Effective Date: November 24, 2025

Cairns Patient Authorization

Overview

By signing this document, you agree to the following:

  1. Cairns Health (“Cairns”) may use, disclose, and otherwise process your health information for purposes related to offering our digital care services (the “Services”).
  2. Your healthcare provider, caregiver, or other healthcare representatives designated by you, including your family members (“Care Team”) are permitted to disclose your protected health information (PHI) to Cairns for purposes of Cairns offering its Services, pursuant to an authorization under the Health Insurance Portability and Accountability Act (HIPAA).

We have provided additional details on each of these use cases below. To learn more about our data practices, please review our Privacy Policy

Cairns’s Processing of Your Data

By signing below, you agree that, as part of offering its Services through its digital care companion (“Device”) and associated mobile applications (“Apps”), as well as through permitted third parties, Cairns may collect the following categories of data:

  • Self-reported information through health assessments, including information about your health and well-being, hobbies, interests, dietary preferences, and any other information that you choose to provide.
  • Information in your healthcare provider’s health plan (e.g. medications, medical conditions, diagnoses, symptom assessments, etc.)
  • Information in your electronic health record or personal health record (e.g., your medical tests and medical history)
  • Vital signs and physiological data (e.g. heart rate, respiratory rate, blood pressure, weight, sleep history, breathing rate, etc.).  
  • Activity and other health-related data collected from other third-party integrations (e.g., your Fitbit or Apple Watch)
  • Information collected through our Device, including your vitals, sleep quality, sleep stages, audio discourse, sentiment analysis, and room context and movements.

We may use the information above for the following purposes:

  • Provide you with our Services
  • Provide you or your Care Team with health-related information
  • Connect you with healthcare providers
  • Improve and train our artificial intelligence, large language models and machine learning
  • For our legal and regulatory compliance purposes.
  • For any other purpose outlined in our Privacy Policy.

You further understand that we may disclose your information to the following entities for any purpose outlined in our Privacy Policy:

  • Your Care Team
  • Other healthcare service providers
  • Research partners 
  • Family members that you identify as appropriate recipients
  • Third-party service providers and vendors
  • Other third parties for our legal purposes.

We may aggregate or de-identify your information and share such aggregated or de-identified information for our business and commercial purposes. 

You may revoke your consent for the data processing activities listed above at any time by contacting us at contact@cairns.ai.  

HIPAA Authorization

By signing below, you give your Care Team permission to share your PHI (including, but not limited to, information in your health plan or electronic health record, as well as your vitals and physiological data) with Cairns for purposes of Cairns offering you its digital care services, as well as any other purposes listed in its Privacy Policy

You understand that:

  • Per your request, your Care Team is providing your PHI to Cairns.
  • Once this information is disclosed to Cairns, it is no longer regulated under HIPAA and could be re-disclosed in a manner consistent with the Cairns Privacy Policy
  • You may cancel this authorization at any time by emailing Cairns at contact@cairns.ai.  
  • Your treatment, payment, enrollment, or eligibility for benefits will not be conditioned on whether you sign this authorization, though Cairns may not be able to offer the full range of its Services to you if you do not sign it.
  • You will be given a copy of this authorization form after signing.

The authorization expires when the information is no longer needed for the purposes for which it was requested.