Consumer-Health Privacy Notice

Effective date: September 25, 2026 · Version 2.0 · Provided by RYZEIN LLC, a Wisconsin limited liability company ("we," "us," "our")

Important — please read. Trial Lantern is an informational tool that helps you find clinical trials you may be eligible for, so you can bring them to your own doctor. For informational purposes only. Not medical advice. Trial Lantern does not diagnose, treat, recommend treatment, or determine your eligibility. Results are preliminary, based only on information you provide, and must be confirmed by the trial's study team. Always consult your treating physician. Premium ranking and sequencing features are not available during the beta.

This notice explains, in plain language, what health and genetic information we collect, how we use and share it, the choices and rights you have, and how we protect it. The documents that go with it — our Terms of Service, our Beta-Tester Agreement, the Release and Assumption of Risk, and the Authorization to Use and Disclose Genetic and Health Information — are presented to you in full, each on its own, when you sign up, and you can read every one of them before you agree to anything.

1. Who we are — and what kind of notice this is

We are RYZEIN LLC, a Wisconsin limited liability company, the maker of Trial Lantern. You can reach us at privacy@triallantern.com; our privacy contact is in Section 11.

This is a consumer-health privacy notice. It is not a HIPAA Notice of Privacy Practices, and we are not a HIPAA-covered entity. Because you upload your own records to us directly — rather than us receiving them from a doctor, hospital, or health plan — the federal HIPAA rules do not govern this service. Under those rules we are a direct-to-consumer vendor of personal health records. Our handling of your information is governed instead by the FTC Health Breach Notification Rule (16 CFR Part 318), the FTC Act, and the consumer-health and genetic-privacy laws of the states where we operate.

We voluntarily apply strong security safeguards (see Section 8), and we host on Amazon Web Services using HIPAA-eligible services under a Business Associate Addendum as a security measure. To be clear and honest with you: that is a security choice, not a regulatory status — it does not mean HIPAA governs your data and does not make Trial Lantern "HIPAA-compliant."

2. The information we collect

We collect only what we need to find and organize trials for you. During the beta we do not collect any information about your health outcomes, your treatment results, or whether you enrolled in or responded to any trial. The beta is product testing with your feedback — not a research study.

We collect this information from you. The account holder must be the patient (18+) completing this themselves; we record that attestation. During the beta we do not accept sign-ups by a representative, caregiver, guardian, or anyone else acting for the patient — every document is signed by the patient in their own capacity.

3. How we use your information

• To find and organize clinical trials you may be eligible for — based only on the information you provide — and to present them to you to discuss with your own treating physician.
• To operate, secure, maintain, and improve the service — using operational metrics only (for example, error rates, performance, and aggregate usage counts). We do not use your genetic or clinical content for advertising or to train third-party AI models.
• To communicate with you about your account and service updates, using content-free notifications (see Section 4).
• To comply with law, enforce our terms, and detect or prevent security incidents and fraud.
• To keep searching for you, if you choose an optional subscription. If you enroll in an optional subscription (Terms of Service, Section 16.13), we re-check public clinical-trial listings as they change and, where you have connected a patient portal or other health-record source and authorized us to read it, we read that source again on a recurring basis — for as long as the subscription and your authorization are both active, and never beyond the access period you chose when you authorized it. You can end the recurring reads at any time by cancelling the subscription or by revoking the authorization (in the service or at the portal itself); if the authorization lapses or the source stops answering, the reads pause and we tell you. Information we have already retrieved is kept and deleted as Section 7 describes.

How we use artificial intelligence. Trial Lantern uses generative artificial intelligence (large language models running in our own cloud environment — see Section 4) to read the report you upload, to build the medical search terms our software then sends to public medical databases, and to review the trials those searches return. You are interacting with an automated system — not a physician, genetic counselor, or other clinician — and its output is informational only, not medical advice.

What we do not do with it: we do not use it to diagnose, treat, recommend a treatment, or decide your eligibility — the trial's study team and your physician do that. The premium ranking and sequencing feature is not available during the beta.

