MyAmino Privacy Policy

1. Introduction

Amino Health Inc. (“Amino Health,” “we,” “us,” or “our”) operates MyAmino, a patient and provider portal accessible at myamino.health (the “Portal”). This Privacy Policy describes how we collect, use, disclose, and protect information submitted to or generated through the Portal by patients, authorized patient representatives, and healthcare providers (collectively, “Users”).

By accessing or using the Portal, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Portal.

2. Who We Are

Amino Health Inc. is a healthcare software company that provides laboratory management and communication software to independent clinical diagnostic laboratories (“Client Laboratories”). The Portal facilitates the secure exchange of clinical information between patients, providers, and Client Laboratories.

3. Information We Collect

3.1 Information You Provide

Patients and Authorized Patient Representatives:

• Full name, date of birth, and gender
• Contact information including email address, mailing address, and phone number
• Health insurance information
• Communications sent through the Portal including messages to providers or Client Laboratories
• Mobile phone number and consent preferences for SMS notifications

Providers (Physicians, Clinicians, and Authorized Staff):

• Full name and professional credentials
• Practice name, address, and contact information
• National Provider Identifier (NPI)
• Account credentials
• Communications sent through the Portal

3.2 Information We Receive from Client Laboratories

Client Laboratories that use our AminoCloud platform may transmit the following information to the Portal on behalf of patients and providers:

• Laboratory test orders
• Specimen collection information
• Laboratory test results and associated reports
• Diagnostic codes (ICD-10)
• Ordering provider information

3.3 Automatically Collected Information

When you use the Portal, we may automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on the Portal
• Access timestamps and session duration
• Referral source

We use this information for security monitoring, system performance, and to improve the Portal. We do not use this information to identify you for marketing purposes.

4. How We Use Your Information

We use the information we collect to:

• Deliver laboratory results and clinical communications to patients and providers
• Authenticate your identity and maintain your account
• Send SMS and email notifications when results or messages are available in the Portal
• Enable secure messaging between patients, providers, and Client Laboratories
• Fulfill our obligations to Client Laboratories under our service agreements
• Comply with applicable federal and state laws, including HIPAA and CLIA
• Detect and prevent unauthorized access, fraud, and security incidents
• Improve, maintain, and support the Portal

We do not use your information for advertising or marketing to third parties. We do not sell your personal information or protected health information.

5. Protected Health Information and HIPAA

To the extent that the Portal processes Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations:

• Amino Health Inc. acts as a Business Associate to Client Laboratories, which are Covered Entities under HIPAA.
• PHI is used and disclosed only as permitted under our Business Associate Agreements with Client Laboratories and applicable law.
• Patients may have rights with respect to their PHI under HIPAA, including the right to access, amend, and receive an accounting of disclosures. Please contact your Client Laboratory or provider to exercise these rights, as they are the Covered Entity responsible for your PHI.
• We implement administrative, physical, and technical safeguards as required by the HIPAA Security Rule to protect electronic PHI.

6. SMS Notifications

If you provide your mobile phone number and opt in to SMS notifications, Amino Health Inc. will send you text messages notifying you when laboratory results or portal messages are available. By opting in, you agree to the following:

• Sender: Amino Health Inc. (MyAmino)
• Message types: Result availability notifications and account alerts
• Message frequency: Varies based on laboratory activity
• Message and data rates may apply depending on your carrier plan
• To opt out: Reply STOP to any message
• For help: Reply HELP or contact help@aminocloud.com

Mobile phone numbers collected for SMS notifications are not shared with third parties or affiliates for marketing or promotional purposes. Opt-in data and consent records are not shared with any third party.

7. How We Share Your Information

We do not sell your information. We may share your information in the following limited circumstances:

With Client Laboratories: We share patient and provider information with the applicable Client Laboratory that ordered or resulted the test, as necessary to provide Portal services.

With Service Providers: We engage third-party vendors who assist us in operating the Portal, including cloud infrastructure providers (Microsoft Azure), authentication services, and SMS delivery providers. These vendors are contractually obligated to protect your information and may only use it to provide services to us.

With Providers: We share patient result information with the ordering provider as directed by the Client Laboratory.

As Required by Law: We may disclose information to comply with a subpoena, court order, regulatory requirement, or other legal obligation, or to protect the rights, property, or safety of Amino Health, our Users, or the public.

With Your Consent: We may share information with third parties when you have provided explicit consent.

8. Data Retention

We retain personal information and PHI for as long as necessary to fulfill the purposes described in this Privacy Policy, satisfy our contractual obligations to Client Laboratories, and comply with applicable law. Retention periods for PHI are governed by our Business Associate Agreements and applicable federal and state law. When information is no longer required, we securely delete or de-identify it.

9. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of data at rest using AES-256
• Multi-factor authentication for provider accounts
• Microsoft Azure infrastructure with SOC 2 Type II-audited controls
• Role-based access controls limiting data access to authorized personnel
• Audit logging of all access to PHI and sensitive records

No security system is impenetrable. In the event of a breach affecting your information, we will notify affected users and applicable regulators as required by HIPAA and applicable law.

10. Your Rights

Depending on your jurisdiction, you may have the following rights:

All Users:

• Right to access your account information
• Right to correct inaccurate account information by contacting us
• Right to request deletion of your account (subject to legal retention obligations)
• Right to opt out of SMS notifications at any time by replying STOP

California Residents (CCPA/CPRA):

• Right to know what personal information we collect and how we use it
• Right to delete personal information (subject to legal exceptions)
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (we do not sell or share personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at legal@aminocloud.com.

11. Children's Privacy

The Portal is not intended for use by individuals under the age of 18 except when accessed by a parent or legally authorized guardian managing a minor's health records. We do not knowingly collect personal information from minors without verifiable parental or guardian consent.

12. Third-Party Links

The Portal may contain links to third-party websites or resources. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you via email or an in-portal notice. Your continued use of the Portal after changes are posted constitutes your acceptance of the updated policy.

14. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us at:

Amino Health Inc.
Privacy & Compliance
Email: legal@aminocloud.com
Web: myamino.health