Last Updated May 21, 2026
About This Notice
This Consumer Health Data Privacy Notice (the “Notice”) describes how Nia Therapeutics (“Nia,” “we,” or “our”) collects, uses, shares, and protects consumer health data. This Notice applies to consumer health data you provide through our voluntary patient registry (the “Registry”) and to any consumer health data otherwise received by Nia, regardless of where you live.
We collect consumer health data primarily through the Registry. We do not solicit consumer health data through any other channel. If consumer health data is otherwise received by Nia—for example, if you voluntarily include health information in a submission to our general contact form or in another communication—we will handle that information consistent with this Notice.
We have designed this Notice to meet the requirements of Washington’s My Health My Data Act (RCW 19.373) and Nevada’s consumer health data law (NRS 603A), and we extend the rights and protections described in this Notice to all individuals whose consumer health data we receive.
This Notice supplements our Privacy Policy. Those documents describe our broader privacy practices; this Notice focuses specifically on consumer health data.
What We Mean by “Consumer Health Data”
“Consumer health data” means personal information that identifies your past, present, or future physical or mental health status. In the Registry, consumer health data includes information about your traumatic brain injury (TBI), your medical history, your symptoms, your treatments, and related information that you provide to us when you enroll and respond to eligibility questions.
Consumer Health Data We Collect
Through the Registry, we collect the following categories of consumer health data:
Health condition information, including your history of traumatic brain injury, the cause and timing of your injury, hospitalization history, current symptoms (including memory and cognitive difficulties), and other medical conditions you have or have had.
Treatment and medication information, including medications, treatments, surgeries, tests, and screenings you are receiving or have received.
Research participation information, including whether you have previously participated in a clinical research study, your willingness to participate in future studies, and your openness to studies that may involve surgery or implanted devices.
Identifying and contact information associated with your health data, including your name, email address, phone number, city, state, and ZIP code of residence, date or year of birth, sex assigned at birth, and any secondary contact information you choose to provide.
Where We Get This Information
We collect consumer health data directly from you when you enroll in the Registry and when you respond to our eligibility questions. We do not actively solicit consumer health data through any other channel. If you voluntarily provide consumer health data to us through another channel—for example, by including health information in a general contact form submission—we receive that information directly from you as well. We do not collect consumer health data about you from any third-party source.
How We Use This Information
We collect and use your consumer health data for the following purposes:
To administer the Registry and manage your enrollment.
To confirm your history of traumatic brain injury.
To evaluate your potential eligibility for future Nia clinical research studies.
To contact you about research opportunities for which you may qualify.
To share your information, as necessary, with authorized research partners and clinical sites for research screening.
To comply with applicable law and human subjects protection requirements.
To create de-identified or anonymized information so that it cannot reasonably be used to identify you (“De-Identified Data”), and use De-Identified Data for any purpose permitted by applicable law, including research, analytics, and improvement of our Services. Where we maintain De-Identified Data, we will maintain and use it in de-identified form and will not attempt to re-identify the data, except as permitted under applicable law.
To verify your identity in connection with requests you make under this Notice or our Privacy Policy.
To troubleshoot problems and to conduct data analysis, testing, system maintenance, support, reporting, and hosting of data.
To resolve disputes and respond to questions about our Services.To enforce our Terms of Use and the terms of our Privacy Policy and this Notice.To protect our interests, including establishing, exercising, and defending legal rights and claims.
To comply with legal requirements, prevent fraud, cooperate with law enforcement and regulatory authorities, and stop other prohibited, illegal, or harmful activities.
If we receive consumer health data from you through a channel other than the Registry, we will use that information only to respond to your inquiry. We will not add such information to the Registry, use it to evaluate your eligibility for research, or share it with research partners or clinical sites unless you separately enroll in the Registry and provide the consents required for Registry participation.
