Notice of Privacy Practices

Theriome, Inc. · Effective date: June 7, 2026

Who we are

Theriome, Inc. ("Theriome", "we", "us") provides metabolomic laboratory testing and health reporting services ordered through licensed healthcare providers. This notice applies to the protected health information ("PHI") we create, receive, maintain, or transmit in providing those services, including your test kit information, laboratory results, and the reports we generate.

How we may use and disclose your health information

Treatment. We share your test results and reports with the licensed healthcare provider who ordered your test, and with other providers involved in your care at your or your provider's direction.
Payment. We may use your information to process payment for the products and services you purchase.
Health care operations. We may use your information to operate, manage, and improve our services, including quality review of generated reports by our scientific staff, customer support, and auditing.
Business associates. We work with vendors (for example, cloud hosting and logistics providers) who may handle your information under written agreements that require them to safeguard it as HIPAA requires.
As required by law. We will disclose your information when required to do so by federal, state, or local law, including to the Secretary of Health and Human Services when investigating our compliance.
Health and safety. We may disclose information when necessary to prevent a serious threat to your health and safety or the health and safety of others, and for public health activities authorized by law.

Other uses and disclosures, including most uses of your information for marketing and any sale of your information, will be made only with your written authorization. You may revoke an authorization at any time in writing, except to the extent we have already acted on it. We do not sell your health information.

Your rights

Access. You may request an electronic or paper copy of the health information we hold about you. We will usually provide it within 30 days.
Amendment. You may ask us to correct health information you believe is incorrect or incomplete. We may decline, but we will tell you why in writing within 60 days.
Accounting of disclosures. You may request a list of certain disclosures we have made of your health information in the six years prior to your request.
Restrictions. You may ask us to limit how we use or share your information. We are not required to agree in every case, but if we do agree we will honor the restriction.
Confidential communications. You may ask us to contact you in a specific way or at a specific address, and we will accommodate reasonable requests.
Copy of this notice. You may request a paper copy of this notice at any time, even if you agreed to receive it electronically.
Breach notification. We will notify you if a breach occurs that may have compromised the privacy or security of your information.

Our duties

We are required by law to maintain the privacy and security of your protected health information, to provide you with this notice of our legal duties and privacy practices, and to abide by the terms of the notice currently in effect. We may change this notice; the current version will always be posted on this page with its effective date.

Questions and complaints

To exercise any right above, or if you believe your privacy rights have been violated, contact our Privacy and Security Officer:

Alex Mohr, Privacy and Security Officer
Theriome, Inc.
mohr@therio.me

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights: 200 Independence Avenue S.W., Washington, D.C. 20201, 1-877-696-6775, or www.hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.