate Personal Data; (c) delete Personal Data provided to or obtained by 101.plus, subject to legal retention requirements; (d) obtain a portable copy of their Personal Data in a commonly used format; and (e) opt out of the processing of their Personal Data for purposes of targeted advertising or the sale of Personal Data. To exercise any of these rights, see Exhibit B.
- A-1.4 Right to Appeal. If 101.plus declines to act on a rights request submitted by an Arkansas resident, the resident may appeal that decision by submitting a written appeal to the contact information listed in Exhibit B within sixty (60) days of receiving notice of the denial. 101.plus will respond to appeals within sixty (60) days of receipt. If an appeal is denied, the resident may submit a complaint to the Arkansas Attorney General.
Exhibit B: Contact Information and Requests
- This Exhibit B provides contact information for 101.plus and describes how users may submit requests relating to their data, consent, rights, or questions about this Agreement.
- B.1 Contact Information. All privacy-related inquiries, data subject rights requests, consent withdrawals, and general questions regarding this Agreement should be directed to: 101.plus Privacy Team Email: privacy@101.plus Mailing Address: [Street Address], [City, State, ZIP] Phone: [Phone Number]
- B.2 How to Submit a Request. To submit a data access, correction, deletion, portability, opt-out, or consent withdrawal request, you may: (a) log into your Account and use the available self-service privacy tools; or (b) email the 101.plus Privacy Team at the address above with the subject line "Privacy Request" and include your full name, email address associated with your Account, your state of residence, and a description of your request. We will acknowledge receipt of your request within ten (10) business days and respond substantively within forty-five (45) days, unless an extension is required by applicable law.
- B.3 Identity Verification. To protect your data, we are required to verify your identity before processing certain requests. We may ask you to confirm information associated with your Account or provide additional identifying information. We will not use information collected for verification purposes for any other purpose.
- B.4 Authorized Agents. You may designate an authorized agent to submit requests on your behalf. To do so, please provide written authorization signed by you identifying the agent and the scope of their authority, along with sufficient information to verify your identity. We reserve the right to deny requests from agents who do not provide adequate proof of authorization.
Exhibit C: Summary of Certain State Privacy Rights (Illustrative)
- This Exhibit C is provided for informational purposes only and is not legal advice. It offers a general, illustrative summary of certain privacy rights that may be available to residents of selected states under applicable state law. This summary is not exhaustive, may not reflect the most recent legislative or regulatory developments, and does not supersede the requirements of any applicable law. Users should consult their own legal counsel or the relevant state authority for authoritative guidance.
- C.1 Arkansas. Under the Arkansas Personal Data Protection Act (Ark. Code Ann. § 4-110-101 et seq.), Arkansas residents may have the right to access, correct, delete, and obtain a portable copy of their personal data, as well as the right to opt out of the sale of personal data or its use for targeted advertising. Consumers may also appeal a controller's denial of a rights request. These rights are subject to certain exceptions. See Exhibit A-1 and Exhibit B for how to exercise these rights with 101.plus.
- C.2 California. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (Cal. Civ. Code § 1798.100 et seq.), California residents may have the right to know what personal information is collected and how it is used or shared; to delete personal information; to correct inaccurate personal information; to opt out of the sale or sharing of personal information; to limit the use and disclosure of sensitive personal information; and to non-discrimination for exercising these rights. California residents may also designate an authorized agent to make requests on their behalf.
- C.3 Texas. Under the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code § 541.001 et seq.), Texas residents may have the right to access, correct, delete, and obtain a copy of their personal data, and to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. Texas residents may also appeal a denial of a rights request.
- C.4 Virginia. Under the Virginia Consumer Data Protection Act (Va. Code Ann. § 59.1-571 et seq.), Virginia residents may have the right to access, correct, delete, and obtain a copy of personal data, and to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. Virginia residents may appeal a controller's denial of a rights request to the Virginia Attorney General.
- C.5 Colorado. Under the Colorado Privacy Act (Colo. Rev. Stat. § 6-1-1301 et seq.), Colorado residents may have the right to access, correct, delete, and obtain a portable copy of personal data, to opt out of certain processing including targeted advertising and the sale of personal data, and to appeal a denial of a rights request. The Colorado Attorney General and district attorneys may enforce violations of the Act.
- C.6 Note Regarding Health and Sensitive Data. Several states afford heightened protections for health information, biometric data, and other sensitive personal data. In states where such heightened protections apply, 101.plus will process User Health Data in accordance with those additional requirements, including obtaining any required separate consent before processing sensitive data. For state-specific questions, please contact us using the information in Exhibit B.
.png)