4. How we share your information — and with whom

We share your information only with the service providers and public medical databases named below, and only to run the service. Some recipients below are service providers that process data for us (AWS, and Stripe for payments); the public medical databases are disclosure recipients — public reference services that receive only derived search terms, not providers that work for us. We ask for your separate, specific consent to this sharing before we process your upload (see our consent flow). Each recipient and its purpose:

• Amazon Web Services (AWS) — secure hosting and processing. AWS provides the cloud infrastructure that stores and runs the service. We use AWS HIPAA-eligible services under a Business Associate Addendum (see Section 1 for what this does and does not mean), which contractually commits AWS to security obligations and to confining your data to those services.

• The Amazon Bedrock AI model — analysis of your report. An AI language model running inside Amazon Bedrock reads your genomic report and clinical context to extract the molecular/biomarker terms and match trials. This runs inside AWS's U.S. region-locked boundary: your report and prompt content stay within AWS's secure boundary, are not shared with the model's third-party provider, and are not used to train third-party AI models.

• Public medical databases — finding trials and the evidence behind them (please read this one closely). To find matching trials and the published evidence behind them, we send derived medical search terms — condition and biomarker words (for example "glioblastoma"), a gene name (for example EGFR), a gene-change name (for example "IDH1 R132H"), or a drug name (for example temozolomide) — to public medical databases. We send only these derived search terms, and in some steps a public article or document number that identifies a published document, not you. We do not send your name, date of birth, contact information, medical record number, or your report itself. The recipients are the nineteen public databases below, grouped by what we send to each:

• Your medical search terms (condition and biomarker words) go to public trial and medical-literature databases: ClinicalTrials.gov, PubMed, MeSH, and the NCI cancer-terminology service (all operated by the U.S. National Institutes of Health); Europe PMC (EMBL's European Bioinformatics Institute, United Kingdom); Crossref and OpenAlex (nonprofit research indexes); and the Monarch Initiative (a consortium of research institutions).
• The name of a drug goes to public drug-information services: DailyMed, RxNorm, PubChem, and NCATS Inxight (all operated by the U.S. National Institutes of Health); the U.S. FDA's openFDA service; and ClinPGx (Stanford University).
• The name of a gene goes to HGNC, the official gene-name registry, and to MyGene.info (Scripps Research); the name of a gene change goes to CIViC, a public cancer-variant knowledgebase (Washington University School of Medicine in St. Louis).
• A public article or document number — never a search term — goes to PubMed Central (U.S. National Institutes of Health) to fetch an article's full text; and we read fixed reference pages (the National Cancer Institute's PDQ treatment summaries) without sending any search terms at all.

Nineteen databases in all; each is named to you separately at signup. These are public, non-confidential services; none of them is sent your name or anything that identifies you, and none of them is told who you are. We log every query we send.

• Payment processor — billing only. Trial Lantern is a paid service. Our third-party payment processor, Stripe, LLC ("Stripe"; privacy policy: https://stripe.com/privacy), takes your payment on a payment page that Stripe hosts and receives the billing information needed to do that — your name, your email address, your payment-card details, your billing postal code and the amount you pay, together with the device and connection information Stripe's payment page collects to prevent fraud. It does not receive your report, your diagnosis, your genetic findings or any clinical detail. We receive back from Stripe only a payment token that stands in for your card, the card brand and last four digits, the amount and status of the charge, and the name, email address and billing postal code you gave Stripe; we do not receive or store your full card number or its security code. Charges appear on your card or bank statement as RYZEIN LLC, our legal name, not as Trial Lantern. Stripe processes your payment for us under a written data-processing agreement and handles your payment information under its own privacy policy.

• Legal and safety. We may disclose information if required by law (such as a subpoena or court order) or where reasonably necessary to protect rights and safety.

Apart from the legal-and-safety disclosures described above, we do not share your information with anyone else — no advertisers, no data brokers, and no third-party analytics or advertising tools.

