Terms of Use

• By creating an account or otherwise using Panaceum or panaceum.app, you agree to these terms and to our Privacy Policy. If you don’t agree, don’t use Panaceum. If we show you additional terms for a feature before you use it, those apply too.
• Panaceum is for organizations, such as healthcare providers and the businesses that serve them, and for people building for one. Use it for work, not for personal, family or household purposes.
• You must be at least 18.
• If you use Panaceum for an organization, you accept these terms on its behalf and confirm that you have the authority to do so, and “you” includes that organization.

• While Panaceum is in early access, accounts are by invitation; anyone can join the waitlist.
• Give us accurate information and keep it up to date. Keep your password, and any authenticator app you use with Panaceum, to yourself: you’re responsible for what happens under your account. If you think someone else has used it, tell us at once at privacy@panaceum.app.
• Work happens in workspaces. A workspace’s owners invite its members and give each a role: Viewer (can view its apps), Editor (can also build them), Publisher (can also publish them and move them to production) or Owner (can also manage members, the workspace’s classification, billing and the BAA). Owners are responsible for whom they let in and the roles they give.
• Some actions on HIPAA apps need a code from an authenticator app: owner actions, moving an app to production, and any change to an app that’s in production.
• You can ask us to delete your account at any time by emailing privacy@panaceum.app.

• Panaceum builds apps and websites from your descriptions, lets you preview and change them, and hosts and publishes them.
• You choose the kind of app when you create it. HIPAA apps are built for patient information, under the rules in Protected health information and the BAA. Where Panaceum offers Standard apps, no BAA covers them and they must never hold protected health information.
• We may change, suspend or stop any part of Panaceum, with or without notice, and we aren’t liable to you for doing so.
• Support is as your plan describes; otherwise we don’t have to provide it.

• Panaceum uses AI models to write apps, text and images from what you ask for. AI output can be wrong, incomplete or unsuitable, and other people can get similar output from similar requests.
• Review and test everything Panaceum produces before you rely on it or put it in front of patients, clinicians or anyone else. Panaceum doesn’t give medical advice, and its output is no substitute for professional judgment: clinicians and your organization remain responsible for clinical decisions and patient care.
• You’re responsible for your apps: what they do, the access rules you approve, and their legal and regulatory status, for example as a medical device or under privacy, accessibility and healthcare laws.
• We don’t use what you create to train AI models.

• We handle protected health information (PHI) only under a Business Associate Agreement (BAA) signed with us. Without a BAA, you must not put PHI into Panaceum.
• Even with a BAA, PHI belongs only in a HIPAA app’s production environment that we’ve enabled for it, once the app’s go-live checklist is complete. The builder, its chat, previews, share links and staging are for synthetic data only.
• Where Panaceum offers Standard apps, you must not use one, or the builder while working on one, to create, receive, keep or send PHI.
• If PHI turns up where these terms don’t allow it, we may remove it, disable the app or suspend the account, as the BAA and the law allow.
• If the BAA and these terms conflict on anything about PHI, the BAA controls. See our Business Associate Agreement page.

Early access. While Panaceum is invite-only, paid plans aren’t on sale. Publishing with real patient data opens once our BAA is final; from then, during early access, the Hobby plan for a HIPAA app comes at no charge to invited workspaces that have accepted the BAA.

• Building and previewing with synthetic data doesn’t need a paid plan, within the limits our pricing page lists.
• Publishing a HIPAA app, to staging or to production, needs a plan for that app in good standing and the current BAA.
• A plan for a HIPAA app needs a workspace owner to declare the workspace’s classification (such as HIPAA covered entity or business associate) and to accept the current BAA for the organization.
• Our pricing page lists the plans, their prices and what each includes, and checkout shows the price before you pay.
• Stripe handles payments. A paid plan renews every month until it’s cancelled. Owners manage payment details, invoices and cancellation from the workspace’s billing page, and a cancelled plan runs to the end of the period you’ve paid for.
• If you change an app’s paid plan, the difference for the rest of the period is prorated.
• If a payment fails, you can’t publish that app again until the payment method is updated.

You must not use Panaceum, or apps built with it, to:

• put PHI anywhere Protected health information and the BAA doesn’t allow;
• impersonate a real healthcare provider, health records vendor, insurer, pharmacy, bank or government body, or collect people’s passwords for other services (phishing);
• collect payment card numbers or security codes in an app (take payments through a payment provider’s own checkout instead);
• host malware, spam or deceptive content, or anything unlawful, infringing or harmful to children;
• probe, attack or get around the security of Panaceum or other customers’ apps and data, get around our usage limits, mine cryptocurrency, or open accounts to get around a suspension;
• send texts or emails without the consent the law requires;
• offer AI therapy where the law forbids it, or let AI output make clinical decisions without the human review your app needs;
• copy, take apart or reverse engineer Panaceum, except as the law allows, or use it to build a competing product;
• resell or sublicense Panaceum without our written agreement; or
• break the law or anyone else’s rights.

