PROKIDNEY CORP.

Effective Date: June 15, 2026     |     Last Updated: June 15, 2026

1. Introduction

ProKidney Corp. (“ProKidney,” “we,” “us,” or “our”) is committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and safeguard information when you visit and interact with our website at www.prokidney.com (the “Site”).

This Policy applies to all visitors, users, and others who access the Site. It does not cover information we receive in other contexts, such as information collected in connection with our clinical studies, product quality complaints, or adverse event reports, which are governed by separate privacy notices provided at the time of collection.

This Policy is incorporated into and is part of our Terms of Service. By using the Site, you acknowledge that you have read and understood this Policy. If you do not agree, please do not use the Site.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you interact with features of the Site, including:

• Contact inquiries submitted through our “Contact Us” form (e.g., name, email address, phone number, message content)
• Job applications submitted through our “Careers” page (e.g., name, email address, resume, employment history)
• Any other information you choose to submit to us via email or other communication methods on the Site

2.2 Information Collected Automatically

When you visit our Site, we and our third-party service providers automatically collect certain technical and usage information. This may include:

• IP address and approximate geographic location derived from IP address
• Browser type, version, and language settings
• Operating system and device type
• Referring/exit URLs and pages visited on the Site
• Date and time of your visit and session duration
• Clickstream data and other browsing activity on the Site
• Unique device identifiers

This automatically collected information is used to understand how visitors use the Site, improve Site functionality, diagnose technical issues, and monitor traffic patterns.

2.3 Information Collected Through Tracking Technologies

We use cookies and similar tracking technologies to collect information. A detailed description of these technologies, including how to control them, is provided in Section 5 (Cookies and Tracking Technologies) below.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To operate, maintain, and improve the Site and its features
• To respond to your inquiries, requests, and communications
• To process and evaluate employment applications submitted through the Site
• To send you information about ProKidney, our research, pipeline, and corporate news, where you have requested or consented to receive such communications
• To monitor and analyze traffic patterns, usage trends, and the performance of the Site using analytics tools, including Google Analytics (see Section 5)
• To protect the security and integrity of the Site and ProKidney’s systems
• To comply with applicable legal obligations and regulatory requirements
• For any other purpose disclosed to you at the time of collection or with your consent

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We engage third-party vendors and service providers to assist in operating the Site and delivering services, including website hosting providers, analytics platforms (including Google LLC, which operates Google Analytics), talent acquisition platforms, and email communication tools. These providers are authorized to use your information only as necessary to perform services on our behalf and are contractually required to protect it.

4.2 Legal Requirements and Protection of Rights

We may disclose your information when we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or a valid governmental request
• Investigate or prevent suspected illegal activity, fraud, or threats to safety
• Protect the rights, property, or safety of ProKidney, our employees, users, or the public
• Enforce our Terms of Service or other agreements

4.3 Business Transactions

In connection with a merger, acquisition, reorganization, sale of assets, or dissolution involving ProKidney, your information may be transferred to the relevant successor entity. We will notify you of any such change via a prominent notice on the Site or through direct communication.

4.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function properly, to improve user experience, and to provide website operators with information about how the site is used. Cookies can be “session” cookies (deleted when you close your browser) or “persistent” cookies (which remain on your device for a set period or until you delete them).

5.2 Tracking Technologies We Use

We use the following categories of cookies and tracking technologies on the Site:

5.3 Third-Party Analytics — Google Analytics

Our Site uses Google Analytics, a web analytics service provided by Google LLC (“Google”). Google Analytics uses cookies and similar technologies to collect and analyze information about the use of the Site and to report on activities and trends. Google may also collect information regarding the use of other websites, apps, and online resources. You can learn about Google’s practices by visiting:

• Google’s Privacy Policy: https://policies.google.com/privacy
• Google Analytics data practices: https://support.google.com/analytics/answer/6004245

Google Analytics data is transmitted to and stored on Google’s servers, which may be located in the United States or other countries. Google uses this data to evaluate your use of the Site, compile reports on site activity, and provide other services related to website activity and internet usage. We have implemented IP anonymization where technically available to limit the precision of IP data processed by Google Analytics.

5.4 Your Cookie Choices and Opt-Out Rights

You have several options for controlling or limiting how cookies and similar technologies are used:

• Browser Settings: Most web browsers allow you to refuse or delete cookies through their settings. Visit your browser’s help documentation for instructions. Note that disabling cookies may affect the functionality of the Site.
• Google Analytics Opt-Out: You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout
• Network Advertising Initiative: You may opt out of interest-based advertising from participating third-party advertisers at http://www.networkadvertising.org/managing/opt_out.asp
• Do Not Track: Although we currently do not alter our data collection practices in response to “Do Not Track” signals from browsers (as no uniform standard exists), we honor opt-out requests made through the mechanisms above.
• Global Privacy Control (GPC): We are evaluating support for Global Privacy Control browser signals and will update this Policy as our implementation evolves.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting obligations. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and the purposes for which we process the data.

When personal information is no longer needed, we securely delete or anonymize it. Anonymized, aggregated data that cannot be used to identify you may be retained indefinitely for statistical and business analysis purposes.

You may request deletion of your personal information at any time as described in Section 8 (Your Privacy Rights).

7. Data Security

We implement reasonable and appropriate administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Access controls limiting who can access personal information to those with a legitimate business need
• Regular review and assessment of our security practices
• Vendor contracts requiring third-party service providers to maintain appropriate security measures

Despite these measures, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If you believe your information has been compromised, please contact us immediately at info@prokidney.com.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

8.1 General Rights (All Users)

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete personal information
• Deletion: Request that we delete your personal information, subject to applicable legal retention requirements
• Opt-Out of Marketing: Unsubscribe from marketing or promotional communications at any time by using the opt-out link in such communications or by contacting us directly

To exercise any of these rights, please contact us at info@prokidney.com. We may ask you to verify your identity before processing your request. We will respond within the timeframe required by applicable law.

8.2 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The right to know what personal information we collect, use, disclose, and sell about you
• Right to Delete: The right to request deletion of personal information we have collected, subject to certain exceptions
• Right to Correct: The right to request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising purposes. If this practice changes, we will provide a “Do Not Sell or Share My Personal Information” link on our homepage
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a California privacy rights request, contact us at info@prokidney.com.

8.3 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the processing of your personal data is subject to the General Data Protection Regulation (GDPR) or equivalent applicable law.

9. Children’s Privacy

The Site is not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16 without appropriate consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us at info@prokidney.com.

10. Links to Third-Party Websites

The Site may contain links to third-party websites, including investor relations platforms, clinical study information sites, and external resources. This Policy does not apply to those third-party websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

11. Users Outside the United States

The Site is operated and intended for use primarily within the United States. If you access the Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using the Site, you consent to the transfer of your information to the United States and its processing there in accordance with this Policy. For EEA, UK, and Swiss users, we rely on appropriate transfer mechanisms as described in Section 8.3.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last Updated” date at the top of this Policy and post the revised Policy on the Site.

We encourage you to review this Policy periodically. Your continued use of the Site following the posting of changes constitutes your acceptance of those changes. We will not materially reduce your privacy protections under this Policy without providing notice and, where required by law, obtaining your consent.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of New York, United States, without regard to its conflict of law provisions.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

 This Privacy Policy was last updated on June 15, 2026.