If RYZEIN is sold, merges, reorganizes, becomes insolvent, or closes — our policy on transfer. A successor to or acquirer of RYZEIN LLC is a new recipient of your information, and a new recipient requires your fresh, separate consent naming that recipient — whether or not the terms change. We will not transfer your health, genetic, genomic or identifying information, or the consents you gave, to any successor or acquirer until you have given that consent; if you do not give it, we will not transfer your information — we will instead delete it or return it to you, at your choice, and we will tell you which options you have before any transfer. Our disclosed policy: in connection with offering the service, we prohibit the transfer of personally identifiable information about you to any person not affiliated with us, except (a) to the service providers named in this Section, which process it only on our instructions and under contract, (b) where the law requires it, as the legal-and-safety paragraph above describes, or (c) with your fresh, separate consent naming the recipient. This policy is in effect from the effective date shown at the top of this notice, and we will assert it as a disclosed policy prohibiting transfer within the meaning of 11 U.S.C. §363(b)(1). If we become insolvent or close: on any voluntary or involuntary bankruptcy or insolvency proceeding, an assignment for the benefit of creditors, the appointment of a receiver, or the dissolution of RYZEIN LLC, our policy is to delete your health, genetic, genomic and identifying information rather than transfer it — in identified, pseudonymized, de-identified or aggregated form alike — keeping only (i) the consent records and the security and audit records described in Section 7, which show what you agreed to and how your information was handled, and (ii) anything the law requires us to retain. The one exception we cannot remove: a bankruptcy court can nonetheless approve a transfer under 11 U.S.C. §363(b)(1)(B) after a consumer privacy ombudsman reviews it, on notice and after a hearing. If a transfer is ever proposed in such a proceeding, our policy is to notify you at the email address on your account before the hearing and to ask the court to require that notice, so that you can ask for deletion first; a deletion request you make before any transfer is handled under Sections 6 and 7. A transfer you approve yourself — by a fresh, separate consent naming the recipient — remains open at your choice.

5. What we do NOT do with your data

These are binding commitments, not just marketing:

• We do not sell your genetic, health, or other personal data.
• We do not use it for advertising and do not share it with advertisers or data brokers.
• We do not use third-party advertising or analytics trackers — no pixels, tags, session-replay, or advertising/analytics SDKs — on any page where we handle your health data.
• We do not use your data to train third-party AI models, and our AI analysis stays inside AWS's U.S.-region boundary and is never shared with the model's third-party provider (see Section 4).
• We do not geofence health-care facilities.

If we ever wanted to change any of these commitments, we would first update this notice and obtain your fresh, separate consent (see Section 11).

6. Your choices and rights

We build to the strictest common standard and apply it to all of our users, wherever you live. You have the right to:

• Access / know what information we have collected about you and how we use and share it.
• Delete your information.
• Correct the clinical context you provided.
• Withdraw any consent you gave, in Profile → Legal in your account or by emailing privacy@triallantern.com. Every consent is required to use the service, so withdrawing any one of them ends your use of the service: we lock your account's features and stop all processing of your information, including the AI analysis and any search already in progress. Withdrawing does not by itself delete your data — you can ask for deletion separately — and you can restore the service by agreeing again.
• Limit the use of your sensitive personal information, including your genetic data (we already use it only to provide the service you asked for).
• Receive a portable copy of your information.
• Opt out of any sale or sharing of your information — we provide this mechanism even though we do not sell or share.
• Appeal if we deny a request.
• Not be discriminated against for exercising any of these rights: we will not deny you service, charge a different price, or give you a lower quality of service because you exercised a right.

How to exercise them (at least two ways): an always-available "Your Data / Privacy" panel inside the app, our web request form at https://app.triallantern.com/privacy-request, and email to privacy@triallantern.com.

Verifying your identity. Because your account is tied one-to-one to you, we verify requests against your logged-in account — the account holder, who is the patient. We apply heightened verification before deleting genetic data.

How long it takes (our service-level commitment). We will acknowledge your request within 10 business days and fulfill it within 45 calendar days, with one extension where reasonably necessary — of up to 45 additional days — and we will tell you if we need it. Your first request in any 12-month period is free.

