Effective date: April 23, 2026

HIPAA Notice of Privacy Practices

This Notice describes how your Protected Health Information (“PHI”) may be used and disclosed by the licensed independent clinical providers operating through the RENVA platform, and how you can get access to this information. Please review it carefully.

1. How We May Use and Disclose Your PHI

Treatment

We may use and disclose your PHI to provide, coordinate, and manage your healthcare and related services. For example, your intake information, medical history, and prescribed medications may be shared among clinicians in our provider network, our pharmacy partners, and any specialist to whom you are referred. This is the primary purpose for which your health information is collected.

Payment

We may use and disclose your PHI to obtain payment for services. For example, billing information may include a diagnosis code or description of treatment to facilitate processing of a payment transaction.

Healthcare Operations

We may use and disclose your PHI for our healthcare operations, including quality assessment, clinical audits, staff training, compliance reviews, and evaluating the performance of our provider network. These activities are necessary to maintain the quality of care we provide.

As Required by Law

We will disclose your PHI when required to do so by federal, state, or local law, including in response to a court order, subpoena, or law enforcement request.

Public Health and Safety

We may disclose your PHI to public health authorities, to prevent or control disease, to report adverse events related to medications, or when necessary to prevent a serious threat to your health or safety or the health or safety of others.

Business Associates

We may share your PHI with third parties that perform services on our behalf (“Business Associates”), such as technology vendors, billing services, and analytics partners. Business Associates are contractually obligated to protect your PHI in accordance with HIPAA requirements.

2. Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes beyond treatment, payment, and healthcare operations, including:

• Most uses of psychotherapy notes.
• Marketing communications that involve payment to us by a third party.
• Sale of your PHI.

You may revoke an authorization at any time in writing. Revocation will not affect uses or disclosures already made in reliance on your authorization.

3. Your Rights Regarding Your PHI

Right to Access

You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set. Requests must be made in writing. We may charge a reasonable fee for copies. We will provide access within 30 days of your request.

Right to Amend

You have the right to request an amendment to your PHI if you believe it is inaccurate or incomplete. We may deny your request in certain circumstances, such as when the information was not created by us or is already accurate.

Right to an Accounting of Disclosures

You have the right to request a list of disclosures of your PHI we have made for purposes other than treatment, payment, healthcare operations, or those you authorized, for up to six years prior to your request.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to your request except in limited circumstances required by law.

Right to Confidential Communications

You have the right to request that we communicate with you about your PHI in a particular way or at a particular location (e.g., only by email, not by mail).

Right to a Copy of This Notice

You have the right to receive a paper copy of this Notice upon request.

4. Our Duties

We are required by law to maintain the privacy of your PHI and to provide you with notice of our legal duties and privacy practices. We are required to abide by the terms of this Notice currently in effect.

5. Changes to This Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have about you as well as any information we receive in the future. The current Notice will be posted on our website with its effective date.

6. How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights (“OCR”):

• U.S. HHS Office for Civil Rights: 200 Independence Ave., S.W., Washington, D.C. 20201 — hhs.gov/hipaa
• RENVA Health: darrin@renva.health

You will not be retaliated against for filing a complaint.

7. Contact

For questions about this Notice or to exercise any of the rights described above, contact our Privacy Officer at: darrin@renva.health