Privacy Policy

N-of-One Therapeutics, Inc. ("N-of-One" "we" or "us") understands the very personal nature of the information exchanged within the N-of-One website which is currently located at www.n-of-one.com (including any successor sites) (the "N-of-One Site") and the N-of-One community, and it is very important to us that community members make informed decisions about how the N-of-One Site is used. Thus, we hope you will take a few minutes to read about how we protect the information you share. Privacy is at the heart of the N-of-One community. N-of-One's Privacy Policy is designed to help you understand not only how we treat and protect the information you submit to or create on the N-of-One Site, but also how the rules of the N-of-One Site are constructed to preserve your privacy. We work hard to uphold your trust in our community, and this Privacy Policy reflects how seriously we take this responsibility. This is why we require all members and employees of N-of-One to read, agree to, and [accept the terms of this Privacy Policy before joining the N-of-One community.

By visiting the N-of-One Site and domain name, and any other linked pages, features, content, or application services offered from time to time by N-of-One in connection therewith (collectively, the "Website"), or using any of our services, you acknowledge that you accept the practices and policies outlined in this Privacy Policy.

WHAT DOES THIS PRIVACY POLICY COVER?
This Privacy Policy covers N-of-One's treatment of personally identifiable information ("Personal Information") that N-of-One gathers when you are accessing N-of-One's Website and when you use N-of-One services. This policy does not apply to the practices of companies that N-of-One does not own or control, or to individuals that N-of-One does not employ or manage. In addition, the Website contains many links to outside sources, both ones we have added ourselves that members have submitted. While we attempt to provide links only to those sites that share our respect for your privacy, we cannot take responsibility for the content or privacy policies of those sites. We encourage you to carefully review the privacy policies of any websites you visit.

WHAT PERSONAL INFORMATION DOES N-OF-ONE COLLECT?
The information we gather from our users enables us to personalize and improve our services and to allow our users to set up a user account and profile that can be used to interact with other users through the Website. In connection with the Website, we request and display some personal information to other users and visitors of the Website, which allows users to identify each other. We collect the following types of information from our users:

Personal Information You Provide to Us:
We receive and store any information you enter on our Website or provide to us in any other way. As part of the Website registration process, we may collect the following Personal Information: your full name, email address, IP address, browser information and password. In addition, as part of your use of the Website, we may collect health and medical information, comments, and any other information that you upload, post or create yourself, such as your postings within the N-of-One community. If you execute the N-of-One HIPAA Research Privacy Consent Form (the "Consent Form") in order to participate in certain N-of-One services, as part of our efforts to help those suffering from cancer by better understanding and analyzing trends in use and efficacy of cancer-related diagnostics and therapeutics, we may also collect certain personal health information (collectively, "PHI"), as specified in the Consent Form. You can choose not to provide us with certain information, but then you may not be able to take advantage of our special features, content and/or services. The PHI you provide is used in anonymized form (that is, all information that links the information to you as an individual is removed) for informing other patients, physicians and researchers about the potential utility of individualized diagnostic and molecular pathology data in guiding treatment strategies. We may also draw upon this Personal Information in order to adapt the services of our community to your needs, to research the effectiveness of our network, and to develop new features, content, services and/or tools for the community. Notwithstanding the foregoing, your PHI will be used by N-of-One only as specified in the Consent Form that you executed.

Personal Information Collected Automatically:

• We receive and store certain types of information whenever you interact with our Website or services. N-of-One automatically receives and records information on our server logs from your browser including your IP address, cookie information, and the page you requested.
• Generally, our service automatically collects usage information, such as the numbers and frequency of visitors to the N-of-One Site and its components, similar to TV ratings that indicate how many people watched a particular show. N-of-One only uses this data in aggregate form, that is, as a statistical measure, and not in a manner that would identify you personally. This type of aggregate data enables us to figure out how often users use parts of the Website or services so that we can, for example, make the Website appealing to as many users as possible, and improve those services. As part of this use of information, we may provide aggregate information to our partners about how our users, collectively, use our site. We share this type of statistical data so that our partners also understand how often people use their services and our Website, so that they, too, may provide you with an optimal online experience. Again, N-of-One never discloses aggregate information to a partner in a manner that would identify you personally.