How to appeal. If we deny your request in whole or in part, you may appeal by replying to our decision or by contacting privacy@triallantern.com with "Appeal" in the subject line. We will decide your appeal and explain the result in writing within 45 days. If we deny your appeal, we will tell you how to contact your state Attorney General to raise a concern.

7. How long we keep your information, and how we delete it

• We keep your genetic, molecular, and clinical data only as long as needed to provide the service to you, and then delete it on our retention schedule.
• Some records we must keep longer, minimized and protected: (a) consent records — the exact text you agreed to, its version, the timestamp, your action, and your IP/device information — for at least 6 years, including after you ask us to delete your data or close your account; (b) security and breach records for a limited period for legal and security reasons; (c) anything the law requires us to retain; and (d) the record of your payment that our payment processor, Stripe, must itself keep under the tax, anti-fraud and payment-network rules that apply to it — when you ask us to delete your information we pass your request to Stripe, which deletes what those rules allow it to delete (see Section 4).
• To be plain about what deletion does and does not reach: deleting your data does not delete your consent records. When we act on a deletion request or close your account, we keep the consent records described in (a) — that is the law's requirement and our commitment, and it is the one thing a deletion request does not remove. Nothing else in this notice, and nothing anywhere else we publish, promises otherwise.
• If we become insolvent or close. Our policy is to delete your health, genetic, genomic and identifying information rather than transfer it to any successor, keeping only the records in (a)–(c) above; Section 4 states that policy in full, including the one exception a bankruptcy court can make.

8. How we protect your information

We protect your information with safeguards appropriate to how sensitive genetic data is:

• We encrypt your data in transit and at rest.
• We isolate each user's data so that one user cannot reach another's.
• We limit access to the minimum needed and protect accounts with multi-factor authentication.
• We log access to your health data.
• We host on AWS HIPAA-eligible services under a Business Associate Addendum, as a security measure (see Section 1 for what this does and does not mean).

No online service can promise to be "unhackable" or perfectly secure, and we will not claim that. Because genetic data is inherently identifiable, we do not describe it as "anonymous" or "de-identified."

9. If there is a data breach — what we commit to

If we discover a breach of security affecting your unsecured health information, we will:

• Notify you without unreasonable delay and no later than 60 calendar days after we discover it (including when we reasonably should have discovered it).
• If the breach affects 500 or more individuals, notify the FTC at the same time we notify individuals, within that 60-day window.
• If the breach affects fewer than 500 individuals, log it and report it to the FTC in our annual filing.
• If the breach affects 500 or more residents of a single state or jurisdiction, also notify prominent media in that area within 60 days.

Our notice to you will explain, in plain language: what happened and when; the types of information involved; the identity of any third party that acquired it (if known); steps you can take to protect yourself; what we are doing in response (including whether we are offering credit monitoring); and at least two ways to reach us. We keep a breach register and require our service providers to report breaches to us promptly so we can meet these timelines.

10. State-specific disclosures

How to read this section. Sections 1–9 above apply to everyone. This section adds the disclosures particular states require. Where a state gives you a right this notice already gives every user, the right is the same one — not a second, separate right.

Which states this section covers. The service is open to residents of every U.S. state and the District of Columbia except Illinois and Wyoming (see "Who can use the service" below). This section names the states whose privacy or consumer-health statutes impose disclosures of their own. If your state is not named below, Sections 1–9 are your disclosures — we apply the same rights and the same timelines to you.

Our service-level commitment, everywhere. For every state below we apply the single commitment in Section 6: we acknowledge within 10 business days, fulfill within 45 calendar days, take at most one 45-day extension where reasonably necessary and tell you when we do, and decide an appeal within 45 days. Where a state's own statute gives you a shorter deadline than that, the shorter deadline governs and we meet it. The one shorter deadline stated in this notice today is California's 30-day revocation window, below.