We may block a request, take down a preview, share link or app, suspend users or workspaces, and report unlawful activity. Where an app serves real patients, we’ll try to contact its workspace owners first, unless there’s clear abuse or a risk of imminent harm. Report misuse to privacy@panaceum.app.

• You keep the rights you have in what you put into Panaceum and in what it builds for you: your prompts, files, app code and data.
• You give us a worldwide, non-exclusive, royalty-free licence to host, copy, process, send and display your content only as needed to run Panaceum for you, as our Privacy Policy and any BAA describe.
• You confirm you have the rights and permissions needed for what you put in, including other people’s information.

• Panaceum, panaceum.app, and the building blocks, components and templates your apps are built on belong to us or our licensors. These terms give you no ownership of them; all rights we don’t expressly grant are reserved.
• We give you a limited, non-exclusive, non-transferable, revocable licence to use Panaceum, including those parts as part of your apps, for your organization’s work under these terms.
• Open-source and other third-party components come with their own licences, which apply to them.
• The Panaceum name and logo are ours. Don’t use them without our written permission.

If you send us feedback or suggestions, you give us a perpetual, irrevocable, worldwide, non-exclusive, royalty-free licence to use them in any way, without paying or crediting you. Please don’t send feedback you consider confidential.

• Panaceum works with services others run, such as Google for sign-in, Stripe for payments and the services you connect your apps to. Their own terms and privacy policies apply when you use them, and we aren’t responsible for them.
• If you connect one of your apps to another service, you’re responsible for your agreement with it, including any BAA it needs to receive PHI.
• To the fullest extent the law allows, you release us from claims arising from those services or from your dealings with other users. If you’re a California resident, you waive California Civil Code section 1542, which says: “A general release does not extend to claims that the creditor or releasing party does not know or suspect to exist in his or her favor at the time of executing the release and that, if known by him or her, would have materially affected his or her settlement with the debtor or released party.”

Our Privacy Policy explains how we handle personal information and use cookies, and it’s part of these terms. If the two conflict about personal information, the Privacy Policy controls. Protected health information is governed by the BAA instead.

• You can stop using Panaceum at any time, and ask us to delete your account by emailing privacy@panaceum.app. Owners cancel paid plans from the workspace’s billing page.
• We may suspend or end your access, or a workspace’s, at any time, including if we believe you’ve broken these terms, and we aren’t liable to you for doing so.
• Ending your access doesn’t end the BAA’s protections for any PHI we still hold: the BAA governs returning or destroying it.
• The parts of these terms that by their nature should last, such as our rights, feedback, disclaimers, limits on liability, indemnity and disputes, survive when they end.

Panaceum is provided “as is” and “as available”. To the fullest extent the law allows, we and our suppliers disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, title and non-infringement. We don’t promise that Panaceum, or anything it builds, will be uninterrupted, error-free, secure or free of harmful code, or that it will meet your legal or clinical requirements. Where the law requires a warranty, it lasts 90 days from your first use.

To the extent the law allows: (a) we and our suppliers won’t be liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue or data, or the cost of substitute products, arising from or related to these terms or Panaceum; and (b) our total liability for all claims relating to these terms or Panaceum is limited to the greater of the amount you paid us in the 12 months before the claim and US$100. Having more than one claim doesn’t increase this limit.

These limits don’t reduce what a BAA requires us to do.

You’ll defend, indemnify and hold harmless us and our officers, employees and agents against claims, and reasonable costs and lawyers’ fees, arising from: your use of Panaceum and your apps; your content, including any PHI you put where these terms don’t allow; the regulatory status of your apps and your decisions about them; or your breaking these terms or the law. We may take over the defence at your expense, and you’ll cooperate with it. You won’t settle a claim without our written consent. We’ll make reasonable efforts to tell you promptly about any claim we learn of.

Please read this section carefully. It affects your rights, including your right to go to court and to a jury trial.

