WISEWELL PRIVACY NOTICE

Last Updated: 16 October 2026

This Privacy Notice describes how WisewellWater Inc. (“we”, “us”, “our”) collects, uses and discloses information about you when you use our website (www.wisewell.com), mobile applications, connected devices and Internet of Things (“IoT”) products, services, tools and features, or otherwise interact with us (collectively, the “Services”).

Please read this Privacy Notice carefully. By using any of the Services, you agree to the collection, use and disclosure of your information as described in this Privacy Notice. If you do not understand or agree to this Privacy Notice, please do not use or access the Services.

1. CHANGES TO THIS PRIVACY NOTICE

We may modify this Privacy Notice from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Notice. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us or by posting notice of such changes on the Services) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Notice, please do not continue using or accessing the Services.

2. COLLECTION AND USE OF INFORMATION

When you use or access the Services, we collect certain categories of information about you from a variety of sources. In addition to the specific uses discussed below, we may use this information to provide and improve the Services and to maintain our business relationship, including by enhancing the safety and security of our Services, providing customer support, complying with applicable legal obligations, enforcing any applicable terms of service and protecting our rights and the rights of our employees, users or other individuals.

Information You Provide to Us

Some features of the Services may require you to directly provide certain information, including information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services includes:

• Contact information, such as your name, email address, phone number, and delivery address. We use this information to create and maintain your account and provide the Services and to communicate with you (including to tell you about products or services that may be of interest to you).
• Account and profile information, such as username, password, date of birth, gender, security questions that you select and the answers you provide, and other information you add to your account or profile. We use this information to provide the Services and to create, maintain and secure your account with us. If you choose to register an account, you are responsible for keeping your account credentials safe. We recommend you do not share your access details with anyone else. If you believe your account has been compromised, please contact us immediately.
• Payment and subscription information, such as bank account, credit or debit card information and billing address, which is collected on our behalf by our payment processor, and information about your subscription tier and transaction history. We use this information to process your payment and provide the Services and to provide you with different account features and options.
• Identity verification information, such as your driver’s license, state identification card, passport number, or other government identifiers, which are collected on our behalf by our identity verification provider. We use this information to confirm your identity for fraud detection purposes.
• User-content, such as reviews, messages, photos, and recordings, submitted by you through our websites or mobile applications. We or others may store, display, reproduce, publish or otherwise use such content, and may or may not attribute it to you. Others may also have access to such content and may have the ability to share it with third parties. If you choose to submit content to any public area of the Services, your content will be considered “public” and will be accessible by anyone, including us.
• Customer service information, such as your inquiries, complaints, feedback and troubleshooting information, and your communications with us by email, phone, live chat, WhatsApp or other support channels, including recordings of telephone calls. We use this information to respond to you, provide support, and improve the Services, and we may monitor and record telephone calls for training, quality assurance and record-keeping purposes.
• Any other information you choose to provide us or otherwise include in communications with us, for example, when you contact our customer experience team or respond to a survey.

Information Collected Automatically

We and third parties also automatically collect certain information about your interactions with the Services, including through cookies, pixels or other tracking technologies (“Tracking Technologies”). This information is collected and used to tailor your experience with the Services, provide you with offers or promotions, run analytics, and better understand user interactions with the Services. Such information includes:

• Device information, such as device type, hardware model, mobile application version, operating system, unique device identifier, network name, and internet protocol (IP) address.
• Connected device and IoT information, such as device registration, serial number, machine ID, connectivity status, firmware version, device usage, volume of water dispensed, water quality and performance telemetry, fault, leak and diagnostic data, filter and consumable status, product location, hydration goals, and related information generated or provided through use of our connected device and IoT products and mobile applications. We use this information to deliver, support and improve the Services and our products, monitor product safety and performance, deliver firmware and security updates, provide remote diagnostics and maintenance, dispatch replacement filters, and validate warranty claims.
• Location information, such as approximate location based on IP address and, if you choose to provide it, your precise geolocation.
• Other information regarding your interaction with the Services, such as browser type, log data, date and time stamps, referring URLs, clickstream data (e.g., page requests, page views, how much time is spent on a page, features used, content viewed or interacted with, text entered and navigation paths, etc.), session information, log and diagnostic information, and interactions with our marketing emails, text messages, and ad impressions.

For further information on the use of Tracking Technologies and your choices, see the section below, Cookies and Other Tracking Technologies.

Information Collected from Other Sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us. Such information includes:

• Information we receive from our payment, subscription and e-commerce providers, such as billing information and payment card information, which we use to process your orders and manage your subscription and billing.
• Information we receive from delivery, logistics and fulfillment providers, such as your delivery address and other delivery information, which we use to coordinate and complete delivery of our products and any returns or pickups.
• Information we receive directly from third-party social media and review platforms, such as when you interact with us on Facebook, Instagram, LinkedIn, or Google Reviews, including publicly available profile information, comments, reviews, ratings, and messages, which we use to communicate with you and personalize our Services.
• Information we receive from advertising and analytics platforms, such as information about your interactions with our advertisements, campaigns, websites and digital content, including campaign attribution and engagement information, which we use to better customize advertising and marketing to you.
• Information we receive from our business customers, partners and referral or promotional partners, such as contact and professional information about employees, representatives and points of contact provided in connection with a business relationship, and contact or campaign information provided in connection with referrals, co-branded initiatives and promotions, which we use to establish and manage the relevant relationship.

