Arxova Terms of Service

The Arxova general consumer Service is intended for individuals 18 years of age or older.

By creating an account or using the Service, you represent that you are at least 18 years old and have the legal capacity to enter into these Terms.

If Arxova later offers a service specifically designed for minors, that service may be governed by additional terms, consent requirements, and privacy protections.

Arxova is one place to gather, keep, and understand your own health information. Today the Service lets you:

• Bring in medical records from hospitals and clinics through Fasten Health, a records connection service, after you sign in to your provider’s patient portal;
• Connect wearables and health apps, including Apple Health, Health Connect and Samsung Health on your phone, and Oura, WHOOP, Withings, Polar, Strava, Garmin (through ROOK) and Sensor Bio;
• Upload documents and photos of insurance and implant cards, and enter medications, supplements, symptoms, vitals and other information yourself;
• See your records, trends, and Arxova scores;
• Use ARIA, Arxova’s artificial-intelligence-enabled health information feature, described in Section 4;
• Receive notifications and reminders, such as medication reminders and daily insights;
• Share your information when you choose: through share links and QR codes, by giving a clinic access to your records, and through Arxova Circle, which sends messages about how you are doing to people you invite, as described in Section 6;
• Add an implant card to Apple Wallet or Google Wallet;
• Use the Health Concierge, a beta feature that helps you find care and opens outside services for appointments, pharmacy, lab tests and rides;
• Opt in to research matching and to community insights, described in Section 11;
• Download a copy of your data and delete your account from Settings.

Features may be added, modified, restricted, suspended, or discontinued over time.

Arxova does not provide medical advice, diagnosis, or treatment.

The Service is intended to help you access, organize, understand, and manage health information. Information available through Arxova is provided for informational and organizational purposes and is not a substitute for professional medical advice, diagnosis, or treatment.

Always seek the advice of a qualified healthcare professional regarding medical conditions, symptoms, treatments, medications, or healthcare decisions.

Do not disregard professional medical advice or delay seeking care because of information provided through Arxova.

ARIA is Arxova’s artificial-intelligence-enabled health information and analysis feature.

ARIA may use information available through your Arxova account to provide health-information summaries, explanations, trends, contextual information, and other informational outputs.

ARIA is not a physician, nurse, healthcare provider, or other healthcare professional.

ARIA does not provide medical diagnosis or treatment and should not be used as the sole basis for medical or clinical decisions.

Artificial-intelligence systems can produce information that is inaccurate, incomplete, outdated, misleading, or unexpected. You are responsible for evaluating ARIA outputs appropriately and consulting a qualified healthcare professional regarding medical decisions.

ARIA is not represented by Arxova as FDA-cleared or FDA-approved for diagnosis or treatment.

You are responsible for:

• Providing accurate account information;
• Maintaining the security and confidentiality of your authentication credentials;
• Maintaining control of devices used to access your account;
• Securing any wallet or wallet credentials associated with your account;
• Securing connected authentication methods;
• Activities occurring through your account to the extent permitted by applicable law; and
• Promptly notifying Arxova if you believe your account or credentials have been compromised.

You may not impersonate another person, create an account using information you are not authorized to use, or access another person’s health information without authorization.

As between you and Arxova, you retain your rights in the health information and other content you provide to or access through the Service.

Using Arxova does not transfer ownership of your health information to Arxova.

You determine which supported health-data sources you connect and which optional sharing functionality you use.

By uploading, entering, connecting, importing, or otherwise making information available through the Service, you grant Arxova a limited right to host, encrypt, store, retrieve, process, organize, analyze, transmit, display, and otherwise handle that information only as reasonably necessary to provide, secure, maintain, and support the Service, comply with your instructions and applicable permissions, and satisfy applicable legal obligations.

This license does not authorize Arxova to sell your Consumer Health Data.

You represent that you have the right and authority to provide information you submit to the Service.

Arxova’s collection, use, processing, storage, sharing, and protection of personal information are described in the:

Arxova Privacy Policy: arxova.health/privacy-policy

Certain Arxova functionality requires you to authorize access to third-party health-data sources or device permissions.

