HIPAA Privacy Notice

Notice of Privacy Practices for Protected Health Information (PHI)

Effective date: May 27, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

kindr Health ("we", "us", or "our") is required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") to maintain the privacy of your Protected Health Information ("PHI"), provide you with this notice of our legal duties and privacy practices with respect to PHI, and abide by the terms of the notice currently in effect.

Uses and Disclosures of PHI

a. Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care and any related services. This includes sharing PHI with the physicians of Arora Health & Aesthetics, LLC and with F&F Pharmacies Inc dba Jungle Jim's Pharmacy to facilitate consultation, prescribing, and medication fulfillment.

b. Payment

We may use and disclose your PHI to obtain payment for services provided to you, including processing subscription fees and consultation fees through third-party payment processors.

c. Health Care Operations

We may use and disclose your PHI for our health care operations, including quality assessment, provider review, compliance activities, and business management.

d. Appointment Reminders and Communications

We may use and disclose your PHI to contact you regarding appointments, treatment alternatives, or other health-related services that may be of interest to you.

e. Business Associates

We may share PHI with third-party business associates that perform services on our behalf. These associates are required by contract to safeguard PHI consistent with HIPAA.

f. Required by Law

We will disclose PHI when required to do so by federal, state, or local law.

g. Public Health Activities

We may disclose PHI for public health activities, including reporting adverse events related to medications and reporting to public health authorities.

h. Health Oversight Activities

We may disclose PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections.

i. Judicial and Administrative Proceedings

We may disclose PHI in response to a court order, subpoena, discovery request, or other lawful process.

j. Law Enforcement

We may disclose PHI to law enforcement officials for purposes permitted by law.

k. Workers' Compensation

We may disclose PHI as authorized by, and to the extent necessary to comply with, laws relating to workers' compensation.

l. Serious Threat to Health or Safety

We may disclose PHI when necessary to prevent a serious threat to your health and safety or to the health and safety of the public.

m. Other Uses

Uses and disclosures of PHI not described in this notice will be made only with your written authorization. You may revoke any such authorization at any time in writing.

Your Rights Regarding PHI

a. Right to Inspect and Copy

You have the right to inspect and obtain a copy of your PHI, with limited exceptions.

b. Right to Amend

You may request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request under certain circumstances.

c. Right to an Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your PHI made by us.

d. Right to Request Restrictions

You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to all requested restrictions.

e. Right to Request Confidential Communications

You have the right to request that we communicate with you about medical matters in a specific way or at a specific location.

f. Right to a Paper Copy

You have the right to receive a paper copy of this notice upon request.

g. Right to be Notified of a Breach

You have the right to be notified following a breach of your unsecured PHI.

Transmission of PHI

We use industry-standard encryption (including SSL/TLS) for transmission of PHI and encryption for PHI at rest. Notwithstanding these protections, no method of electronic transmission or storage is 100% secure.

Changes to This Notice

We reserve the right to change this notice and to make the revised notice effective for PHI we already have about you, as well as any PHI we receive in the future. We will post the current notice at home.kindr.health/hipaa.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at support@kindr.health or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

Contact Information

kindr Health
support@kindr.health
home.kindr.health

Rights of Specific Jurisdictions

California

California residents have additional rights under the California Confidentiality of Medical Information Act (CMIA) and the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected about them, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

State-Specific Provisions

New York

New York residents have additional rights regarding the confidentiality of HIV-related information, mental health records, and genetic testing information under New York Public Health Law and Mental Hygiene Law.

Texas

Texas residents are protected under the Texas Medical Records Privacy Act, which provides additional protections for the use and disclosure of PHI.

Florida

Florida residents have additional rights under Florida Statutes Chapter 456 and 395 regarding medical record confidentiality.

Illinois

Illinois residents are protected under the Illinois Mental Health and Developmental Disabilities Confidentiality Act and the Illinois AIDS Confidentiality Act, which provide additional protections for certain categories of PHI.

Massachusetts

Massachusetts residents have additional rights under M.G.L. c. 111 § 70E (Patient Rights) and related statutes governing the confidentiality of medical records.

California (State-Specific)

In addition to the rights described above, California residents are protected under the California Confidentiality of Medical Information Act (CMIA), which requires written authorization for many disclosures of medical information.