VITAL LOOP — END USER LICENCE AGREEMENT (EULA)

This end user licence agreement (the "EULA") governs your use of the Vital Loop web application and marketing website (the "App") and the way we process information through the App. By registering for or using the App, you agree to be bound by the terms of this EULA, entered into between you (the user) and Vital Loop (Pty) Ltd (a company incorporated in terms of the company law of the Republic of South Africa).

1. Introduction

1.1 The App allows users to register via WhatsApp, sign in using a WhatsApp workflow and a magic link, and to track chronic health data (for example, blood glucose measurements) and related information for chronic conditions such as diabetes (the "Service"). The App is accessed via a web application and the Company's marketing website.

1.2 We may update the App from time to time; you should use the latest version for proper Service operation.

1.3 We are committed to protecting personal information and to complying with applicable data protection laws including the Protection of Personal Information Act 4 of 2013 ("POPIA") and other relevant law.

2. Licence

2.1 Subject to this EULA, we grant you a non-exclusive, non-transferable licence to access and use the App for your personal healthcare tracking and related lawful purposes.

2.2 You may not copy, decompile, reverse engineer, modify, distribute or create derivative works of the App except as permitted by applicable law.

3. Term & Termination

3.1 Your rights under this EULA terminate automatically without notice if you breach any term of this EULA. On termination you must cease use of the App and destroy any copies of materials provided to you in connection with the App.

4. Registration and Creation of Account

4.1 Registration is required to use the Service. Users sign up via WhatsApp. After verification, we send a magic link to permit secure access to the web-app. You must provide accurate information and keep it updated.

4.2 You are responsible for maintaining the confidentiality of any access credentials or authorised devices and for all activity that occurs under your account. You must not share access or attempt to circumvent the sign-in process.

5. Health Data, Patient Personal Information and Medical Ethics

5.1 The App processes health and other personal information to provide the Service. The primary types of data collected include user identity and health details supplied at registration, WhatsApp contact information necessary for sign-in and reminders, and clinical monitoring data such as blood glucose readings and associated timestamps and notes.

5.2 You remain in control of your data. You may choose to share your data with a treating clinician or other third party; such sharing is initiated by you.

5.3 We do not provide clinical diagnoses. The Service is intended to assist users in tracking health information; it is not a substitute for professional medical advice, diagnosis or treatment. You should consult a qualified clinician for clinical decisions.

6. Security

6.1 We implement appropriate technical and organisational measures to protect the confidentiality, integrity and availability of Data. We use industry-standard providers (for example Supabase for database and authentication services) and encryption and access controls to secure Data in transit and at rest.

6.2 Access to Data is limited to Company personnel who require access to perform their duties and who are bound by confidentiality obligations. We will take appropriate measures against unauthorised or unlawful processing and against accidental loss, destruction or damage to personal information.

7. Children

7.1 If you are registering on behalf of a minor, you warrant you have the legal authority to do so and the necessary consents. Where processing sensitive data regarding children is required, you must have obtained the lawful consent of a parent or guardian.

8. Transborder Flow of Information

8.1 Data collected by the App may be stored or processed outside the Republic of South Africa. You may withdraw your consent to cross-border processing, but withdrawing consent may prevent us from providing the Service.

9. Third Party Content and Services

9.1 The App may link to, or integrate with, third party services (for example messaging platforms such as WhatsApp or analytics providers). We are not responsible for the content or practices of those third parties. Using third party services is at your own risk.

10. Consent to Use of Technical Data

10.1 We may collect technical data about your device and connection to improve the App. Such technical data will be used in anonymised or aggregated form where possible.

11. Use of WhatsApp & Communications

11.1 We use WhatsApp to sign users in, to send authentication workflows (magic link generation) and to send activity reminders. You consent to receiving messages from us via WhatsApp for these purposes. Standard WhatsApp terms and practices apply when using that platform. If you no longer wish to receive WhatsApp messages you may revoke consent in your account settings or contact support, however, this may prevent you from using the product.

12. Advertising and Newsletters

12.1 We may process Data to provide newsletters or service notices. You may unsubscribe from newsletters at any time by following the unsubscribe instructions or by contacting support@vitalloop.co.za.

13. Relationship with Platform Stores (Not Applicable)

13.1 The App is a web application and is not distributed through mobile app stores. Clauses regarding app stores and related third party store rights in traditional mobile EULAs do not apply.

14. Identity and Contact Details

14.1 Your registered identity and contact details are the information you provide at registration.

14.2 Our contact details for notices, enquiries and complaints are:

Name: Vital Loop
Email address: support@vitalloop.co.za
POPIA Officer: Leo Hyera (Director) — responsible for privacy and POPIA compliance

15. Data Protection

15.1 For specifics on how we process personal information, please refer to our Privacy Policy. Key commitments:

• We will use personal information only for providing the Service and related administrative purposes.
• Users control their data and may export or delete their data per the mechanisms provided in the App (subject to lawful retention obligations).
• We may use anonymised, aggregated Data for research and analysis to improve healthcare outcomes. We will not publish or disclose anonymised data in any way that could reasonably be used to re-identify individuals.
• We will not disclose information that can lead to the identification of individuals except where required by law or with your explicit consent.

16. Your Rights in Respect of Personal Information

16.1 You have rights in respect of your personal information, including rights to access, correction, deletion, objection to processing and data portability, subject to applicable law and legal exceptions. Please contact our POPIA officer at the address above or support@vitalloop.co.za to exercise these rights.

17. No Warranty

17.1 The App and Service are provided "as is" and "as available" to the maximum extent permitted by law. We do not guarantee uninterrupted or error-free operation. Where applicable law prohibits exclusion of implied warranties, those statutory warranties will apply.

18. Limitation of Liability

18.1 To the maximum extent permitted by applicable law, Vital Loop will not be liable for indirect, special, incidental or consequential damages, or for loss of data, profit, business, goodwill or anticipated savings arising out of or in connection with the App or this EULA.

19. Interpretation & General

19.1 Whole Agreement. This EULA constitutes the entire agreement between you and Vital Loop in relation to its subject matter.

19.2 Applicable Law & Jurisdiction. The law of the Republic of South Africa governs this EULA and the parties consent to the jurisdiction of the South African courts.

19.3 Survival; Severance; Reading Down. Provisions that by their nature survive termination will do so. If any provision is unenforceable it will be read down or severed to preserve the remainder of the EULA.