These may include:

• Apple Health;
• Android Health Connect;
• Wearable devices and platforms;
• Healthcare providers;
• Health-data networks;
• Laboratory or clinical-data services;
• Authentication providers; and
• Other supported services.

You control whether to connect supported services and may revoke applicable permissions through Arxova, your device, or the third-party service where supported.

When you disconnect a service in Arxova, we stop syncing from it and delete the access tokens we hold for it. For Oura, WHOOP, Withings, Polar, Strava and Garmin, we also ask the service to end Arxova’s access. Fasten Health and Sensor Bio do not let apps end their own access, so the app tells you to finish there: remove Arxova from the connected apps in your health system’s patient portal, or in your Sensor Bio account. Permissions for Apple Health, Health Connect and Samsung Health are controlled in your phone’s settings. Data already synced stays in Arxova until you delete it or your account.

Revoking access may prevent Arxova from providing functionality dependent on that information.

Third-party services may have their own terms, privacy policies, retention practices, and security practices.

Arxova stores some records and documents on Arweave, a public, permanent storage network, through a service called Irys. We encrypt them before upload, so the network holds an encrypted file, not a readable record. There is no separate consent step before this storage.

Arxova writes tamper-evident audit receipts to the Solana blockchain. A receipt is written when data is accessed, shared, synced or deleted, when a health alert is generated, and when you grant or revoke access through clinic access, share links, research consent, or community-insights consent. A receipt is also written when you give or withdraw your AI consent, and when you add or remove an Arxova Circle contact. Connecting or disconnecting a device or service, and changing your analytics setting, are not recorded on Solana. Arxova pays the network fees for these receipts.

Arxova does not store health records on Solana.

Since October 1, 2026, receipts use a random reference and a generic name rather than a wallet address or health-specific event name. Arxova holds the private account reference until it is deleted. Receipts written before then were linked to your wallet and named the type of event, for example a health alert or a device sync. Those older receipts are public and cannot be removed.

Blockchain networks are decentralized third-party systems that are not under Arxova’s exclusive control.

Information written to a public blockchain, such as addresses, identifiers, and timestamps, may be publicly visible and permanently recorded. Arxova cannot reverse, modify, or delete a receipt once the network has confirmed it.

You are responsible for maintaining the security of wallets and credentials under your control.

Research is optional and is not required to use Arxova’s general consumer Service.

Certain jurisdictions impose special requirements concerning Consumer Health Data.

Applicable consumer health data laws may require specific affirmative consent before collection or sharing, or may permit processing necessary to provide a product or service you requested. A requested-service exception is limited to the processing necessary for that service. Accepting these Terms or the Privacy Policy is not a substitute for specific consent where required. The Privacy Policy and Consumer Health Data Policy describe the app’s current choices, including collection for existing accounts that have not answered the new screens.

Consent to share Consumer Health Data must be separate from collection consent where required by applicable law. Some laws distinguish sharing with an independent third party from processing by a contracted service provider acting on Arxova’s behalf for the disclosed purpose; a service provider’s access does not automatically require an additional consent screen. These distinctions do not permit unrelated or undisclosed uses.

Your acceptance of these Terms should not be interpreted as authorization for a sale of Consumer Health Data.

Arxova does not sell Consumer Health Data.

If Arxova’s practices were ever to change in a manner constituting a sale under applicable Consumer Health Data law, Arxova would obtain any separate written authorization required by applicable law before such sale.

Washington and Nevada both impose separate statutory requirements for the sale of Consumer Health Data, including written authorization requirements.

Arxova relies on or integrates with third-party services and technologies.

These may include:

• Healthcare-data providers;
• Wearable platforms;
• Cloud infrastructure providers;
• Artificial-intelligence providers;
• Authentication providers;
• Distributed-storage networks;
• Blockchain networks; and
• Other technology providers.

Third-party services may be subject to their own terms and privacy policies.

The Health Concierge opens outside services, such as appointment booking, pharmacy, lab and ride services, inside the app. What you do on those services, including any payment, is between you and that service and governed by its terms.

