Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY

 

This Notice of Privacy Practices (the “Notice”) explains how MediKarma, Inc. (the “Company”) protects your medical information. It applies to all Company employees, staff, volunteers, and other workers who help take care of you.

​

The Company and these workers will follow the rules in this Notice. With your permission, and as allowed or required by law, we may use or share your medical information to handle your treatment, get paid, or run our health care operations.

​

This Notice explains your rights to see and control your medical information. This includes details that identify you and relate to your past, present, or future physical health, mental health, and medical care.

 

THE COMPANY’S PLEDGE REGARDING MEDICAL INFORMATION

The Company knows that your medical and health information is private. We are dedicated to protecting it. To give you great care and follow federal and state laws, the Company keeps a record of the services you receive.

This Notice applies to all records of your care made by the Company. This Notice shows you how the Company can use and share your medical information. It also outlines your rights and our duties regarding your private info.

The law requires the Company to:

• (1) Keep your personal medical information private.

• (2) Give you this Notice explaining our legal duties and privacy rules.

• (3) Follow the terms of the Notice that is currently active.

• (4) Tell you if anyone accesses or uses your unsecured medical info without permission.

 

A WORD ABOUT FEDERAL AND STATE LAW

Both federal and state laws have rules to protect your health information. Sometimes state and federal laws are different. If your state law protects your privacy more or gives you more access to your records, the state law overrides the federal law.

 

HOW THE COMPANY MAY USE AND DISCLOSE MEDICAL INFORMATION ABOUT YOU

The list below shows the different ways the Company can use or share your protected medical information. We explain each category and give some examples. We do not list every single use, but any way we share your info will fit into one of these categories.

Some sensitive details have extra protections. This includes therapy notes, drug and alcohol treatment records, HIV status, and mental health info.

• For Treatment. The Company can use your medical information to treat you. We can also use it to coordinate and manage your medical care and services. We can share your info with Company staff or other doctors who are treating you.

• For Payment. The Company can use and share your medical information so we can get paid for your treatment and services. For example, we may send information to your health insurance plan. This helps them pay the Company or refund you for your care. We can also tell your health plan about a planned treatment to see if they will cover the cost.

• For Health Care Operations. The Company can use and share your medical information to run our business correctly. We do this to ensure quality care, check compliance, manage the business, handle complaints, or deal with lawsuits. For example, we might review your information to grade the quality of our services or evaluate our staff's performance.

• To Individuals or Family Members Involved in Your Health Care. Unless you object in writing, the Company can share your medical information with family members, relatives, close friends, or anyone else you name who helps with your care. Unless you object in writing, we can also tell your family, friends, or legal representative your location, general health status, or if you pass away.

• Emergencies. The Company can share your medical info with public or private disaster relief groups so your family can find out your location and status. You can stop this by making a written request. However, if you are not available, cannot respond, or if there is an emergency, the Company will use its best professional judgment to decide if sharing your info is right for you.

• For Fundraising Activities. The Company can use your medical information to contact you about Company events, including fundraisers. We will only use basic contact details like your name, address, and phone number.

• As Required By Law. The Company will share your health information whenever local, state, or federal law forces us to do so.

• Workers’ Compensation. The Company may release your medical info for workers' compensation programs. These programs give benefits to people who get sick or hurt at work.

• For Public Health Activities. The Company can share your medical info to help with public health. These goals usually include: (1) preventing or controlling sickness, injury, or disability; (2) reporting deaths; (3) reporting abuse or neglect of children, seniors, and dependent adults; (4) reporting bad reactions to medicines or issues with medical products; (5) telling people about product recalls; and (6) warning someone who might have been exposed to a disease or is at risk of catching or spreading a condition. Your personal identity will be removed from this information unless state or federal law requires us to keep it.

• For Health Oversight Activities. The Company can share your medical information with government health agencies when required by law.

• For Lawsuits and Disputes. The Company can share your medical info if we receive a court order, a legal order from a judge, a subpoena, or a legal discovery request.

