Notice of Privacy Practices

Journi Health

HIPAA Privacy Notice — Your Rights and Our Obligations

Last updated: June 19, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices (“Notice”) is provided by Genecis Bio Inc. and its subsidiaries (collectively, “Journi Health”) and describes the privacy practices of the independent licensed Medical Groups and healthcare Providers who deliver services through the Journi Health platform. This Notice applies to all protected health information (“PHI”) created, received, or maintained in connection with your care through Journi Health.

By using the Journi Health platform, you acknowledge receipt of this Notice. A paper copy is available upon request by contacting privacy@healthjourni.com.

Our Legal Duties

We are required by law to:

Maintain the privacy of your protected health information (PHI).
Provide you with this Notice describing our legal duties and privacy practices.
Notify you following a breach of your unsecured PHI.
Abide by the terms of this Notice currently in effect.
Obtain your written authorization for uses and disclosures not described in this Notice.

How We May Use and Disclose Your PHI

We may use and disclose your PHI for the following purposes without requiring your additional authorization:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care and related services. For example, your Provider may send your prescription to a compounding pharmacy, or share relevant medical history with a specialist.

Payment

We may use and disclose your PHI to bill and collect payment for services provided to you. For example, we may share PHI with payment processors or billing services to process your subscription or one-time charges.

Healthcare Operations

We may use and disclose your PHI for our internal operations, including quality assessment, training of healthcare professionals, and other administrative activities necessary to run our platform.

Required by Law

We will disclose your PHI when required to do so by federal, state, or local law.

Public Health Activities

We may disclose your PHI to public health authorities to prevent or control disease, injury, or disability, or to report vital statistics as required by law.

Health Oversight Activities

We may disclose your PHI to government agencies authorized to oversee the healthcare system or government programs, such as state medical boards or the Department of Health and Human Services.

Judicial and Administrative Proceedings

We may disclose your PHI in response to a court or administrative order, or in response to a subpoena, discovery request, or other lawful process, subject to applicable legal protections.

Law Enforcement

We may disclose your PHI to law enforcement officials in limited circumstances as required or permitted by law, such as to identify a suspect or missing person, or to report a crime.

Serious Threats to Health or Safety

We may use or disclose your PHI when necessary to prevent a serious threat to your health or safety or the health or safety of the public or another person.

Business Associates

We may share your PHI with third parties (“Business Associates”) that perform services on our behalf, such as IT providers, billing services, and analytics vendors. Our Business Associates are required by contract to protect the privacy of your PHI.

Uses and Disclosures Requiring Your Authorization

The following uses and disclosures require your written authorization:

Most uses and disclosures of psychotherapy notes
Uses and disclosures of PHI for marketing purposes
Sale of your PHI
Any use or disclosure not described in this Notice

You may revoke any authorization you have provided at any time, in writing, except to the extent that we have already taken action in reliance on that authorization. To revoke an authorization, contact privacy@healthjourni.com.

Your Rights Regarding Your PHI

Right to Access and Inspect Your PHI

You have the right to inspect and obtain a copy of PHI that we maintain about you, with limited exceptions. To request access, contact privacy@healthjourni.com. We may charge a reasonable, cost-based fee for copies. We will respond to your request within 30 days.

Right to Request Amendments

You have the right to request that we amend PHI we maintain about you if you believe it is inaccurate or incomplete. We may deny your request in certain circumstances. Submit amendment requests to privacy@healthjourni.com with an explanation of why the amendment is needed.

Right to an Accounting of Disclosures

You have the right to receive a list of disclosures of your PHI that we have made, other than disclosures made for treatment, payment, healthcare operations, and certain other purposes. Submit requests to privacy@healthjourni.com.

Right to Request Restrictions

You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except that we must agree to restrict disclosure of PHI to a health plan if you pay for a service out-of-pocket in full and the restriction is not otherwise required by law.

Right to Request Confidential Communications

You have the right to request that we communicate with you by alternative means or at an alternative location. For example, you may request that we contact you only by email. We will accommodate reasonable requests.

Right to Receive Notice of Breach

You have the right to receive notification if there is a breach of your unsecured PHI. We will notify you without unreasonable delay, and no later than 60 days following discovery of the breach.

Right to a Paper Copy of This Notice

You have the right to a paper copy of this Notice at any time, even if you agreed to receive it electronically. Request a copy at privacy@healthjourni.com.

Changes to This Notice

We reserve the right to change this Notice at any time. We reserve the right to make the revised Notice effective for PHI we already have about you as well as any PHI we receive in the future. We will post the current Notice on our website at www.healthjourni.com/notice-of-privacy-practices. If we make a material change, we will notify you by email or through the platform.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with us, contact:

Journi Health Privacy Officer

Genecis Bio Inc.

108 Lakeland Ave.

Dover, DE 19901

Email: privacy@healthjourni.com

Phone: 1 (866) 525-3777

To file a complaint with the U.S. Department of Health and Human Services, visit: www.hhs.gov/ocr/privacy/hipaa/complaints. You will not be retaliated against for filing a complaint.

Effective Date

This Notice is effective as of June 19, 2026.

Journi Health | www.healthjourni.com/notice-of-privacy-practices