HIPAA

Notice of Privacy Practices

Effective May 27, 2026

---

This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review carefully.

Our duties

The independent clinicians who treat you through the Caliber platform, together with NEXPANSE CORP. as their business associate, are required by law to maintain the privacy of your protected health information (PHI), provide you this notice of our legal duties and privacy practices, and abide by the terms of this notice.

How we may use and disclose PHI

Treatment

To coordinate clinical care — for example, sharing your assessment with your reviewing clinician, or your prescription with the dispensing pharmacy.

Payment

To collect payment for services and medication — including with payment processors and, when applicable, your HSA/FSA administrator.

Health-care operations

For quality improvement, training, compliance audits, and similar internal operations.

As required by law

When disclosure is required by federal, state, or local law (for example, public-health reporting, subpoenas, or law enforcement under narrow circumstances).

With your authorization

For any purpose not described above, we will obtain your written authorization. You may revoke an authorization at any time, except where we have already relied on it.

Your HIPAA rights

• Right to access. Inspect and obtain a copy of your record.
• Right to amend. Request corrections to information you believe is incorrect or incomplete.
• Right to an accounting. Request a list of certain disclosures we have made of your PHI.
• Right to request restrictions. Ask us to limit certain uses or disclosures. We are not required to agree.
• Right to confidential communications. Request that we contact you by a specific channel or location.
• Right to a paper copy of this notice on request.
• Right to be notified of a breach affecting your unsecured PHI.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us using the contact below or with the US Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Changes to this notice

We may change this notice and apply the revised terms to PHI we already have. Updates will be posted here with a new effective date.