Effective Date: April 27, 2026
Last Updated: April 27, 2026

bioAffinity Technologies, Inc. (“bioAffinity,” “we,” “our,” or “us”) is committed to protecting the privacy and security of visitors to our website, including our Investor Relations section. This Privacy Policy describes how we collect, use, disclose, and safeguard information obtained through our website.

1. Scope of This Policy

This Privacy Policy applies to information collected through:

• Our corporate website 
• Our Investor Relations (“IR”) pages 
• Investor email alert signups and inquiry forms 

This policy does not apply to information collected through clinical services, laboratory testing, or other healthcare operations.

2. Information We Collect

Information You Provide Voluntarily

We may collect personal information that you provide directly, including:

• Name 
• Email address 
• Company or affiliation (if provided) 
• Any information submitted through contact forms or investor inquiries 

Investor Communications Data

If you subscribe to investor alerts, we collect your contact details and communication preferences to deliver:

• Press releases 
• SEC filings 
• Financial results 
• Corporate updates 

Automatically Collected Information

We may automatically collect certain information when you visit our website, including:

• IP address 
• Browser type and device information 
• Pages visited and time spent on the site 
• Referring URLs 

This information is collected using cookies and similar technologies.

3. How We Use Information

We use the information we collect to:

• Provide investor communications and updates 
• Respond to inquiries from investors, analysts, and stakeholders 
• Operate, maintain, and improve our website and IR platform 
• Monitor usage trends and website performance 
• Comply with legal and regulatory obligations 

4. Sharing of Information

bioAffinity does not sell personal information.

We may share information with:

• Service providers that support website hosting, analytics, and investor communications 
• Investor Relations platform providers that manage email alerts and IR website functionality 
• Regulatory authorities when required to comply with applicable laws, including securities regulations 

All third-party providers are expected to handle information in a secure and confidential manner.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enhance user experience 
• Understand how visitors interact with our website 
• Support analytics and performance measurement 

You can control or disable cookies through your browser settings.

6. Third-Party Links

Our website, including the Investor Relations section, may contain links to third-party websites such as:

• SEC filings hosted on the EDGAR database 
• Stock quote and financial data providers 

bioAffinity is not responsible for the privacy practices or content of these external websites.

7. Healthcare Information Disclaimer

bioAffinity operates in the healthcare and diagnostic space, including development of technologies such as CyPath® Lung. However, the Investor Relations section of this website does not collect, store, or process Protected Health Information (PHI) and is not subject to the Health Insurance Portability and Accountability Act (HIPAA).

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, or misuse. However, no internet-based system can be guaranteed to be completely secure.

9. Data Retention

We retain personal information only as long as necessary to:

• Fulfill the purposes described in this Privacy Policy 
• Maintain investor communication records 
• Comply with legal, regulatory, and reporting obligations 

10. Your Rights and Choices

You may:

• Unsubscribe from investor communications at any time using the link provided in emails 
• Request access, correction, or deletion of your personal information, subject to applicable legal requirements 

To make a request, please contact us using the information below.

11. Children’s Privacy

Our website and Investor Relations pages are not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact:

bioAffinity Technologies, Inc.
info@bioaffinitytech.com
210.698.5334
3300 Nacogdoches Road Suite 216
San Antonio, TX 78217

14. Forward-Looking Statements

The Investor Relations section of this website may contain forward-looking statements subject to risks and uncertainties. Please refer to our filings with the U.S. Securities and Exchange Commission for additional information.