Non-Medical Services and HIPAA Applicability Statement

1. Non-Medical Services Only

Episanare Inc. ("Episanare," "we," "us," or "our") provides educational and informational services related to epigenetics, lifestyle optimization, and general wellness. Our services, content, reports, dashboards, and communications are for informational and educational purposes only and do not constitute medical advice, diagnosis, treatment, or clinical care.

Episanare does not practice medicine, does not provide healthcare services, and does not establish a doctor-patient relationship with any user. No information provided by Episanare should be used as a substitute for professional medical advice, diagnosis, or treatment.

Always seek the advice of a physician or other qualified health provider with any questions you may have regarding a medical condition. If you think you may have a medical emergency, call 911 immediately — do not use Episanare's platform to seek emergency assistance.

Episanare's services are classified as consumer wellness and educational services. They are not classified as, and are not subject to regulation as, medical devices, clinical decision-support software, or any other category of regulated healthcare product or service under applicable US federal or state law.

2. No Use for Medical Decisions

Episanare's services are not designed, validated, cleared, or approved for use in medical decision-making, clinical decision support, or for managing, diagnosing, treating, curing, or preventing any disease or medical condition. Biological age estimates, epigenetic scores, biomarker data, and personalized protocol recommendations are wellness outputs for informational and educational purposes only.

By using our services, you agree that you will:

• Not use our services as the basis for making medical decisions.
• Not use our reports or recommendations as a substitute for consultation with a qualified, licensed healthcare professional.
• Not use our services to diagnose, treat, manage, or make clinical decisions about any disease or medical condition in yourself or others.
• Not share our reports or recommendations in a manner that implies medical authority or clinical validity.

We strongly encourage you to share information from your Episanare report with your physician or other qualified healthcare provider. Our reports are designed to support — not replace — an ongoing relationship with a healthcare professional.

3. HIPAA and Protected Health Information

3.1 Episanare's HIPAA Status

Episanare Inc. does not act as a healthcare provider, health plan, healthcare clearinghouse, or business associate of such entities as defined under HIPAA (45 CFR Parts 160 and 164). Accordingly, HIPAA does not govern Episanare's collection, use, or disclosure of information provided by users of our consumer services, and Episanare does not enter into Business Associate Agreements (BAAs) in that context.

3.2 No PHI Permitted on Our Platform

Episanare's services are not intended to receive, store, transmit, or process protected health information (PHI) as defined by HIPAA. By using our services, you agree that you will:

• Not upload, submit, or transmit PHI to Episanare through any channel, including our website, app, forms, reports, or support systems.
• Not use Episanare's services for any purpose that would cause Episanare to be subject to HIPAA obligations.
• Not use Episanare's services on behalf of any HIPAA-covered entity or in a context where our services would function as a HIPAA business associate.

Any health-related information you choose to provide is given voluntarily, in your personal capacity, for informational and wellness purposes only. Such information is not treated as PHI under HIPAA, and Episanare makes no representations that its systems meet HIPAA's technical or administrative safeguard requirements for PHI.

3.3 Partner and Clinic Arrangements

If you are a healthcare provider, clinic, or other HIPAA-covered entity interested in using Episanare in a clinical or professional context, contact us at legal@episanare.com to discuss whether a separate contractual arrangement — including a BAA where appropriate — may apply. Our standard consumer offering is not designed for clinical or HIPAA-regulated use.

4. Data Protection and Privacy

While HIPAA does not apply to our services, Episanare takes privacy and data security seriously. All personal information is handled in accordance with our Privacy Policy and applicable US federal and state data protection laws, including the CCPA/CPRA, VCDPA, CPA, CTDPA, and other state privacy laws.

Our epigenetic and biological data is additionally governed by the genetic-data protection commitments in Section 7 of our Privacy Policy — including our commitments never to sell genetic data, never to share it with insurers or employers, and to apply AES-256 encryption at rest.

5. Scope and Relationship to Other Policies

This statement should be read alongside our Privacy Policy and Terms of Service. In the event of any conflict on matters relating to the non-medical nature of our services or HIPAA applicability, this statement prevails. For all other matters, the Terms of Service govern.

6. Changes to This Statement

We may update this statement from time to time. For material changes, we will notify you by email at least 30 days before they take effect, post a prominent notice on our website, and update the "Last Updated" date above. Continued use of our services after the effective date constitutes acceptance of the revised statement.

7. Contact Information

Legal Department, Episanare Inc. — legal@episanare.com · episanare.com/legal. We aim to respond to all legal inquiries within 10 business days.

© 2026 Episanare Inc. · The Science of Healing Yourself