Effective Date: April 22, 2026 | Last Revised: April 1, 2026 | Jurisdiction: Delaware C-Corporation operating in New Jersey and all 50 states

BioPhoenix Inc. (“BioPhoenix,” “we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website (biophoenixhealth.com), use our patient portal, or engage with our telehealth platform and related services (collectively, the “Platform”).

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING OUR PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THE TERMS OF THIS POLICY.

1. WHO WE ARE

BioPhoenix Inc. is a Delaware C-Corporation with its principal place of business in Barnegat, New Jersey. BioPhoenix operates as a marketing and management services organization (MSO). We are not a licensed medical practice, hospital, or pharmacy. Clinical services accessed through our Platform are provided exclusively by independent, licensed healthcare professionals and physician-owned professional corporations operating independently from BioPhoenix Inc.

For purposes of the Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act, BioPhoenix functions as a Business Associate to our clinical platform partners who serve as the Covered Entities. Our clinical partners operate under separate Business Associate Agreements (BAAs) that govern the handling of Protected Health Information (PHI). This Privacy Policy addresses both our general privacy practices and our HIPAA obligations as a Business Associate.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

We collect information you voluntarily provide to us, including:

Identity and Contact Information: Full name, date of birth, gender, mailing address, email address, phone number, and government-issued identification for age and identity verification.
Health and Medical Information: Medical history, current medications, medication allergies, treatment goals, prior medical records, and responses to health intake questionnaires. This information constitutes Protected Health Information (PHI) under HIPAA.
Payment Information: Credit card numbers, ACH banking information, and billing address. Payment data is processed through PCI-DSS compliant third-party payment processors. BioPhoenix does not store complete credit card numbers on its servers.
Account Credentials: Username, password, and security question responses for your patient portal account.
Communications: Messages, emails, and other communications you send to us or your care team through the Platform.

2.2 Information Collected Automatically

When you access our Platform, we automatically collect:

Technical Data: IP address, browser type and version, operating system, device identifiers, and referring URLs.
Usage Data: Pages visited, features accessed, time spent on pages, click paths, and session duration.
Cookie and Tracking Data: Information collected through cookies, web beacons, pixel tags, and similar technologies. See Section 9 for our complete Cookie Policy.
Location Data: General geographic location derived from IP address. We do not collect precise GPS location without your explicit consent.

2.3 Information from Third Parties

We may receive information about you from:

Clinical Platform Partners: Our contracted telehealth platform vendors (including healthcare technology companies that host our patient management and provider systems) may share de-identified operational data and referral tracking information consistent with applicable law and BAA terms.
Laboratory Partners: If you participate in lab-based monitoring programs, laboratory results may be transmitted to your care team through our clinical partners’ systems.
Affiliate and Referral Partners: Non-clinical marketing partners may provide us with contact information when you are referred to our services through their platforms.
Analytics Providers: Third-party analytics services may provide aggregated and de-identified data about Platform usage.

3. HOW WE USE YOUR INFORMATION

3.1 To Provide and Operate Our Services

Creating and managing your patient portal account.
Facilitating your connection to licensed healthcare providers for telehealth consultations.
Processing subscription enrollment, billing, and payment.
Coordinating prescription fulfillment with licensed compounding pharmacies through your care team.
Sending appointment reminders, treatment reminders, and care follow-up communications.
Providing customer support and responding to your inquiries.

3.2 For Business Operations

Analyzing Platform usage to improve our services and user experience.
Conducting quality assurance and compliance reviews.
Preventing fraud, unauthorized access, and other illegal activity.
Complying with legal obligations and regulatory requirements.
Enforcing our Terms of Service and other agreements.

3.3 For Marketing and Communications (with your consent)

Sending promotional emails, newsletters, and wellness content if you have opted in.
Conducting remarketing and advertising campaigns through compliant paid advertising platforms.
Personalizing content and recommendations based on your program participation.

You may opt out of marketing communications at any time by clicking ‘Unsubscribe’ in any marketing email or contacting us at privacy@aadilk.com. Opting out of marketing communications does not affect transactional communications related to your active care program.

3.4 What We Will NEVER Do With Your Information

BioPhoenix will never sell, rent, or trade your personal information or Protected Health Information to third parties for their marketing purposes. We do not monetize your health data.