California

• Categories of personal information we collect: identifiers; medical information / health information; sensitive personal information (including genetic data); internet and other electronic activity; and commercial/billing information (the beta is a paid service — see Section 4). Sources, purposes, and recipients are described in Sections 2–4. For how long we keep each category, see Section 7.
• Sensitive personal information. Your genetic data and health information are "sensitive personal information." You may limit our use of it — though we already use it only to provide the service you requested.
• Sale / Share. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. In the preceding 12 months we have sold or shared: none.
• Your CCPA/CPRA rights: know/access, delete, correct, limit sensitive PI, opt out of sale/share (none occurs), portability, and non-discrimination — exercise them as described in Section 6.
• Revoking your consent to genetic data (CalGIPA). You may revoke your consent at any time, and we act on a revocation within 30 days.

Washington (My Health My Data Act)

Washington residents: your consumer-health-data privacy policy is a separate document. Under the Washington My Health My Data Act, the consumer-health-data privacy policy is a distinct document with its own link on our homepage, and this general notice is not that policy. Please read the Washington Consumer Health Data Privacy Policy, linked from our homepage, for the Washington-required disclosures — the categories of consumer health data we collect, the purposes, the categories we share and with whom, how to exercise your Washington rights (confirm, access, delete, withdraw consent, and appeal), our no-sale commitment, and where to send Washington privacy requests. This notice continues to apply to you alongside it; the two are kept consistent, and no Washington-rights content is duplicated between them.

Virginia

• Your rights. You may confirm whether we process your personal data and access it, correct it, delete it, obtain a portable copy, and opt out of targeted advertising, sale, and profiling with legal or similarly significant effects — none of which we do. Exercise them as described in Section 6.
• Sensitive data. Your genetic and health data are sensitive data and we process them only with your opt-in consent, which you give in the consent flow and may withdraw at any time (Section 6).
• Appeals. If we deny your request you may appeal, and we will decide and explain the result in writing. If we deny the appeal, we will tell you how to submit a complaint to the Virginia Attorney General.
• Assessment. We maintain an internal data protection assessment covering our processing of sensitive data.

Colorado

• Your rights. Confirm and access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and profiling with legal or similarly significant effects — none of which we do. Exercise them as described in Section 6.
• Sensitive data and genetic data. We process your genetic and health data only with your consent, obtained through the consent flow described in this notice, and only to provide the service you asked for.
• Appeals. You may appeal a denial; if we deny the appeal we will give you a way to contact the Colorado Attorney General.
• Assessment. We maintain an internal data protection assessment for this processing.

Connecticut

• Your rights. Confirm and access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and profiling with legal or similarly significant effects — none of which we do. Exercise them as described in Section 6.
• Consumer health data. Connecticut treats your health data as a protected category. We process it only with your consent and only for the purposes described in Section 3. We do not sell it.
• Appeals. You may appeal a denial, and we will tell you how to contact the Connecticut Attorney General if we deny the appeal.
• Assessment. We maintain an internal data protection assessment for this processing.

Utah

• Your rights. Confirm and access your personal data, delete it, obtain a portable copy, and opt out of targeted advertising and sale — neither of which we do. Exercise them as described in Section 6.
• Sensitive data. We process your genetic and health data only after clear notice and your agreement, given in the consent flow.
• Artificial intelligence. When you use this service you are interacting with a generative artificial-intelligence system, not a human clinician — see Section 3, "How we use artificial intelligence."

Maryland

• We collect and use your sensitive data only where it is strictly necessary to provide the service you requested. Maryland's law permits no more than that, and your consent does not broaden it — so nothing in the documents you sign authorizes any use beyond what the service requires.
• We do not sell your sensitive data. Maryland prohibits it outright, and we do not do it in any state.
• Your rights. Confirm and access, correct, delete, obtain a portable copy, and appeal a denial — exercise them as described in Section 6.

Nevada

• Consumer health data. Nevada regulates consumer health data separately. We collect and process yours only with your affirmative, opt-in consent, we do not sell it, and you may withdraw your consent, ask what we have collected, and ask us to delete it — exercise them as described in Section 6.