• Disclosure to Law Enforcement. The Company can share your medical information with the police if required or allowed by law. We may do this: (1) to find a suspect, fugitive, witness, or missing person; (2) to help a suspected crime victim if we cannot get their permission under limited circumstances; (3) to report a death that might be from a crime; (4) to report a crime that happened at the Company; and (5) during a medical emergency to report a crime, find the location or victims, or describe the person who committed the crime.

• Decedents. The Company can release medical information to a coroner or medical examiner. This helps identify a deceased person or discover the cause of death. We can also share info with funeral directors. Unless you object, we can share info with a family member or close friend who helped pay for or take care of you before you died. Your medical information can be shared without permission 50 years after the date of your death.

• For Specialized Government Functions. The Company can share your medical information with authorized federal agents for intelligence, spying defenses, and national security duties.

• Information About Inmates/Individuals in Custody. If you are a prisoner or held by police, the Company can share your medical information with jail officials or law enforcement as allowed or required by law.

• Disclosure For Threats to Health and Safety. In certain cases, the Company must share medical information with police to stop a serious threat to your health and safety or the safety of another person. We will follow the law closely and only share the exact details needed.

 

SPECIAL PROVISIONS RELATED TO PATIENT PRIVACY                   

• Psychotherapy Notes. The Company will never release your therapy notes without your specific, written permission.

• Marketing. The Company will never share your medical information for marketing purposes without your written permission.

• Sale of Medical Information. The Company will never sell your medical information without your written permission.

 

YOUR RIGHTS REGARDING YOUR ACCOUNT INFORMATION, INCLUDING DELETION

Data Retention and Deletion

• Medikarma only keeps user data, including health info, for as long as needed to give you services and follow the law. This includes following the Health Insurance Portability and Accountability Act (HIPAA). Different types of data are kept for different amounts of time, and some health records must be kept by law.

• You can delete your data at any time. To do this using the app: Go to Profile, click Profile Information, and select DELETE.

• Your data will be deleted immediately or within a reasonable time. The only exception is if we must keep it for legal, regulatory, security, or audit reasons. We may also keep data that has been stripped of your name and identity for research or to improve our services.

 

You have the following rights regarding your medical information. To use these rights, you must contact the HIPAA Privacy Officer at the Company. You may be asked to write down your request. You can reach the officer here:

Medikarma, Inc
Attn: HIPAA Privacy Officer
2603 Camino Ramon, Suite #200
San Ramon, CA 94583
Email: info@medikarma.com

• Right to Inspect and Copy. With a few exceptions, you have the right to look at and get copies of your medical information.

• Amendment. If you believe your medical information is wrong or incomplete, you can ask the Company to fix it.

• Right to an Accounting of Disclosures. You have the right to get a list showing the times we shared your medical information with outside parties.

• Right to Request Restrictions. You have the right to ask us to limit how the Company uses or shares your medical information for treatment, payment, or business operations. You can also ask us to limit the info we share with family members or friends who help care for you.

• Request Confidential Communications. You have the right to ask the Company to contact you about appointments or treatment in a specific way or at a specific location (like calling a specific phone number or mailing a specific address).

• Receive a Copy. You have the right to get a paper or electronic copy of this notice.

 

CHANGES TO THIS NOTICE

The Company has the right to change the rules in this Notice at any time. We have the right to make the new rules apply to the medical info we already have, as well as any info we get in the future. The Company will post a copy of the current Notice with the active date on it.

 

QUESTIONS AND COMPLAINTS

If you have questions or believe your privacy rights were violated, you can contact the Company’s HIPAA Privacy Officer in person or mail a written summary of your issue to info@medikarma.com. You will not be punished or faced with revenge for filing a complaint.

 

OTHER USES OF MEDICAL INFORMATION

Any other uses or sharing of your medical info not mentioned in this Notice or allowed by law will only be done with your written permission. If you give the Company permission, you can cancel it in writing at any time. If you cancel it, the Company will stop sharing your info for those reasons. However, we cannot take back any info we already shared while your permission was active. The Company must also keep records of the actual medical care we gave you.

 

ACKNOWLEDGMENT OF RECEIPT

By signing this form, you agree that you received this Notice of Privacy Practices from Medikarma, Inc.

 

Last updated on 29 March 2026.