Arxova does not control the independent operation of third-party services and does not guarantee their continued availability, accuracy, or performance.

Nothing in this section limits Arxova’s responsibilities concerning service providers or processors where applicable law imposes such responsibilities on Arxova.

You may not:

• Use the Service for unlawful or fraudulent purposes;
• Access another person’s account or health information without authorization;
• Provide information you do not have the right to provide;
• Impersonate another person;
• Circumvent authentication, permissions, or security controls;
• Attempt to obtain another user’s cryptographic keys or credentials;
• Introduce malware, malicious code, or harmful technology;
• Interfere with the operation or security of the Service;
• Probe, scan, or test systems for vulnerabilities without authorization;
• Scrape or systematically extract Service data without authorization;
• Use automated systems in a manner that materially interferes with the Service;
• Reverse engineer, decompile, or disassemble the Service except where applicable law expressly permits;
• Use ARIA as a substitute for professional medical care;
• Represent an ARIA output as a diagnosis or treatment decision made by Arxova or a healthcare professional; or
• Use the Service in a manner that violates another person’s rights or applicable law.

The Service, including Arxova’s software, interfaces, designs, branding, trademarks, logos, graphics, text, and other Arxova-provided content, is owned by or licensed to HealthKey Labs, LLC and is protected by applicable intellectual-property laws.

Arxova™ is a trademark of HealthKey Labs, LLC.

Arxova has filed U.S. Provisional Patent Application Serial No. 64/010,350.

Subject to these Terms, Arxova grants you a limited, personal, revocable, non-exclusive, non-transferable license to access and use the consumer Service for its intended purposes.

No provision of these Terms transfers ownership of your health information to Arxova.

If you voluntarily provide ideas, suggestions, or feedback concerning Arxova, you grant Arxova permission to use that feedback to develop and improve the Service without an obligation to compensate you.

This provision does not authorize Arxova to use your Consumer Health Data outside the purposes described in the applicable Privacy Policy, Consumer Health Data Privacy Policy, consent, authorization, or law.

You may stop using Arxova or request account deletion at any time.

You can delete your account in the app (Settings, then Delete Account), or by emailing privacy@arxova.health. Deleting in the app starts right away and runs automatically. We complete deletion requests sent by email within 30 days. Our Delete Account page, at arxova.health/delete-account, lists what is deleted, what is kept and why, and what you need to remove yourself at other services.

Arxova may suspend or terminate your access where reasonably necessary because of:

• A material violation of these Terms;
• Fraudulent or abusive activity;
• Security threats;
• Unlawful activity;
• Risk of harm to Arxova, users, or third parties; or
• Applicable legal requirements.

Where appropriate and legally permitted, Arxova may provide notice or an opportunity to remedy a violation.

Termination of your account does not automatically result in physical deletion of information previously written to immutable or persistent decentralized infrastructure.

Privacy and deletion obligations remain governed by applicable law and the Arxova Privacy Policy and Consumer Health Data Privacy Policy.

Arxova may update, modify, add, remove, suspend, or discontinue features of the Service.

The Service depends partly on third-party infrastructure, healthcare systems, APIs, devices, artificial-intelligence services, blockchain networks, distributed-storage networks, and other technologies outside Arxova’s exclusive control.

Arxova does not guarantee that every feature will always be available or operate without interruption or error.

Where a change materially affects your privacy rights or requires additional consent under applicable law, Arxova will provide notice or obtain consent as required.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.”

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ARXOVA DISCLAIMS WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, RELIABILITY, AND AVAILABILITY.

ARXOVA DOES NOT WARRANT THAT:

• INFORMATION RECEIVED FROM HEALTHCARE PROVIDERS OR THIRD-PARTY DATA SOURCES IS COMPLETE OR ACCURATE;
• ARIA OUTPUTS ARE COMPLETE, ACCURATE, OR ERROR-FREE;
• WEARABLE OR CONSUMER-DEVICE INFORMATION IS CLINICALLY ACCURATE;
• THIRD-PARTY INTEGRATIONS WILL REMAIN AVAILABLE;
• BLOCKCHAIN OR DISTRIBUTED-STORAGE NETWORKS WILL OPERATE WITHOUT INTERRUPTION;
• THE SERVICE WILL BE FREE FROM ALL SECURITY VULNERABILITIES; OR
• THE SERVICE WILL MEET EVERY USER’S PARTICULAR HEALTH OR HEALTHCARE NEEDS.

