HIPAA Notice of Privacy Practices

Family Rx uses a HIPAA-covered clinical system (PracticeQ) as the sole system of record for your protected health information (“PHI”) — your intake responses, symptoms, visit history, provider notes, and prescriptions. Your PHI is never stored in, or accessible from, your Soluna account, the Family Rx website, or the Family Rx app itself— those hold only your identity information (email, password, and which Soluna properties you’ve activated), governed separately by our Privacy Policy. This separation is a deliberate architectural choice, not an incidental one — see “Our Duty to Protect Your Information” below.

We are required by law to maintain the privacy of your PHI, to provide you with this Notice of our legal duties and privacy practices, to abide by the terms of the Notice currently in effect, and to notify you if a breach occurs that compromises the privacy or security of your PHI.

The following categories describe the ways we are permitted to use and disclose PHI without your written authorization:

• For Treatment. We may use and disclose your PHI to provide, coordinate, or manage your care and related services — for example, so a licensed provider can review your intake and respond to your visit, or so we can send a prescription to your pharmacy.
• For Payment. We may use and disclose your PHI to bill and collect payment for the services you receive — for example, to process a charge for a completed visit.
• For Healthcare Operations. We may use and disclose your PHI for activities like quality assessment, provider training, and business management — for example, reviewing whether our visit process is working as intended.
• As Required by Law. We will disclose your PHI when required to do so by federal, state, or local law.
• Public Health and Safety. We may disclose PHI to public health authorities for purposes such as preventing or controlling disease, reporting adverse events, or in limited circumstances to avert a serious threat to health or safety.
• Health Oversight Activities. We may disclose PHI to a health oversight agency for activities authorized by law, such as audits or licensure investigations.
• Judicial and Administrative Proceedings. We may disclose PHI in response to a court or administrative order, subpoena, or other lawful process, subject to applicable legal requirements.
• To Avert a Serious Threat. We may disclose PHI when necessary to prevent a serious threat to your health or safety, or the health or safety of the public or another person.

Uses and disclosures not described above require your written authorization— including any use of your PHI for marketing purposes or sale of your PHI. You may revoke a prior authorization in writing at any time, except to the extent we’ve already relied on it.

• Right to Access. You have the right to inspect and receive a copy of your PHI, with limited exceptions. Requests should be made in writing to the contact below; we will respond within the timeframe required by law.
• Right to Amend. You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete. We may deny the request in certain circumstances, and will explain why in writing if we do.
• Right to an Accounting of Disclosures. You have the right to request a list of certain disclosures we've made of your PHI, other than for treatment, payment, healthcare operations, and certain other excepted categories.
• Right to Request Restrictions. You have the right to request a restriction on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree, except where the disclosure is to a health plan for payment/operations purposes and the PHI relates to a service you paid for out of pocket in full.
• Right to Request Confidential Communications. You have the right to request that we communicate with you about your health information in a certain way or at a certain location (for example, a specific phone number or email address).
• Right to a Paper Copy. You have the right to request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
• Right to File a Complaint. If you believe your privacy rights have been violated, you may file a complaint with us using the contact information below, or with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be retaliated against for filing a complaint.

support@solunaone.com · Soluna Health LLC, 8903 Glades Rd, Ste A8 #2495, Boca Raton, FL 33434, United States

Please include “HIPAA Notice” in the subject line of any written request related to this Notice.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, by mail (200 Independence Avenue SW, Washington, D.C. 20201), by calling 1-800-368-1019, or through the OCR Complaint Portal at hhs.gov/ocr/complaints.

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already maintain, as well as PHI we create or receive in the future. The current version will always be available on this page.