Notice of Privacy Practices

Effective Date: April 5, 2026

1. Our Commitment to Your Privacy

Virile.ai and its affiliated provider networks — including OpenLoop Health and CareValidate (both pending formal approval) — are committed to protecting the privacy of your health information. This Notice describes how we may use and disclose your Protected Health Information ("PHI") and your rights regarding that information, in accordance with HIPAA, the HITECH Act, and applicable state laws.

2. What is Protected Health Information (PHI)?

PHI is individually identifiable health information relating to your past, present, or future physical or mental health condition, the provision of healthcare to you, or payment for healthcare services. PHI includes information in any form — electronic, paper, or oral.

3. How We May Use and Disclose Your PHI

For Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare. This includes sharing information with treating physicians, nurses, and pharmacy partners involved in your care.

For Payment

We may use and disclose your PHI to bill and collect payment for services, including sharing with health plans or payment processors (Stripe).

For Healthcare Operations

We may use your PHI for internal operations, including quality assessment, physician credentialing, training, auditing, and compliance.

As Required by Law

We will disclose PHI when required by law, including for:

• Public health activities (disease reporting, FDA reporting)
• Victims of abuse, neglect, or domestic violence
• Health oversight activities (audits, investigations)
• Judicial and administrative proceedings
• Law enforcement purposes
• Averting a serious threat to health or safety
• Specialized government functions
• Workers' compensation
• Coroners, medical examiners, organ donation

With Your Authorization

For uses not described here, we will obtain your written authorization first. You may revoke any authorization at any time in writing.

4. Uses and Disclosures We Will NOT Make

We will never:

• Sell your PHI to third parties
• Use your PHI for marketing without explicit authorization
• Share your PHI with advertisers, data brokers, or social media platforms
• Disclose psychotherapy notes without authorization

5. Your Rights Regarding Your PHI

Right to Access

You may inspect and obtain copies of your PHI. Requests must be in writing. We respond within 30 days.

Right to Amend

You may request corrections to inaccurate PHI. We may deny certain requests with written explanation.

Right to Accounting of Disclosures

You may request a list of disclosures made for purposes other than treatment, payment, or operations. First request per 12-month period is free.

Right to Request Restrictions

You may request restrictions on uses of your PHI. We must comply if the disclosure is to a health plan for a service you paid for out of pocket in full.

Right to Confidential Communications

You may request we communicate about your health information in a particular way or at a particular location.

Right to a Paper Copy

You may obtain a paper copy of this Notice at any time.

Right to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with HHS. We will not retaliate.

6. Our Duties

• Maintain the privacy and security of your PHI
• Provide this Notice of our legal duties and practices
• Abide by the terms of this Notice
• Notify you if a breach of unsecured PHI occurs

7. Changes to This Notice

We may change this Notice at any time. Revised notices will be posted on our website with an updated effective date.

8. Contact Information

You may also file a complaint with: