End user agreement

END USER AGREEMENT
FOR
AUTHORIZATION FOR RELEASE OF PERSONALLY IDENTIFIABLE HEALTH INFORMATION

This End User Agreement and Authorization for Release of Personally Identifiable Health Information (the "Agreement") is by and between Reperio Health, Inc. ("Reperio") and the individual end user of Reperio's products or services and, as applicable, the authorized representative(s) of any such end user ("End User" or "You"). This Agreement authorizes Reperio to release certain of Your personally identifiable health information ("PIHI") to the third parties designated below. This Agreement is intended to constitute an authorization to disclose your PIHI in accordance with the requirements of applicable federal and state health privacy laws and regulations including but not limited to those set forth under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations (e.g., 45 C.F.R. Part 160 and Subparts A and E of Part 164).

1. Authorization for Disclosure of Personally Identifiable Health Information

You hereby authorize the use and disclosure of Your personally identifiable health information as described below.

Persons/organizations authorized to provide your PIHI: Reperio Health, Inc.

Specific description of information to be used or disclosed: You authorize Reperio to disclose all PIHI of End User relating to any screening or diagnostic tests provided to You by Reperio ("Reperio Screening"), including but not limited to Your test and screening results from Reperio Screening and any PIHI resulting from other products or services provided to You by Reperio.

Biometric Information Consent: By accepting this Agreement, You expressly consent to Reperio's collection, use, storage, and processing of Your biometric identifiers and biometric information for the purpose of providing health screening services and generating Your health results. You understand that Reperio will not sell, lease, trade, or otherwise profit from Your biometric information. Your biometric information will be protected using industry-standard security measures and will be permanently destroyed no later than ten (10) years after Your last interaction with the Services or when the initial purpose for collecting such information has been satisfied, whichever occurs first.

This Agreement is effective upon You clicking the box affirming that You have read and agree to the terms of this Agreement or by otherwise providing Your consent to such terms. This Agreement will last perpetually and will not terminate unless and until You or Your authorized representative expressly and affirmatively revokes Your authorization under this Agreement as provided below. If You request termination of Your Reperio user account or the services provided by Reperio or the same is terminated for any reason, this Agreement will not be terminated unless and until You or Your authorized representative take the additional step of revoking your authorization as provided below.

2. Revocation of Authorization

You understand that this Authorization is voluntary and that You may revoke it at any time by submitting a written statement of such revocation to Reperio via one of the following methods:

• Via email: privacy@reperiohealth.com
• Via mail: Reperio Health, Attn: Privacy Team, 4784 SE 17th Avenue, Suite 120, Portland, OR 97202

3. Important Information About This Agreement and Your Rights

By accepting this Agreement, You acknowledge You have read and understood the following statements about this Agreement and Your rights:

• You may revoke the authorization You have provided pursuant to this Agreement at any time by notifying Reperio in writing via one of the methods above. You understand that such revocation is only effective after it is received and logged by Reperio. You understand and agree that any use or disclosure of Your PIHI made prior to the revocation under this Agreement will not be affected by the revocation.
• If You revoke this authorization, Reperio reserves the right to cancel and discontinue or otherwise refuse to provide any Reperio Screening or other products or services to You in the future ("Cancellation of Services"). Reperio will notify You of any such Cancellation of Services, in which case Reperio in its discretion may continue Your Reperio account for purposes of providing You access to results of Your previous Reperio Screening or for other purposes consistent with applicable laws.
• You may see and obtain a copy of this Agreement upon request.
• The PIHI that is used or disclosed pursuant to this Agreement may be re-disclosed by the Recipient in accordance with this Agreement and applicable laws.

4. Use and Return Liabilities of Property

You acknowledge You have read and understood the following statements about the use of the screening kit and its associated liabilities:

• You acknowledge that Reperio Health will lend and deliver You a biometric screening kit, which You are responsible for completing and returning along with all of its components in good working condition within 7 days of receipt, unless otherwise discussed, using the included pre-paid return label.
• If, for some reason, the biometric screening kit or included components are not returned or have received extensive damage, You understand that You will be responsible for reimbursing Reperio Health for the cost of unreturned or damaged components of the kit. You authorize Reperio Health to invoice a to-be-determined amount commensurate with the lost or damaged kit or its parts, not to exceed the total value of $1500.00, should You fail to return the Screening Kit or return a device that is not in working condition. You further agree that Reperio Health may notify the sponsor of the services that You have completed a screening and/or that we require their support to cure damages.