HIPAA Policy

HIPAA Compliance Statement

SaveLife.AI Inc. offers services, such as helping you to connect with healthcare providers (each, “Your Healthcare Provider”) and to communicate, manage and share your health-related information with your Healthcare Providers (“SaveLife.AI Services”). As part of providing the SaveLife.AI Services, we may collect, use, share, and exchange your health history forms and other health-related information with your Healthcare Providers.

Under a federal law called the Health Insurance Portability and Accountability Act (“HIPAA”), health and health-related information may be considered “protected health information” or “PHI” if such information is received from or on behalf of your Healthcare Providers.

SaveLife.AI Inc. is committed to and has implemented many safeguards to ensure its devices, services, websites and data systems (collectively “Products”) are compliant with the regulations and conditions set forth in the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

To ensure HIPAA and HITECH Act compliance, SaveLife.AI Inc.:

• Has developed and implemented a comprehensive HIPAA Compliance Program following the HIPAA Privacy and Security Rule
• Has a designated HIPAA Privacy and Security Compliance Officer
• Provides every member of staff, including new hires, with annual HIPAA training
• Has a formal established Employee Sanctions Policy for HIPAA compliance violations
• Ensures technological protocols: tight access controls, integrity procedures, firewalls, information systems activity monitoring, encryption, automatic logoffs, password management procedures, and VPN tunnel
• Has conducted a formal risk assessment to identify and document areas of risk associated with the storage, transmission, and processing of ePHI
• Has limited access to ePHI
• Uses HIPAA-compliant cloud services for its products

Safeguards for PHI

HIPAA protects the privacy and security of your PHI by limiting the uses and disclosures of PHI by most healthcare providers and by health plans (called “Covered Entities”) as well as companies, like SaveLife.AI, that provide certain types of assistance to Covered Entities (called “Business Associates”).

Under certain circumstances described in HIPAA, an individual needs to sign an Authorization form before a Covered Entity, like your Healthcare Provider(s), can disclose protected health information to a third party.

Non-Protected Health Information

As a condition of creating your SaveLife.AI account, you are required to read and agree to SaveLife.AI's Privacy Policy. SaveLife.AI's Privacy Policy explains how SaveLife.AI processes and shares information received from you that is not covered by HIPAA (“Non-PHI”).

Your PHI Authorization

The purpose of this SaveLife.AI Authorization (“Authorization”) is to request your written permission to allow SaveLife.AI to use and disclose your PHI in the same way as we use and disclose your Non-PHI.

If SaveLife.AI is a Business Associate of Your Healthcare Providers, SaveLife.AI needs your Authorization to be able to use and disclose your PHI in the same way it can currently use and disclose your Non-PHI when SaveLife.AI is not working on behalf of your Healthcare Providers, but is instead working on its own behalf.

How We Use Your PHI

If you e-sign this Authorization, you give your permission to SaveLife.AI to retain your PHI and to use and/or disclose your PHI. Specifically, you agree that SaveLife.AI can use your PHI to:

• Conduct health care operations as defined under HIPAA
• Enable and customize your use of the SaveLife.AI Services
• Provide you alerts or other communications regarding current and future SaveLife.AI Services
• Notify you regarding providers we think you may be interested in
• Provide you with updates and information about the SaveLife.AI Services
• Conduct analysis for SaveLife.AI's business purposes
• Support development of the SaveLife.AI Services
• Create de-identified information and use it as permitted by law

You also agree that SaveLife.AI can disclose your PHI to:

• Third parties assisting SaveLife.AI with any of the uses described above
• Your Healthcare Providers to enable them to refer you to and make appointments with other providers
• A third party as part of a potential merger, sale, or acquisition of SaveLife.AI
• Business partners who assist us by performing core services (hosting, billing, data storage and security) related to the operation of our services
• A provider of medical services, in the event of an emergency
• Organizations that collect, aggregate and organize your information so they can make it more easily accessible to your providers

Redisclosure

If SaveLife.AI discloses your PHI, SaveLife.AI will require that the person or entity receiving your PHI agrees to only use and disclose your PHI to carry out its specific business obligations to SaveLife.AI or for the permitted purpose of the disclosure. SaveLife.AI cannot, however, guarantee that any such person or entity will not re-disclose it in ways that you or we did not intend or permit.

Expiration and Revocation of Authorization

Your Authorization remains in effect until you provide written notice of revocation to SaveLife.AI.

You can change your mind and revoke this Authorization at any time and for any (or no) reason.

If you wish to revoke this Authorization, you must notify SaveLife.AI by submitting a revocation through your account settings page. Your decision not to execute this Authorization or to revoke it at any time will not affect your ability to use certain of the SaveLife.AI Services.

A Revocation of Authorization is effective after you submit it to SaveLife.AI, but it does not have any effect on SaveLife.AI's prior actions taken in reliance on the Authorization before revoked.

Business Associate Agreement (BAA)

This Business Associate Agreement (the “BAA”) is made and entered into between SaveLife.AI, Inc., a company incorporated under the laws of Texas, USA (“Business Associate”), and a client who has entered into this agreement with the Business Associate (“Covered Entity”) in accordance with the meaning given to those terms at 45 CFR §164.501.

In providing services pursuant to the Agreement, Business Associate will have access to Protected Health Information. By providing the services, Business Associate will become a “business associate” of the Covered Entity as defined under HIPAA.

Both Parties are committed to complying with all federal and state/provincial laws governing the confidentiality and privacy of health information, including the Standards for Privacy of Individually Identifiable Health Information found at 45 CFR Part 160 and Part 164, Subparts A and E (collectively, the “Privacy Rule”).