• What it covers. Except as below, you and we will resolve every dispute arising out of or relating to Panaceum, panaceum.app or these terms through binding individual arbitration, not in court, including disputes that arose before you accepted these terms. Either side may still bring an individual claim in small claims court, or ask a court for an injunction or other equitable relief to protect intellectual property, such as trademarks, trade secrets or copyrights.
• Try to resolve it first. Before starting arbitration, the side raising the dispute sends the other a written notice describing it. We send ours to the email address on your account. Send yours to privacy@panaceum.app or by mail to the address under Contact. Within 45 days of receiving the notice, you and we will meet by phone or video in good faith to try to resolve it. If it isn’t resolved within 60 days, either side may start arbitration.
• Rules. JAMS administers the arbitration (jamsadr.com): under its Streamlined Arbitration Rules for claims under US$250,000, not counting fees and interest, and under its Comprehensive Arbitration Rules for larger ones. Unless you and we agree otherwise, it takes place in the county where you live. Arbitration materials are confidential.
• What a demand includes. A demand for arbitration must include your contact details and your account’s email address, the claims and the facts behind them, the relief you seek with a good-faith estimate of damages, confirmation that you completed the informal process above, and proof that any filing fee has been paid.
• The arbitrator. The arbitrator decides every dispute this section covers, including its scope and enforceability, except that a court decides challenges to the class action waiver, disputes about arbitration fees, whether a condition for starting arbitration has been met, and which version of this section applies. The arbitrator may award the same relief as a court, but only for the individual claimant. The award is final and binding, and any court with jurisdiction may enter judgment on it.
• No jury trial. By agreeing to arbitration, you and we give up the right to a trial by judge or jury for every dispute this section covers.
• No class actions. Every dispute must be brought individually. Neither you nor we may bring a claim as a plaintiff or class member in any class, collective or representative proceeding, and the arbitrator may award relief only individually. If a court finds this waiver unenforceable for a particular claim, that claim goes to the state or federal courts located in Delaware, and every other claim stays in arbitration.
• Fees. Each side pays its own lawyers’ fees, unless the arbitrator finds a claim was frivolous or brought for an improper purpose.
• Many similar claims. If 100 or more substantially similar demands are filed against us within 30 days by the same law firm or a coordinated group, JAMS batches them in groups of 100, with one arbitrator and one set of fees for each batch.
• Opting out. You can opt out of this arbitration agreement within 30 days of first accepting these terms by emailing privacy@panaceum.app or by writing to Health Council Inc., 2375 East Imperial Hwy., STE 1102, Brea, CA 92821. If you had an account before this version of the terms, you can opt out within 30 days after we tell you about it. Include your name, your address, your account’s email address, and a clear statement that you want to opt out. Opting out doesn’t affect the rest of these terms.
• If part of it fails. If any part of this section is found invalid, it’s changed only as much as needed to make it enforceable, and the rest still applies.

These terms, and any dispute arising out of or relating to them or to Panaceum, are governed by the laws of the State of Delaware, without regard to its conflict-of-law rules; the Federal Arbitration Act governs the arbitration agreement. Any claim that isn’t arbitrated is heard only in the state and federal courts located in Delaware, and you and we consent to their jurisdiction, except that either side may bring an individual claim in small claims court, or seek equitable relief to protect intellectual property in any court with jurisdiction.

We may update these terms. We’ll change the date above, and for significant changes we’ll tell you by email or in Panaceum before they take effect. If you keep using Panaceum after they take effect, you accept the updated terms.

• Whole agreement. These terms, with the Privacy Policy, any BAA and any other terms we show you for a feature, are the whole agreement between you and us about Panaceum. If a part of these terms can’t be enforced, it’s changed only as much as needed and the rest still applies. If we don’t enforce a part, we haven’t waived it. “Including” means “including without limitation”.
• Assignment. You may not transfer these terms without our written consent; we may transfer them. They bind anyone they’re transferred to.
• Notices. You agree that we may give you notices electronically, by email or in Panaceum, and that they satisfy any requirement for written notice.
• Export. You won’t export or transfer anything you get from Panaceum in breach of U.S. export laws or the export laws of other countries.
• Accessibility. We want panaceum.app and Panaceum to be usable by everyone, including people with disabilities. If something is hard to use, tell us at privacy@panaceum.app.
• California users. Under California Civil Code section 1789.3, California users are entitled to this notice: Panaceum is provided by Health Council Inc., 2375 East Imperial Hwy., STE 1102, Brea, CA 92821. For a complaint about Panaceum, or more information about using it, write to that address or email privacy@panaceum.app. You can also contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N112, Sacramento, CA 95834, or by phone at (800) 952-5210.
• Copyright. © 2026 Health Council Inc. All rights reserved.

Questions about these terms, and notices to us, go to:

• Email: privacy@panaceum.app
• Mail: Health Council Inc., 2375 East Imperial Hwy., STE 1102, Brea, CA 92821