Minnesota, New Jersey, Delaware, New Hampshire, Kentucky, Indiana, Rhode Island, Tennessee, Montana, Nebraska, Iowa

If you live in one of these states, your state's comprehensive privacy law gives you substantially the rights described for Virginia above: confirm and access, correct, delete, obtain a portable copy, opt out of targeted advertising / sale / significant profiling (none of which we do), opt-in consent for sensitive data including genetic data, and — in most of them — an appeal, with a route to your state Attorney General if we deny it. Exercise them as described in Section 6.

New Jersey — which provisions of the Terms of Service apply to you

In addition to the privacy rights in the grouped row above, one statement for New Jersey residents. This notice applies to you as written. Section 12.4 of the Terms of Service states which provisions of the Terms are void, unenforceable or inapplicable in New Jersey and which are not — including that the jury-trial waiver in Section 11.11 of the Terms does not apply to you, and that nothing in the Terms waives any right you have under the New Jersey Truth-in-Consumer Contract, Warranty and Notice Act.

Texas, Oregon and Florida

• Texas and Oregon. Your state's comprehensive privacy law gives you the rights described for Virginia above, including opt-in consent for sensitive data, which your genetic and health data are. Oregon additionally lets you ask for a list of the specific third parties to whom we have disclosed personal data; Section 4 describes our recipients and we will answer that request as described in Section 6.
• Florida. Before we analyze or disclose your DNA results we obtain your express consent — Florida law treats your DNA sample and results as your exclusive property. See also "Genetic-privacy statements" below.

Every other state where the service is available

If you live in any other U.S. state or the District of Columbia — other than Illinois and Wyoming, where the service is not available — Sections 1–9 are your disclosures. We apply the same rights, the same verification, the same timelines and the same no-sale, no-advertising, no-model-training commitments to you as to everyone else, whether or not your state requires them.

Genetic-privacy statements (all users)

• We collect and process your genetic information only with your separate, written authorization — the Genetic Information Authorization we present to you during sign-up. You may revoke it at any time.
• We disclose your genetic information only to the recipients named in Section 4, and only for trial matching. We do not use it for any insurance, employment, advertising, or third-party model-training purpose.
• Florida residents: we obtain your express consent before any analysis or disclosure of your DNA results, which Florida law treats as your exclusive property.

Who can use the service (cohort)

Cohort eligibility — who may register, the beta cap, and your eligibility representations — is governed by the Terms of Service (Section 2), which is presented to you in full when you sign up; the Beta-Tester Agreement governs your beta participation. The points below are the privacy-driven availability rules.

• Illinois and Wyoming. During the beta, Trial Lantern is not available to residents of Illinois or Wyoming.
• Adults only. The service is for adults 18 and older.
• United States only. The service is available only to residents of the fifty U.S. states and the District of Columbia. No U.S. territory — Puerto Rico, Guam, the U.S. Virgin Islands, American Samoa, or the Northern Mariana Islands — is part of the beta, and we do not offer the service in the EU, UK, or Canada. We refuse any signup whose location we can determine to be outside the U.S.; where we cannot determine a location — for example behind a VPN or a corporate network — we screen you on the state of residence you declare. If you are outside the U.S., please do not use the service.
• Every other U.S. state and the District of Columbia — including California and Washington. Residents of every U.S. state other than Illinois and Wyoming may register, California and Washington included. If you are a Washington resident, the Washington Consumer Health Data Privacy Policy (linked from our homepage) is the Washington-specific policy that applies to you, in addition to this notice.

11. Children, changes to this notice, and contact

• Children. Trial Lantern is for adults 18 and older. We do not knowingly collect information from anyone under 18.
• Changes to this notice. We may update this notice. If we make a material change — for example, a new category of data, a new recipient, or a new use — we will notify you and obtain your fresh consent before that change applies to your data. If we change any document you agreed to, in any way, you will be asked to agree to the new version before we process your information further; until you do, the service is paused. You can view and download every document you agreed to in Profile → Legal. The current effective date appears at the top.
• Contact us. RYZEIN LLC, a Wisconsin limited liability company. General support and privacy contact (one address): privacy@triallantern.com, or our web request form at https://app.triallantern.com/privacy-request.