Notice of privacy practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective date: September 22, 2026

Contact for more information: Privacy Officer, Insyght Health LLC, 3801 PGA Blvd, Palm Beach Gardens, FL 33410. Email: customerservice@insyghthealth.com. Phone: (561) 337-5208.

Your rights

When it comes to your health information, you have certain rights. This section explains those rights and some of our responsibilities to help you.

Get a copy of your health information and reports

• You can ask to see or get a copy of the health information and reports we maintain about you. Contact the Privacy Officer below to ask how.
• We will provide a copy or summary, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

Ask us to correct your health information

• You can ask us to correct your health information if you think it is incorrect or incomplete.
• We may say no to your request, but we will tell you why in writing within 60 days.

Request confidential communications

• You can ask us to contact you in a specific way (for example, a personal email or phone number) or at a different address.
• We will consider all reasonable requests and must agree if you tell us that contacting you in another way could endanger you.

Ask us to limit what we use or share

• You can ask us not to use or share certain health information for treatment, payment, or our operations. We are not required to agree, and may say no if, for example, it could affect your care.
• If we agree, we may still share that information if you need emergency treatment.

Get a list of those with whom we have shared your information

• You can ask for an accounting of the disclosures we have made of your health information going back up to six years, including who we shared it with and why.
• This accounting does not include disclosures for treatment, payment, or health care operations, or certain other disclosures (such as ones you asked us to make). We provide one accounting per year free of charge, and may charge a reasonable, cost-based fee for additional requests within 12 months.

Get a copy of this notice

• You can ask the Privacy Officer for a paper copy of this Notice at any time, even if you agreed to receive it electronically.

Choose someone to act for you

• If someone has medical power of attorney, or is your legal guardian, that person can exercise your rights and make choices about your health information on your behalf.
• We will confirm that person's authority before taking any action based on their request.

File a complaint if you feel your rights have been violated

• You can complain to us using the contact information above.
• You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, by writing to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/hipaa/filing-a-complaint.
• We will not retaliate against you for filing a complaint.

Your choices

For certain health information, you can tell us your choices about what we share. If you have a clear preference in the situations below, tell us, and we will generally follow your instructions.

In these cases, you have both the right and the choice to tell us to:

• Share information with family, close friends, or others involved in your care or in payment for your care
• Share information in a disaster relief situation

If you are not able to tell us your preference, for example, if you are unconscious, we may share your information if we believe it is in your best interest, or if needed to lessen a serious and imminent threat to health or safety.

In these cases, we never share your information unless you give us written permission:

• Marketing purposes
• Sale of your information

Our uses and disclosures

How do we typically use or share your health information?

To support your care. We can use your health information and share it with the Telehealth Provider's clinicians to support the evaluation, ordering, and interpretation of tests and services provided to you. For example, the ordering clinician may review your intake information and your test results to determine appropriate care.

To run our organization. We can use your health information to operate, maintain, and improve the Platform, including our health-scoring methodology, and to train our personnel.

To bill for services. We can use and disclose your health information as necessary to bill and collect payment for the Membership, and to facilitate billing for services provided by the Telehealth Provider or pharmacy, consistent with the Financial Disclosure provided to you.

How else we may use or share your information

We are allowed or required to share your information in other ways, usually in ways that contribute to the public good, such as public health and research. The law requires us to meet specific conditions before sharing your information for these purposes.

• Public health and safety: preventing disease, reporting adverse reactions to medications, reporting suspected abuse, neglect, or domestic violence, or preventing a serious threat to anyone's health or safety.
• Research: only if you explicitly opt in, and only for studies that meet applicable legal and ethical requirements under approved de-identification safeguards.
• Compliance with law: including disclosures to the Department of Health and Human Services to confirm our compliance with federal privacy law.
• Organ and tissue donation requests: with organ procurement organizations.
• Coroners, medical examiners, and funeral directors: when an individual dies.
• Workers' compensation, law enforcement, and government requests: for workers' compensation claims, law enforcement purposes, health oversight activities, and specified government functions.
• Lawsuits and legal actions: in response to a court or administrative order, or a valid subpoena.

Our responsibilities

• We are required by law to maintain the privacy and security of your protected health information.
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
• We must follow the duties and privacy practices described in this Notice and give you a copy of it.
• We will not use or share your information other than as described in this Notice unless you give us written permission, which you may revoke at any time in writing.

Changes to this notice

We may change the terms of this Notice, and the changes will apply to all health information we maintain. The updated Notice will be made available as required by law.

Contact information

Privacy Officer, Insyght Health LLC, 3801 PGA Blvd, Palm Beach Gardens, FL 33410. Email: customerservice@insyghthealth.com. Phone: (561) 337-5208.

By accepting this Notice electronically, you acknowledge that you received a copy of the Insyght Health Notice of Privacy Practices, recorded with your name and the date of acknowledgment.