Any information we receive from outside sources will be treated in accordance with this Privacy Notice. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. For more information, see the section below, Third-Party Websites and Materials.

Deidentified Information

Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (“deidentified information”) (or we may collect information that has already been deidentified/anonymized), and we may use deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

3. COOKIES AND OTHER TRACKING TECHNOLOGIES

As described above, we and third parties use Tracking Technologies to collect certain information about your interactions with the Services. Most browsers accept Tracking Technologies automatically, but you may be able to control the way in which your devices permit the use of certain Tracking Technologies. If you so choose, you may block or delete certain Tracking Technologies from your browser; however, blocking or deleting cookies may cause some of the Services, including login features and general functionality, to work incorrectly.

Your browser settings may allow you to transmit a signal or other mechanism for exercising your choice regarding the collection or processing of your information when you visit various websites. Our website is not currently designed to respond to such signals.

You may also opt-out of the collection and use of information for interest-based advertising by advertisers that are part of certain industry alliances, including through tools offered by the Network Advertising Initiative, the Digital Advertising Alliance or the European Interactive Digital Advertising Alliance, by clicking the links provided.

4. DISCLOSURE OF YOUR INFORMATION

We may disclose your information for legitimate purposes subject to this Privacy Notice, including:

• Vendors or other service providers who help us provide the Services, including for system administration, cloud storage, security, customer relationship management, customer support, marketing communications, analytics, payment networks, payment processing, e-commerce and order management, subscription management, shipping logistics management, connected device and IoT platform services, fraud prevention and verification, accounting and invoicing, debt collection, and the deployment of Tracking Technologies.
• Our affiliates or others within our corporate group.
• Advertising, analytics and social media partners, who may collect or receive information about your interactions with our websites, applications, emails and advertisements through Tracking Technologies and, where enabled, hashed contact information, and who use this information to measure, attribute and deliver advertising, including targeted advertising on other platforms.
• Professional advisors, such as auditors, law firms or accounting firms.
• Third parties in connection with or anticipation of an asset sale, merger, acquisition, or other business transaction, including in the context of a bankruptcy proceeding or other restructuring matter.
• For legal and security reasons and to protect our services and business, including to cooperate with law enforcement, judicial orders and regulatory inquiries, to detect and prevent against fraudulent or illegal activity, to exercise or defend legal claims and to ensure the safety and security of our business, employees and users, and to enforce our terms or other agreements.

We do not disclose your personal information to third parties for the third parties’ own direct marketing purposes, unless you have affirmatively agreed to such disclosure.

5. MARKETING COMMUNICATIONS AND YOUR CHOICES

Where you have consented or as otherwise permitted by law, we may contact you by email, telephone, text message or third-party messaging services such as WhatsApp, including for marketing purposes, and including calls and messages made using an automatic telephone dialing system or an artificial, prerecorded or AI-generated voice, as described in our Terms of Service. You are not required to consent to marketing calls or messages as a condition of purchase. You may opt out of marketing text messages at any time by replying “STOP” to any message, opt out of marketing emails by following the unsubscribe instructions in those emails, or opt out of any marketing communications by contacting us at support@wisewell.com. Even if you opt out of marketing communications, we may still send you transactional, service-related, or administrative communications, such as messages about your subscription, deliveries, payments, filter replacements and your account.

6. THIRD-PARTY WEBSITES AND MATERIALS

We may provide links to third-party websites or platforms and display or make available content, data, applications or materials from third parties. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms, or the accuracy, completeness or reliability of third-party materials. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

7. CHILDREN’S PRIVACY

Our Services are not intended for children or individuals under the age of 18, and we do not seek or knowingly collect any personal information about children. If we become aware that we have unknowingly collected information about a child, in particular any child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the below information to request that it be deleted.

8. DATA SECURITY AND RETENTION

We have implemented commercially reasonable security measures designed to protect your personal information from unauthorized access, use or disclosure. However, despite our efforts to protect your information, no security measures are impenetrable, and we cannot guarantee “perfect security.” Any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

We retain your information for as long as is reasonably necessary for the purposes specified in this Privacy Notice. When determining the length of time to retain your information, we consider various criteria, including whether we need the information to continue to provide you the Services, resolve a dispute, enforce our contractual agreements, prevent harm, promote safety, security and integrity or protect ourselves, including our rights, property or products.

9. DATA TRANSFERS

If you are using the Services from outside the United States, please be aware that the information we collect from you may be transferred to, stored and processed in the United States or other countries outside your country of residence.

10. HOW TO CONTACT US

Should you have any questions about our privacy practices or this Privacy Notice, please email us at support@wisewell.com, call us at 786-628-9194, or write to us at WisewellWater Inc., 447 Broadway, 2nd Floor, New York, NY 10013.