Notice of Privacy Practices

Infiniti Solutions LLC (“Infiniti Solutions,” “we,” “us,” or “our”) operates a health information technology platform used by home health care agencies (“Covered Entities”) to manage patient care, caregiver schedules, Electronic Visit Verification (EVV), timesheets, and related operations. In our capacity as a Business Associate to these Covered Entities, we may receive, create, maintain, or transmit Protected Health Information (“PHI”) on their behalf.

This Notice of Privacy Practices (“Notice”) describes how we handle PHI, how we may use and disclose it, and the rights individuals have regarding their PHI in our systems. The Covered Entity (your home health agency) is responsible for providing you with their own Notice of Privacy Practices.

1. Our Responsibilities

Infiniti Solutions is required to:

• Maintain the privacy and security of your PHI.
• Abide by the terms of this Notice.
• Notify affected individuals of a breach of Unsecured PHI as required under the HITECH Act and the HIPAA Breach Notification Rule.
• Not use or disclose your PHI other than as described in this Notice or as permitted by law.

2. How We Use and Disclose PHI

A. Treatment

We may use or disclose PHI to support the treatment activities of your home health agency, including patient intake, care plan management, caregiver scheduling, and EVV visit tracking.

B. Payment

We may use or disclose PHI to facilitate billing and payment processing for home health services, including Medicaid billing under the Minnesota 245D program and other payer systems.

C. Health Care Operations

We may use or disclose PHI for operational activities of your home health agency, such as quality improvement, compliance reviews, and staff training.

D. Electronic Visit Verification (EVV)

As required by the 21st Century Cures Act and Minnesota state law (Minn. Stat. § 256B.0659), EVV data — including the date, time, type, and location of services — is transmitted to state aggregators (e.g., HHAeXchange) and may be shared with the Minnesota Department of Human Services.

E. As Required by Law

We may disclose PHI when required by federal, state, or local law, including to public health authorities, law enforcement, or in response to a court order or subpoena.

F. Business Associates

We may share PHI with subcontractors and vendors (“Subcontractor Business Associates”) who perform services on our behalf, including cloud hosting (Supabase), email delivery (Resend), and support tooling. All such parties are bound by written Business Associate Agreements.

G. Uses Requiring Your Authorization

Any uses or disclosures not described above — including most marketing uses and the sale of PHI — require your written authorization. You may revoke such authorization in writing at any time.

3. Your Rights Regarding Your PHI

A. Right to Access

You have the right to inspect and obtain a copy of PHI about you in our designated record sets, with certain exceptions. Requests may be submitted in writing to privacy@infinitisolution.org. We will respond within 30 days.

B. Right to Amend

You have the right to request amendments to PHI about you if you believe it is inaccurate or incomplete. We may deny the request under certain circumstances and will provide a written explanation.

C. Right to an Accounting of Disclosures

You have the right to receive a list of disclosures of your PHI made by us (other than for treatment, payment, health care operations, or certain other exceptions) during the prior 6 years.

D. Right to Request Restrictions

You have the right to request restrictions on the use or disclosure of PHI for treatment, payment, or health care operations. We are not required to agree unless the restriction involves a disclosure to a health plan for payment or operations and you have paid for the service out of pocket in full.

E. Right to Confidential Communications

You have the right to request that we communicate PHI with you in a different way or at a different location (e.g., mailed to a different address) if the usual means could endanger you.

F. Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice upon request, even if you agreed to receive it electronically.

4. How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

To file a complaint with Infiniti Solutions: privacy@infinitisolution.org

To file a complaint with HHS: www.hhs.gov/hipaa/filing-a-complaint

5. Contact Information

For privacy-related questions or to exercise your rights, contact our Privacy Officer:

6. Changes to This Notice

We reserve the right to change the terms of this Notice and to make the new terms applicable to all PHI we maintain. If we make a material change to this Notice, we will post the revised Notice on this page and update the effective date. Covered entities using our platform will be notified of material changes.