Riot IQ Washington My Health My Data Act Notice

Last Modified: August 26, 2025

1. Introduction

This Washington My Health My Data Act Notice (“MHMD Notice”) is provided by PSYCH LABS, LLC (“Riot IQ”, “we”, “our”, or “us”) in accordance with the Washington My Health My Data Act (“MHMD”) and sets out how Riot IQ collects, uses and discloses Consumer Health Data (as defined in the MHMD) that we collect from you when you use our Services.

This MHMD Notice applies to you (“you” or “your”) and anyone who accesses or uses our any iteration of our online Reasoning and Intelligence Online Test or its accompanying data visualization and analytical utilities (“RIOT Test(s)”) through our Website(s), and any related software, platforms, and applications (collectively, the “Services”); whether as a guest or registered user (“User(s)”). Users include: (i) individuals who access or complete a RIOT Test, either by self-registering through the Website or on behalf of a Test Administrator (“Examinee(s)”); and (ii) healthcare providers, researchers, clinicians, or other professionals who administer a RIOT Test (“Test Administrators”).

This MHMD Notice is incorporated into our Privacy Notice, which is available at https://www.riotiq.com/privacy-policy and our Terms of Service, which are available at https://www.riotiq.com/terms-of-service.

This MHMD Notice may change from time to time (see Changes to This MHMD Notice). Your continued access of our Services after we make changes is deemed to be acceptance of those changes, so please check the Last Modified Date at the top of this Notice, to ensure that you are viewing the most current version of this Notice.

2. Consumer Health Data We Collect

Under the MHMD, “Consumer Health Data” means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status. Consumer Health Data does not include publicly available information or deidentified data.

We collect Consumer Health Data from you in the following ways:

Demographic Information:
Date of birth. Biological sex. Country of birth. Country and/or State of residence. Native language(s). Race(s). Neurological Condition(s). Occupation. Education level. Educational program(s).

How / When Consumer Health Data is Collected:
You input this information when filling out a questionnaire or a webform on our Services.

Purpose for Consumer Health Data Collection:
To provide the Services requested by you; Demographic Information is used to calculate norms and provide you with your RIOT Test results. For internal analysis and research to help us provide and improve our Services, which includes product refinement, fundamental and applied psychological inquiry, and the research and development of novel offerings.

RIOT Test Information:
Test responses. Test results, including psychometric data and analysis of Test responses.

How / When Consumer Health Data is Collected:
You input this information when you complete a Test. Test Results are provided after completion of a Test.

Purpose for Consumer Health Data Collection:
To provide the Services requested by you. For internal analysis and research to help us improve our Services, which includes product refinement, fundamental and applied psychological inquiry, and the research and development of novel offerings. To comply with applicable legal or regulatory requirements and law enforcement requests. To comply with and enforce our Terms of Service.

3. How We Use Consumer Health Data

We use Consumer Health Data for the following purposes:

Service Provision: To provide the Services requested by you, including administering RIOT Tests and providing test results and analysis.

Research and Development: For internal analysis and research to help us provide and improve our Services, which includes product refinement, fundamental and applied psychological inquiry, and the research and development of novel offerings.

Legal Compliance: To comply with applicable legal or regulatory requirements and law enforcement requests. To comply with and enforce our Terms of Service.

Communication: To communicate with you about the Services you have requested and to provide you with customer support.

4. How We Share Consumer Health Data

We may share Consumer Health Data with the following categories of third parties:

Test Administrators: If you are an Examinee completing a RIOT Test administered by a Test Administrator, we will disclose your Consumer Health Data to the applicable Test Administrator(s) for the purpose of administering the Test, reviewing results, and providing related services.

Service Providers: We employ third-party companies to provide Services on our behalf, to perform Services-related operations such as website maintenance, database management, web analytics, payment processing, or fraud detection. These service providers are contractually obligated to protect your Consumer Health Data and use it only for the purposes we specify.

Business Partners: We may disclose certain Consumer Health Data to our business partners to support joint offerings, marketing, research, and analytics activities. Under some jurisdictions, you may have the right to opt-out of these disclosures at any time by following the instructions in the Your Rights Regarding Consumer Health Data section below.

Legal Requirements: We may share Consumer Health Data with government agencies as required by law in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

With your Consent: We may share Consumer Health Data with your explicit consent for specific purposes.

5. Your Rights Regarding Consumer Health Data

You have the following rights regarding your Consumer Health Data:

Right to Know: You have the right to know what Consumer Health Data we have collected about you, how we have used it, and with whom we have shared it.

Right to Access: You have the right to access your Consumer Health Data that we have collected.

Right to Correct: You have the right to correct inaccurate Consumer Health Data.

Right to Delete: You have the right to request deletion of your Consumer Health Data.

Right to Withdraw Consent: You have the right to withdraw your consent for the collection, use, or sharing of your Consumer Health Data at any time.

Right to Opt-Out: You have the right to opt-out of the sale of your Consumer Health Data and certain sharing of your Consumer Health Data.

6. How to Exercise Your Rights

To exercise your rights regarding Consumer Health Data, you may:

Account Settings: Registered Users may access, update and delete their Consumer Health Data and update their choices regarding the types of communications they receive from us through their online Account settings.

Contact Us: You may contact us at support@riotiq.com to learn more about your rights and choices regarding your Consumer Health Data or to submit a request to exercise your rights.

Verification: We may require you to verify your identity before processing your request. This may include providing information such as your email address or other account information to match with our records.

7. Security

We use physical, technical and organizational measures designed to protect your Consumer Health Data against unauthorized access, theft and loss. We restrict access to your Consumer Health Data to those employees who need to know that information to service your account or perform their job functions.

Although we take precautions intended to help protect information that we process, no system or electronic data transmission is completely secure. Any transmission of your Consumer Health Data is at your own risk and we expect that you will use appropriate security measures to protect your Consumer Health Data. You are responsible for maintaining the security of your account and the information in your account.

8. Data Retention

Unless you request that we delete certain information (see Your Rights Regarding Consumer Health Data), We will retain your Consumer Health Data for the period necessary to fulfill the purposes outlined in this MHMD Notice unless a longer retention period is required or permitted by law.

The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide services to you (for example, for as long as you have an account with us or keep using the Website);

• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them)

• Whether retention is advisable; and considering our legal position (such as, for statutes of limitations, litigation or regulatory investigations).

9. Changes to This MHMD Notice

Riot IQ may update this MHMD Notice at any time and any changes will be effective upon posting. In the event that there are material changes to the way we treat your Consumer Health Data, we will update the Last Modified date at the top of this Notice upon becoming effective. We may also notify you by email, in our discretion.