Notice of Privacy Practices

Effective Date: August 17, 2026

Our Commitment

StrengthRX is required by law to maintain the privacy of your Protected Health Information ("PHI"), to give you this notice describing our legal duties and privacy practices, and to notify you if a breach affects your unsecured PHI. We are required to follow the terms of the notice currently in effect.

PHI is information that identifies you and relates to your physical or mental health, the care we provide you, or payment for that care.

How We May Use and Disclose Your Health Information

Treatment

We use and disclose your PHI to provide and coordinate your care. For example, your provider may review your lab results to determine an appropriate protocol, or send a prescription to a compounding pharmacy so it can be dispensed to you.

Payment

We use and disclose your PHI to bill and collect payment for services. For example, we may share information with a payment processor to complete a transaction.

Health Care Operations

We use and disclose your PHI to run our practice — for example, reviewing the quality of care we deliver, training staff, and administrative activities. We use business associates, such as our patient records platform, to help us do this. Each is required by written agreement to safeguard your information.

Appointment Reminders and Health-Related Communications

We may contact you to remind you of an appointment, to follow up on your care, or to tell you about treatment alternatives or health-related benefits that may be of interest to you.

Other Uses and Disclosures Permitted or Required by Law

We may use or disclose your PHI without your authorization when the law allows or requires it, including:

• When required by federal, state, or local law
• For public health activities, including reporting adverse events related to medications
• To report suspected abuse, neglect, or domestic violence
• For health oversight activities, such as audits or licensure investigations
• In response to a court order, subpoena, or other lawful process
• For law enforcement purposes as permitted by law
• To avert a serious and imminent threat to health or safety
• To coroners, medical examiners, and funeral directors
• For workers' compensation claims as authorized by law
• For research, where an institutional review board has approved a waiver
• To military, national security, or correctional authorities in specific circumstances

Uses and Disclosures That Require Your Written Authorization

Other uses and disclosures not described in this notice will be made only with your written authorization. In particular, we will not use or disclose your PHI for marketing purposes, and we will not sell your PHI, without your written authorization. Most uses and disclosures of psychotherapy notes require your authorization. You may revoke an authorization in writing at any time, except to the extent we have already acted in reliance on it.

We do not disclose your health information to advertising platforms. We do not send your health goals, lab results, diagnoses, prescriptions, or any other PHI to any advertising or analytics service, in any form. Our Privacy Policy describes the limited advertising measurement we perform, which is confined to our advertising landing pages and never includes health information.

Your Rights Regarding Your Health Information

Right to Access and Receive a Copy

You have the right to inspect and receive a copy of your health records, usually within 30 days of your request. You may ask us to send the copy electronically or to transmit it to a person or entity you designate. We may charge a reasonable, cost-based fee.

Right to Request an Amendment

If you believe information in your record is incorrect or incomplete, you may ask us to amend it. We may deny your request in certain circumstances, and if we do, we will explain why in writing and you may submit a statement of disagreement to be included in your record.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI in the six years before your request, other than disclosures for treatment, payment, and health care operations and certain other exceptions.

Right to Request Restrictions

You may ask us to limit how we use or disclose your PHI. We are not required to agree to most requests. However, if you pay for a service in full and out of pocket, you have the right to require that we not disclose that information to a health plan for payment or operations purposes, and we must honor that request.

Right to Confidential Communications

You may ask us to contact you in a specific way or at a specific location — for example, only by email, or only at a particular phone number. We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You may request a paper copy of this notice at any time, even if you agreed to receive it electronically.

Right to Be Notified of a Breach

You have the right to be notified if a breach occurs that may have compromised the privacy or security of your unsecured PHI.

Right to Choose Someone to Act for You

If you have given someone medical power of attorney, or if someone is your legal guardian, that person can exercise these rights on your behalf. We will verify their authority before acting.

Our Duties

• We are required by law to protect the privacy and security of your PHI.
• We must notify you promptly if a breach occurs that may have compromised your information.
• We must follow the duties and privacy practices described in this notice.
• We will not use or share your information other than as described here unless you tell us in writing that we may. If you tell us we may, you may change your mind at any time.

Changes to This Notice

We may change the terms of this notice at any time, and the changes will apply to all information we hold about you. The current notice will always be posted on this page with its effective date, and you may request a copy at any time.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services, Office for Civil Rights, at 200 Independence Avenue S.W., Washington, D.C. 20201, by calling 1-877-696-6775, or at hhs.gov/ocr/privacy/hipaa/complaints. We will not retaliate against you for filing a complaint.

Contact Us

To exercise any right described in this notice, to request a paper copy, or to ask a question about our privacy practices, contact our Privacy Officer: