Notice of Privacy Practices

Effective date: August 13, 2026 · Contact: support@joinvaylen.com

This notice describes how medical information about you may be used and disclosed, and how you can get access to it. Please review it carefully. This notice is presented on behalf of the licensed clinicians practicing through OpenLoop Health and the dispensing pharmacies — the HIPAA covered entities in your care. It applies to protected health information (“PHI”) they create or receive in connection with your clinical services. Vaylen itself is not a medical provider; it supports these entities as a care-coordination platform.

How your health information may be used

Treatment: your reviewing clinician and dispensing pharmacy use and share your PHI to evaluate, prescribe (where appropriate), fill and manage your care.
Payment: to process charges, refunds and billing records for your program.
Health care operations: quality review, safety monitoring, licensing and compliance.
As required by law: public-health reporting, lawful subpoenas, and safety emergencies.

Uses beyond these, including any use of PHI for marketing or any sale of PHI, require your written authorization, which you may revoke at any time.

Your rights

Access: request a copy of your health records.
Amendment: request correction of records you believe are inaccurate.
Accounting: request a list of certain disclosures.
Restrictions: request limits on certain uses and disclosures.
Confidential communications: ask to be contacted in a specific way or at a specific location.
Breach notification: be notified if a breach of unsecured PHI affects you.
Paper copy: receive a copy of this notice on request.

Complaints

If you believe your privacy rights have been violated, you may complain to us at support@joinvaylen.com and to the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.

Our duties

We are required by law to maintain the privacy and security of your PHI, to provide this notice of our legal duties and privacy practices, and to abide by the notice currently in effect. We reserve the right to change this notice; material changes will be posted here with a new effective date.