Consumer Health Data We Share
We may share all of the categories of consumer health data described above (health condition information, treatment and medication information, research participation information, and identifying and contact information) with the categories of recipients described in the next section. We limit sharing to the information reasonably needed for the purpose of the sharing.
Who We Share It With
We share consumer health data with the following categories of recipients:
Authorized research partners, clinical trial sites, and clinical research organizations and principal investigators, for the purpose of evaluating your potential eligibility for a specific clinical research study and facilitating research recruitment and screening.
Service providers, including hosting and cloud infrastructure providers, communications providers, and professional services providers, for the purpose of supporting the Registry and our business operations. Service providers are contractually restricted to using, disclosing, and retaining your information only to provide services to Nia Therapeutics.
Specific affiliates: Nia does not have any affiliates with whom consumer health data is shared.
Legal and regulatory recipients, where required by law or legal process, or in response to requests from government or regulatory authorities.
Business transaction recipients, if Nia is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to the successor or acquiring entity as part of that transaction.
We Do Not Sell Your Consumer Health Data
Nia does not sell your consumer health data. Any sale of consumer health data would require your separate, signed written authorization. We have not sought, and do not intend to seek, any such authorization from you.
Your Rights
Regardless of where you live, you have the following rights with respect to the consumer health data we collect:
Right to confirm and access. You have the right to confirm whether we are collecting, sharing, or selling your consumer health data, and to access the consumer health data we have collected about you.
Right to a list of recipients. You have the right to receive a list of all third parties and affiliates with whom we have shared your consumer health data, together with contact information for those recipients (or their active email addresses).
Right to withdraw consent. You have the right to withdraw your consent to our collection and sharing of your consumer health data.
Right to delete. You have the right to request that we delete your consumer health data, including from our records and (where applicable) from our service providers and affiliates.
Right to appeal. If we decline to take action on your request, you have the right to appeal our decision. If your appeal is denied, Washington residents may contact the Washington Attorney General to submit a complaint; residents of other states may have similar recourse under applicable law.
Right to non-discrimination. We will not discriminate or retaliate against you for exercising any of these rights.
How to Exercise Your Rights
To exercise any of the rights described above, please email us at privacy@niatx.com. We will respond to your request within the timeframe required by applicable law. We will need to verify your identity before responding, and may ask you for information that reasonably allows us to confirm that you are the individual about whom we collected information. If we decline to take action on your request, we will tell you why and will provide information about how to appeal our decision.
Withdrawing Your Consent
You can withdraw your consent to our collection and sharing of your consumer health data at any time by emailing privacy@niatx.com. If you are enrolled in the Registry, withdrawing your consent will result in your removal from the Registry, because your consumer health data is the basis for your enrollment. If you provided consumer health data through a channel other than the Registry, we will delete that information upon your request.
How Long We Keep Your Consumer Health Data
We retain your information only for as long as it is necessary to conduct the activities described above on behalf of Nia, or with your consent as described in this Policy. If you request deletion or withdraw your consent, we will delete or de-identify your consumer health data within a reasonable timeframe, unless retention is required by law or for legitimate business purposes. De-Identified Data may continue to be used and retained in accordance with applicable law. Because your Registry information is the basis for your enrollment in the Registry, deletion of your Registry information will also result in your removal from the Registry.
How We Protect Your Consumer Health Data
We maintain reasonable administrative, technical, and physical safeguards designed to protect consumer health data from unauthorized access, use, alteration, and disclosure. Only authorized personnel and authorized research partners with a legitimate need may access your consumer health data.
No Geofencing
We do not use geofencing technology to identify or track consumers within two thousand (2,000) feet of any in-person health care facility, to collect consumer health data from them, or to send them health-related messages or advertisements.
Changes to This Notice
We may update this Notice from time to time. The effective date shown at the top of this Notice reflects the most recent update. We encourage you to review this Notice periodically.
Contact Us
If you have questions about this Notice or wish to exercise your rights, please email us at:privacy@niatx.com