Notice of Privacy Practices.

1. Our Commitment to Your Privacy

Mino MD ("we," "us," or "our") is committed to protecting the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the HITECH Act, and applicable state laws. This Notice describes how medical information about you may be used and disclosed, and how you can get access to this information.

2. Protected Health Information (PHI)

PHI includes any individually identifiable health information that we create, receive, maintain, or transmit electronically, including but not limited to:

• Your name, address, date of birth, and contact information
• Medical history, diagnoses, and treatment plans
• Prescription information, including GLP-1 medication records
• Lab results, weight, and biometric data
• Communications with your healthcare provider
• Billing and payment information

3. How We Use and Disclose Your PHI

We may use and disclose your PHI for the following purposes without your authorization:

• Treatment: To provide, coordinate, and manage your healthcare, including GLP-1 prescriptions and telehealth consultations
• Payment: To bill and collect payment for your healthcare services
• Healthcare Operations: For quality assurance, compliance, and administrative purposes

4. Technical Safeguards

• Encryption: All PHI is encrypted at rest (AES-256) and in transit (TLS 1.3)
• Access Controls: Role-based access ensures only authorized personnel can view PHI
• Audit Logging: All access to PHI is logged per 45 CFR 164.312(b), including user identity, timestamp, action performed, and IP address
• Session Management: Automatic session timeout and secure cookie handling
• Digital Signatures: All e-prescriptions require physician digital signature before activation

5. E-Prescribing

Mino MD supports electronic prescribing (e-prescribe) of GLP-1 medications. All prescriptions are digitally signed by a licensed physician, include NDC codes for pharmacy verification, and are logged in the HIPAA audit trail. Prescriptions require explicit physician signature before becoming active.

6. Your Rights

• Access: You have the right to inspect and obtain a copy of your PHI
• Amendment: You may request that we amend your PHI if you believe it is incorrect
• Accounting of Disclosures: You may request a list of certain disclosures of your PHI
• Restriction: You may request restrictions on certain uses and disclosures
• Confidential Communications: You may request that we communicate with you in a certain way
• Breach Notification: You will be notified if there is a breach of your unsecured PHI

7. Contact Information

For questions about this Notice or to exercise your privacy rights, contact our Privacy Officer at hello@mino.inc.

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.