Aggregated Information:
We may collect certain aggregate, non-personal, statistical information about our users and share this non-personal information with outside parties (for example, how many members clicked on a particular link; or the number of users aged 35 or older). Such information will not be used to identify you individually.

Communications: You agree that we have the right to communicate with you by email to send you noncommercial messages about your account. You understand and agree that as part of the N-of-One services, you may receive certain communications from N-of-One, such as account creation confirmations, invitation requests, and private message receipts, administrative announcements, and the like. You may be able to opt out of many of these communications, but not from messages critical to your privacy and security, or the privacy and security of other members.

What About Cookies?

• Cookies are alphanumeric identifiers that we may transfer to your computer's hard drive through your browser to enable our systems to recognize your browser and tell us how and when pages on the N-of-One Site are visited and by how many people. N-of-One cookies do not collect Personal Information, and we do not combine the general information collected through cookies with other Personal Information to tell us who you are or what your screen name or email address is.
• Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on acceptance of each new cookie in a variety of ways. We strongly recommend that you leave the cookies activated, however, because cookies enable you to take advantage of some of our Website's most attractive features.
• Ads appearing on the Website may be delivered to users by our advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This Privacy Policy covers the use of cookies by N-of-One and does not cover the use of cookies by any advertisers.

SHARING PERSONAL INFORMATION WITH OTHER USERS
The availability of your Personal Information to other members of the N-of-One community is regulated by you in your password-protected account and will only be available to the individuals you choose to share it with. Please remember that if you choose to provide personal or medical information on community message boards, or in community or other on-line discussions, that information is governed by the privacy terms of that particular N-of-One group and may be available to the general N-of-One membership. Individuals reading this information may use or disclose it to other individuals or entities without your knowledge. Therefore, when using community message boards and discussion groups, we urge you to think carefully about including any specific information (medical or otherwise) that might be used to identify you or your family members.

In order to participate in certain group discussions, you may be required to provide more contact information to the other members of a particular group than your privacy settings allow. There is usually a good reason for this: for example, the group may wish to block anonymous or semi-anonymous submissions in order to facilitate open community dialogue. In this case, you may choose not to change your privacy settings and will not be able to participate in the group, or you may choose to alter your settings to allow this group to see more of your information than the average N-of-One member. You will be prompted to do this when you try to join the group.

WILL N-OF-ONE SHARE ANY OF THE PERSONAL INFORMATION IT RECEIVES?
Personal Information about our customers is an integral part of our business. We may share your Personal Information but only as described below.

Agents: We employ other companies and people to perform tasks on our behalf and need to share your information with them to provide products or services to you. Unless we tell you differently, N-of-One's agents do not have any right to use Personal Information we share with them beyond what is necessary to assist us. You hereby consent to our sharing of your Personal Information for the above purposes.

User profiles: User profile information including users' name, email address, and other information you enter ("User Submissions") may be displayed to other users to facilitate user interaction within the Website. Email addresses are used to add new User Submissions to user profiles and to communicate through User Submissions. Users' email addresses will not be directly revealed to other users by N-of-One, except, when the user is "connected" to another user via a shared group membership, or an invitation, or if the user has chosen to include their email address in their user profile.

Communication in response to User Submissions: As part of the Website and its associated services, you will receive from N-of-One email and other communication relating to your User Submissions. You acknowledge and agree that by posting such User Submissions N-of-One may send you email and other communication that it determines in its sole discretion relate to your User Submissions.

Invitations: When you invite someone to join the N-of-One community, please be aware that we will disclose your real name, as an invitation containing your name will be sent to the email address of the person you wish to invite. This information is necessary to make sure your invitee knows who has contacted them. To build a community based on trust and empathy, we feel this disclosure is necessary.

Business Transfers: In some cases, we may choose to buy or sell assets. In these types of transactions, customer information is typically one of the business assets that are transferred. Moreover, if N-of-One, or substantially all of its assets are acquired, or in the unlikely event that N-of-One goes out of business or enters bankruptcy, customer information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of N-of-One may continue to use your Personal Information as set forth in this policy.

