US Hosting and Cross-Border Data Transfer Consent
Version 1.0 · Effective 19 July 2026
Carebridge Vital Nexus Limited (“Kibo”, “we”, “us”)
Contact: privacy@kibocare.com

Please read this consent carefully. It explains that Kibo stores and processes your information in the United States, and that your information may be accessed or transferred internationally when you use the Platform. This consent is separate from the Terms of Service and the Privacy Policy.

1. Why we ask for this consent
Kibo helps you discover and communicate with healthcare providers, send enquiries and treatment information, manage medical documents, and coordinate related services. To provide those services, Kibo stores and processes your account, personal, and medical information on systems hosted in the United States.

2. What information this covers
This consent covers personal information processed through the Platform, including:
- Account and contact details (such as name, email, phone number, and login identifiers)
- Profile information, and information about a dependent if you are authorized to act for them
- Health and medical information you provide or upload (such as history, pre-screening answers, records, images, and reports)
- Referral, enquiry, and document-sharing records
- Service messages, support correspondence, and security or usage information needed to operate and protect the Platform

We do not use your medical information for advertising without a separate lawful basis and, where required, a separate consent.

3. Where your information goes
By giving this consent, you understand and agree that:
- Your Platform information will be stored and mainly processed in the United States, including on cloud infrastructure operated for Kibo
- Your information may be accessed from or transferred to another country when you ask Kibo to share it with a healthcare provider, clinic, or care coordinator involved in your request
- Trusted companies that help us run the Platform (for example hosting, security, login, communications, or support) may process limited information, which may involve processing outside your country, as described in the Privacy Policy
- Privacy laws in the United States or another country may differ from the laws where you live, and authorities there may have lawful access rights

Choosing a healthcare provider does not by itself authorize disclosure of all your records. Medical documents are shared only through the Platform’s sharing controls when you approve them.

4. How we use transferred information
We may process and transfer this information to:
- Create, secure, and manage your account
- Provide the Platform features you use
- Store and display medical documents and pre-screening information
- Send a referral or documents to a provider you select
- Support care coordination and service notifications you request
- Protect against fraud and security incidents, keep audit records, and meet legal obligations
- Provide customer support and maintain reliable service

We will not use this consent for unrelated purposes.

5. Who may receive information
Recipients may include Kibo staff and authorized contractors with a need to know; healthcare providers and clinics you authorize; cloud, security, authentication, communications, and support providers bound by confidentiality and data-protection commitments; and advisers or authorities when disclosure is required or permitted by law.

6. How we protect your information
We use encryption where supported, limited access based on role, authentication, logging, monitoring, backups, vendor due diligence, contracts, and incident-response procedures. No method of storage or transmission is completely secure.

7. How long we keep information
We keep information according to the Privacy Policy and our retention needs. Withdrawing this consent does not require deletion of information that must be kept by law or that is needed for security, fraud prevention, legal claims, or proof of earlier lawful processing.

8. Your choices
You may ask to access, correct, delete, or restrict your personal information, or withdraw this consent for future processing, by contacting privacy@kibocare.com or using available account settings. Withdrawal does not undo processing that already happened. Because the Platform stores patient information in the United States, withdrawing this consent may mean we cannot accept new medical uploads, create new referrals, share information with providers, or continue features that require United States processing. We will explain any service limitations when we handle your request.

9. Your confirmation
By selecting the separate consent checkbox and creating or continuing your account, you confirm that:
- You have read this consent and had a chance to review the Privacy Policy
- You understand that your Platform information, including medical information, will be hosted and processed in the United States
- You understand that information may be transferred to or accessed from other countries for the purposes described above
- You voluntarily consent to this processing and transfer
- If you provide information about another person, you are legally authorized to do so