Notice of Privacy Practices

Effective date: October 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices ("Notice") is provided by Hydrohealth Solutions LLC, doing business as Vyoni ("Vyoni," "we," "us," or "our"), in compliance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), the HITECH Act, and applicable state privacy laws.

1. Our commitment to your privacy

We are required by law to maintain the privacy and security of your protected health information ("PHI"), provide you with this Notice of our legal duties and privacy practices with respect to your PHI, and follow the terms of this Notice currently in effect. We will notify you promptly if a breach occurs that may have compromised the privacy or security of your PHI.

2. How we may use and disclose your PHI

We may use and disclose your PHI for the following purposes:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes sharing your health information with the licensed healthcare providers in our network who review your eligibility questionnaire and make prescribing decisions, and with our partner pharmacy (Foothills Pharmacy) for the purpose of filling and dispensing your prescription.

Payment

We may use and disclose your PHI to bill and collect payment for the services and products we provide. This may include sharing information with payment processors, billing services, and collection agencies as necessary.

Healthcare operations

We may use and disclose your PHI for our healthcare operations, which include quality assessment and improvement activities, reviewing the competence or qualifications of healthcare professionals, conducting or arranging for medical review, and general administrative activities.

As required by law

We may use or disclose your PHI when required to do so by federal, state, or local law.

Public health activities

We may disclose your PHI to public health authorities for the purpose of preventing or controlling disease, injury, or disability, or to report adverse events, product defects, or to track FDA-regulated products.

Health oversight activities

We may disclose your PHI to a health oversight agency for activities authorized by law, including audits, inspections, investigations, and licensure activities.

Judicial and administrative proceedings

We may disclose your PHI in response to a court order or administrative tribunal, or in response to a subpoena, discovery request, or other lawful process, subject to applicable legal protections.

Law enforcement

We may disclose your PHI to a law enforcement official for law enforcement purposes as permitted or required by law.

To avert a serious threat to health or safety

We may use and disclose your PHI when necessary to prevent or lessen a serious and imminent threat to your health or safety or the health or safety of the public or another person.

3. Uses and disclosures that require your written authorization

We will not use or disclose your PHI for purposes other than those described in this Notice without your written authorization. Uses and disclosures that require your authorization include:

You may revoke an authorization in writing at any time. Revocation will not affect any uses or disclosures made in reliance on the authorization before it was revoked.

4. Your rights regarding your PHI

Right to access

You have the right to request access to and obtain a copy of your PHI that we maintain. To request access, contact us using the information at the end of this Notice. We may charge a reasonable fee for the cost of copying and mailing your records.

Right to amend

You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. We may deny your request in certain circumstances as permitted by law.

Right to an accounting of disclosures

You have the right to request a list of certain disclosures we have made of your PHI. This does not include disclosures made for treatment, payment, or healthcare operations, or disclosures you authorized in writing.

Right to request restrictions

You have the right to request that we restrict certain uses and disclosures of your PHI. We are not required to agree to your request unless you are requesting a restriction on disclosures to a health plan for services you have paid for in full out of pocket.

Right to request confidential communications

You have the right to request that we communicate with you about your health information in a particular way or at a particular location. For example, you may ask that we send correspondence to a specific address or contact you by a specific method.

Right to a copy of this Notice

You have the right to obtain a paper copy of this Notice upon request, even if you have agreed to receive the Notice electronically.

Right to be notified of a breach

You have the right to be notified if a breach of your unsecured PHI occurs.

5. Changes to this Notice

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already have about you as well as any information we receive in the future. The current Notice will be posted on our website at getvyoni.com/npp.

6. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

To file a complaint with the Office for Civil Rights, visit hhs.gov/ocr/privacy/hipaa/complaints or call 1-877-696-6775.

7. Contact information

For questions about this Notice, to exercise your rights, or to file a complaint, contact:

Privacy Officer
Hydrohealth Solutions LLC
8 The Green Suite D
Dover, DE 19901
contact@getvyoni.com