Protection of N-of-One and Others: We may release Personal Information when we believe in good faith that release is necessary to comply with law; enforce or apply our terms of use and other agreements; identify, isolate or prevent security breaches or fraud; or protect the rights, property, or safety of N-of-One, our employees, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

As Provided in the Consent Form: We may share your PHI only as specified in the Consent Form that you executed.

With Your Consent: Except as set forth above, you will be notified when your Personal Information may be shared with third parties, and will be able to prevent the sharing of this information.

IS PERSONAL INFORMATION ABOUT ME SECURE?
Your N-of-One account Personal Information is protected by a password for your privacy and security. You need to ensure unauthorized access to your account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your account.

N-of-One endeavors to protect user information to ensure that user account information is kept private, however, N-of-One cannot guarantee the security of user account information. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time.

The Website contains links to other sites. N-of-One is not responsible for the privacy policies and/or practices on other sites. When linking to another site, you should read the privacy policy stated on that site. This Privacy Policy only governs information collected on the Website.

WHAT PERSONAL INFORMATION CAN I ACCESS?
N-of-One allows you to access the following information about you for the purpose of viewing, and in certain situations, updating that information. This list will change as our Website changes.

• Screen name
• Real name
• User profile information
• Video Submissions
• Comments

DELETING YOUR ACCOUNT
Should you ever decide to delete your N-of-One account, you may do so by visiting the My Account page and choosing "delete your account." If you terminate your account, your profile, including any messages in your inbox, will be removed from the N-of-One Site. Because of the way we maintain N-of-One, such deletion may not be immediate, and residual copies of your profile information or posts may remain on our servers or other backup media. No termination of your account, whether by you or by N-of-One, will revoke N-of-One's right to use any User Submission, including any personal health information, previously provided by you to N-of-One.

WHAT CHOICES DO I HAVE?

• As stated previously, you can always opt not to disclose information, even though it may be needed to take advantage of certain N-of-One features. If you opt not to disclose information, you simply may not be able to take advantage of such features.
• You are able to add or update certain information on pages, such as those listed in the "What Personal Information Can I Access" section above. When you update information, however, we often maintain a copy of the unrevised information in our records.
• You may request deletion of your N-of-One account by sending an e-mail to info@n-of-one.com. Please note that some information may remain in our records after deletion of your account.
• If you do not wish to receive email or other mail from us, please indicate this preference during the registration process. Please note that if you do not want to receive legal notices from us, such as this Privacy Policy, those legal notices will still govern your use of the N-of-One Website, and you are responsible for reviewing such legal notices for changes.

CHANGES TO THIS PRIVACY POLICY
N-of-One may amend this Privacy Policy from time to time. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is used. If we make changes in the way we use Personal Information, we will notify you by posting an announcement on our Website or sending you an email. Users are bound by any changes to the Privacy Policy when he or she uses the Website after such changes have been first posted.

HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT
N-of-One is not a healthcare provider, insurer, or clearinghouse and is therefore not subject to the privacy and security regulations issued under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). HIPAA, however, serves as a model for N-of-One with respect to privacy issues, and the fact that we are not bound by HIPAA does not reflect how seriously we take our responsibility. As the services N-of-One offers expand and we work with business partners who are subject to HIPAA, we will take steps to ensure that our website and operations comply with all applicable HIPAA privacy and security requirements. For more information about HIPAA or our compliance, see the Centers for Medicare & Medicaid Services website.

N-OF-ONE NEWSLETTER
By signing up for the N-of-One Newsletter you allow N-of-One to you send monthly updates about the latest in personalized oncology. N-of-One will only send pertinent cancer treatment related information. Your information will be used only for the N-of-One monthly newsletter, and you will never be spammed, nor will your information ever be sold to any third party. At any time you are able to opt out of receiving this newsletter.

QUESTIONS OR CONCERNS
If you have any questions or concerns regarding privacy related to the N-of-One Website, please send us a detailed message to info@n-of-one.com. We will make every effort to resolve your concerns.
Effective Date: September 1, 2008