CONSENT

This Consent is provided as a separate document in accordance with the law of the Republic of Kazakhstan No. 94-V dated 21 May 2013 “On Personal Data and Its Protection” and, for users in the European Economic Area, Articles 6(1)(a) and 9(2)(a) of the GDPR. It is a freely given, specific, informed and unambiguous expression of the user’s will.

1. Operator

Operator	Individual Entrepreneur “SRM GROUP”
Identification number (IIN)	781217000619
Country	Republic of Kazakhstan
Contact	e-mail: herbaclub.app@gmail.com

2. Personal data covered by this Consent

• Name, e-mail address, age, sex (gender), profile photo;
• Health and wellness data (special category): body weight, height, BMI, step count, water intake, use of meditation features;
• Content of your messages in the in-app chat and your inputs to the AI assistant;
• Technical and usage data collected automatically through Firebase.

3. Explicit consent for special category data

By giving this Consent, I expressly agree to the processing of my health and wellness data and of any information about my physical or emotional well-being that I provide through the App, including through the AI assistant, for the purposes set out below. I understand that providing such data is voluntary and that the App’s wellness features cannot be provided without it.

4. Purposes

• Creation and management of my account and profile;
• Provision of the App features (step tracking, BMI calculator, water tracker, meditations, AI assistant, in-app chat);
• Personalisation of wellness information and tracking of my progress;
• Sending of service messages and notifications;
• Ensuring security and improving the App.

5. Processing actions and recipients

I consent to the collection, recording, storage, use, updating, structuring, transfer to the Operator’s processors (Google, for the Firebase services and for the Google Gemini AI assistant; and the hosting provider), blocking, deletion and anonymisation of my personal data, by automated and non-automated means.

6. Cross-border transfer

I expressly consent to the cross-border transfer and storage of my personal data outside the Republic of Kazakhstan, including to countries of the European Economic Area (storage on servers located in Finland) and to other countries where the Operator’s processors operate (including, in the case of Google services such as Firebase and the Gemini AI assistant, the United States).

I understand that such transfer is carried out to countries that ensure protection of personal data or, where this is not the case, on the basis of this consent and of appropriate safeguards such as Standard Contractual Clauses, in accordance with the law of the Republic of Kazakhstan and the GDPR.

7. Minors

If I am under the age at which the law of my country requires consent of a parent or legal guardian, I confirm that such consent has been obtained. The App is intended for users aged 14 and older.

8. Validity and withdrawal

This Consent is valid from the moment it is given until the purposes are achieved or until I withdraw it. I may withdraw this Consent at any time by changing my settings in the App or by contacting the Operator at herbaclub.app@gmail.com. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. After withdrawal, the Operator stops processing and deletes or anonymises my personal data, unless another legal basis for processing applies.

9. Electronic acceptance

In the App, this Consent is given by ticking a dedicated checkbox for the processing of personal data, separately from acceptance of the Privacy Policy and the Terms of Use. Consent given electronically has the same legal effect as a consent on paper. The Operator records the fact, date and time of the consent.