Nothing in these Terms excludes warranties, protections, remedies, or rights that cannot lawfully be excluded.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, HEALTHKEY LABS, LLC AND ITS OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS, AND AGENTS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES ARISING FROM OR RELATING TO THE SERVICE.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ARXOVA’S AGGREGATE LIABILITY ARISING FROM OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF:

(A) THE AMOUNT YOU PAID DIRECTLY TO ARXOVA DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM; OR

(B) $100.

These limitations do not apply where prohibited by applicable law and do not limit liability that cannot lawfully be limited or excluded.

To the extent permitted by applicable law, you agree to indemnify and hold harmless HealthKey Labs, LLC and its officers, directors, employees, contractors, and agents from third-party claims arising from:

• Your unlawful use of the Service;
• Information you knowingly provide without authorization;
• Your material violation of these Terms; or
• Your infringement or violation of another person’s rights.

This provision does not require you to indemnify Arxova for Arxova’s own negligence, misconduct, or violation of applicable law.

These Terms are governed by the laws of the State of Florida, without regard to conflict-of-law principles.

However, this choice of law does not deprive you of protections under applicable laws that cannot lawfully be waived by contract.

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS.

Except for claims eligible for small claims court, claims excluded below, or rights that cannot lawfully be subjected to arbitration, disputes arising out of or relating to these Terms or the Service will be resolved through binding individual arbitration administered by the American Arbitration Association (“AAA”) under its applicable Consumer Arbitration Rules.

Arxova may update these Terms from time to time to reflect changes in:

• The Service;
• Applicable law;
• Technology;
• Integrations;
• Security practices;
• Business operations; or
• Legal requirements.

When we change these Terms or the Privacy Policy, the updated app shows you a screen saying they have changed, with links to read them, before you can continue in that version. Older app versions do not enforce this screen, and our servers do not currently block access solely because updated Terms have not been accepted. From the updated screen you can:

• Agree to the new version and continue;
• Sign out. Nothing in your account is deleted, and you can sign back in and agree later; or
• Choose to close your account. This opens our Delete Account page, where you can ask us to delete your account and data.

For any other request about a change, such as a question or a request to download your data before deciding, email privacy@arxova.health.

The Effective date at the top of these Terms identifies the current version.

Changes to these Terms do not substitute for separate Consumer Health Data consent, authorization, or notice where applicable law requires it.

If any provision of these Terms is determined to be invalid or unenforceable, that provision will be enforced to the maximum extent permitted by law, and the remaining provisions will remain in effect.

Arxova’s failure to enforce a provision does not waive its right to enforce that provision later.

You may not assign or transfer these Terms without Arxova’s prior written consent.

Arxova may assign these Terms in connection with a merger, acquisition, financing, corporate restructuring, or sale of substantially all applicable assets, subject to applicable law. If that happens, the successor will be bound by our Privacy Policy for the information it receives, we will tell you in the app before your information is transferred, and you may download your data and delete your account before the transfer.

These Terms, together with policies, notices, consents, and authorizations expressly incorporated or applicable to particular features, constitute the agreement between you and Arxova concerning your use of the Service.

If a provision of these Terms conflicts with a requirement of applicable law that cannot be waived, the applicable law controls.

HealthKey Labs, LLC d/b/a Arxova

Website: arxova.health

Privacy Policy: arxova.health/privacy-policy

Consumer Health Data Privacy Policy: arxova.health/consumer-health-data-policy

General, Privacy, and Consumer Health Data Requests: privacy@arxova.health

Mail: HealthKey Labs, LLC d/b/a Arxova, 382 NE 191st St PMB #924568, Miami, FL 33179, United States