HIPAA Notice of Privacy Practices

Effective Date: January 12, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Our Commitment to Your Privacy

Superinsight ("we," "us," or "our") is dedicated to maintaining the privacy of your Protected Health Information (PHI). Superinsight provides services that allow users to upload or synchronize their enterprise/personal files or data to our services and get insights and assistance. In the course of providing these services, we may create, receive, maintain, and transmit records that may contain Protected Health Information (PHI). We are committed to maintaining the privacy of your PHI in accordance with applicable laws, including the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations.

We are required to abide by the terms of this Notice currently in effect. We reserve the right to change the terms of this Notice and to make the new Notice provisions effective for all PHI that we maintain. If we make material changes, we will provide a revised Notice by posting it on our website at www.superinsight.ai and will notify you of significant changes in accordance with our Privacy Policy.

How We May Use and Disclose Your Information

We may use and disclose your PHI for the following purposes:

1. Service Provision: We may use your PHI to provide, coordinate, or manage the services you have requested. For example, we may process files or data you upload to provide insights, chronologies, summaries, or other assistance as part of our Service.

2. Business Associates: We do not share Personal Information, including PHI, with vendors who are performing services for Superinsight, such as artificial intelligence or large language model companies, or third parties integration services like cloud drives and databases, except as required by law or with your explicit authorization. Any disclosures to business associates will be made only with appropriate safeguards and written agreements requiring them to protect your privacy.

3. Required by Law: We will disclose your PHI when required to do so by federal, state, or local law, including disclosures to the Secretary of the Department of Health and Human Services to investigate our compliance with HIPAA.

4. Public Health and Safety: We may disclose PHI for public health activities, to report abuse or neglect, or to prevent a serious threat to health or safety.

Other Uses and Disclosures: Uses and disclosures not described in this Notice (such as for marketing purposes or the sale of PHI) will be made only with your written authorization. You may revoke such authorization at any time in writing, except to the extent that we have already taken action in reliance on it.

How We Protect Information

We implement security measures designed to protect your information from unauthorized access. Your account is protected by our mechanism that sends an OTP pin code to your personal phone number to ensure the login session is done by you personally, and we urge you to take steps to keep your personal information safe by not disclosing your phone number and by logging out of your account after each use.

We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

In the event of a breach of unsecured PHI, we will notify you in accordance with applicable HIPAA breach notification requirements.

Your Rights Regarding Your Health Information

You have the following rights regarding the PHI we maintain about you:

Right to Inspect and Copy: You have the right to inspect and obtain a copy of your PHI.

Right to Amend: If you feel that the PHI we have is incorrect or incomplete, you may ask us to amend the information.

Right to an Accounting of Disclosures: You have the right to request a list (accounting) of certain disclosures we made of your PHI for purposes other than service provision.

Right to Request Restrictions: You have the right to request a restriction or limitation on the PHI we use or disclose for service provision.

Right to Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location.

Right to a Paper Copy of This Notice: You have the right to a paper copy of this Notice at any time.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services (HHS).

To file a complaint with us, please contact our Privacy Officer using the information below. You will not be penalized or retaliated against for filing a complaint.

Contact Information

If you have any questions about this Notice or wish to exercise your rights, please contact:

Address: 1259 El Camino Real #1111 Menlo Park, California 94025
Email: [email protected]

Last Updated: This HIPAA Notice of Privacy Practices was last updated on January 12th, 2026.