Effective Date: November 19, 2025

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED BY Sentia AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW THIS DOCUMENT CAREFULLY.

Sentia keeps a record of medical information that you provide to us and medical information related to the health care services we provide to you. Medical information means any information that (1) identifies you and (2) relates to your past, present, or future physical or mental health, treatment, or payment for treatment. Medical information includes your medical history, diagnoses, treatments, current medical condition, and use of prescription medications.

Most Sentia patients receive therapeutic services from our network of independently contracted licensed therapists (“Providers”), in which case Sentia acts as a Business Associate under HIPAA, by providing platform and other services on behalf of a Provider, pursuant to a written agreement called a Business Associate Agreement. Some Sentia patients receive therapeutic services directly from a Sentia employee, in which case Sentia acts in the role of a Covered Entity, under HIPAA. This Notice of Privacy Practices outlines our responsibilities, and your rights and options, when we are acting in either capacity.

If you have any questions about this Notice, please contact our Privacy Officer using the contact information listed below.

‍Our Responsibilities

We are required by law to:

• maintain the privacy and security of your medical information
• assure that you are notified if a breach occurs that may have compromised the privacy or security of your medical information
• follow the duties and practices described in this Notice and provide you with a copy
• not sell your information without your authorization

‍

Our Uses and Disclosures

Pursuant to HIPAA, Sentia typically uses or shares your medical information for the following purposes, without your written authorization:

• Treatment. We use your information to provide you with mental health and related medical services, which you receive from Sentia directly or from one of our contracted Providers. For example, we may disclose your medical information to therapists and other persons who need the information to provide care to you.
• Health Care Operations.  We use and share your medical information to run our organization and contact you or your designated and approved contacts when necessary. These uses and disclosures help us operate the Sentia platform and improve patient care. For example, we may use your medical information to review provider performance, comply with laws and regulations, or analyze information to create new models of treatment, so that we can continuously improve the delivery of health care services to you. Except as otherwise agreed to, we may use advanced technology, including artificial intelligence, to improve the quality and efficiency of the healthcare we provide. This technology may analyze your health information to support healthcare operations, such as quality assessment activities, developing clinical guidelines, and planning for services. We maintain strict security measures designed to safeguard your information when used in these technologies.
• Bill for services. We can use and share your medical information to bill and get payment for services, from you, or from health plans. For example, we can use and share your payment information with payment processors or use and share your medical information to bill and get payment from your insurer.
  ‍

We may share your medical information in other ways as permitted by HIPAA. For example, we may also use and disclose your medical information without your written authorization as follows:

• Business Associates. As a Covered Entity or when acting as a Business Associate, Sentia also contracts with third parties to perform certain services for us, such as information technology or advisory and accounting services. In some cases, these third-party service providers, also called Business Associates, may need to access your medical information to perform the services. Business Associates are required by law and contract to protect your medical information, and to limit use and disclosure to the services provided on our behalf.

• Public Health and Safety. We may share your medical information for certain situations such as reporting adverse reactions to medications; reporting suspected abuse, neglect, or violence; or preventing or reducing a serious threat to anyone’s health or safety.
• Research. We may use your medical information to conduct research and/or disclose it to researchers with your authorization and/or when the research study is reviewed and approved by an Institutional Review Board before the study begins.
• Comply with the Law. We will disclose your medical information when required to do so by applicable law.
• Military and Veterans. If you are a member or veteran of the armed forces, we may disclose your medical information as required by military authorities.
• Health Oversight Activities. We may disclose your medical information to a health oversight agency for activities authorized by law, including audits, investigations, inspections, and licensure.
• Legal Activities. We may share your medical information in response to a court or administrative order; a subpoena; a workers’ compensation claim; a law enforcement request; or in connection with special government functions such as military, national security, and presidential protective services. If you are or become an inmate of a correctional institution, we may disclose your medical information to the institution or its agents for your health and the health and safety of others.
• De-identified PHI: We may de-identify your health information as permitted by law. Except as otherwise agreed to, we may use or disclose to others the de-identified information for any purpose, without your further authorization or consent, including but not limited to research studies, development of artificial intelligence tools, and health care/health operations improvement activities.

Uses and disclosures of medical information that are not discussed by this Notice or required by law will only be made with your written permission. Sentia will not sell your medical information to others.

If you provide us authorization to use or disclose your medical information, you may revoke that authorization in writing at any time by sending a revocation request to the address listed at the end of this Notice. If you revoke your authorization, we will no longer use or disclose your medical information about you for the reasons covered by your written authorization except to the extent that we have already acted in reliance on your authorization.

‍Your Rights

When it comes to your medical information, you have certain rights. This section explains your rights and some of Sentia’s responsibilities to help you.

Inspect or get an electronic or paper copy of your medical record
You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. If you would like, we also can send this information in either paper or electronic form to another person you identify in your request.

Some of your information is available directly to you through the Service itself. Please contact privacy@sentia.care if you need technical support to navigate these features or functions.

Request confidential communications
You can ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.

We will say “yes” to all reasonable requests.

Ask Sentia to limit what we use or share with others
You can ask us not to use or share certain health information for treatment, payment, or Sentia operations. We are not required to agree to your request, and we may say “no” if it would be harmful or compromise your care.

If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.

To request that we restrict certain information, contact privacy@sentia.care.

‍

Get a list of those with whom we’ve shared information
You can ask for a list (accounting) of the times we have shared your health information for six years prior to the date you ask, who we shared it with, and why.

We will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures (such as any you asked us to make). We will provide one accounting a year for free but will charge a reasonable, cost-based fee if you ask for another one within 12 months.

To request an accounting, contact privacy@sentia.care.

‍Get a copy of this privacy notice
You can ask for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. Sentia will provide you with a paper copy promptly.

‍Choose someone to act for you
If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.

We will make sure the person has this authority and can act for you before we take any action.

File a complaint if you feel your rights are violated
You can complain if you feel we have violated your rights by contacting us at privacy@sentia.care..

You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by:

Sending a letter: 200 Independence Avenue, S.W., Washington, D.C. 20201

Calling: 1-877-696-6775

Visiting: www.hhs.gov/ocr/privacy/hipaa/complaints/‍

We will not retaliate against you for filing a complaint.

‍

Your Choices

For certain health information, you can tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.

In these cases, you have both the right and choice to tell us to:

• Share information with your family, close friends, or others involved in your care
• Share information in a disaster relief situation

In the following cases we never share your protected health information unless you give us written permission:

• Marketing purposes
• Sharing of medical information

Sentia does not sell or rent our patients’ names or addresses to any organization outside of Sentia.

Changes to the Terms of This Notice
Sentia can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available on our web site at https://www.sentia.care/legal/privacy.html.

Contact Information
If you want to file a complaint, express concerns, or further inquire about Sentia’s use or disclosure of health information, please contact the Sentia Privacy Officer by sending an email to privacy@sentia.care.‍

‍Important Information on our AI Tools

Our AI Tools are each designed for a specific function, and help us empower providers through clinical insights and assistive tools. For example, our Smart Note feature helps providers document care sessions by summarizing text in a pre-defined note format. These notes still require provider input; providers must review and edit notes before submission.

This notice gives you information on how Sentia (“we”, “us”, “our”) protects your personal data in our use of the AI Tools we have designed. This notice is supplemental to our Data Protection Privacy Notice which you can view here.

Important Information on GPT Technology

Our AI Tools use generative large language models (the “language models”). The language models use a variety of techniques to generate human-like text based on prompts and messages from users and the large dataset the language models were trained on. The language models were developed by Sentia, based on publicly available “open-weight” models.