Privacy Policy

1. Introduction

Longevitee ("we," "our," or "us") is committed to protecting your privacy and the security of your personal health information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

We understand that health data is among the most sensitive personal information. We treat your data with the utmost care and transparency.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, date of birth, and authentication credentials when you create an account
• Profile Information: Height, weight, gender, and health goals you choose to share
• Health Assessments: Responses to baseline health questions and self-reported health metrics
• Journal Entries: Diet logs, exercise records, sleep notes, and other health-related entries you create

2.2 Information from Wearable Devices

With your explicit consent, we collect data from connected wearable devices and health platforms, including but not limited to:

Apple HealthKit

• Heart rate and heart rate variability (HRV)
• Step count and distance walked/run
• Sleep analysis data
• Workout and exercise data
• VO2 Max estimates
• Resting heart rate

WHOOP

• Recovery scores and metrics
• Strain data and workout information
• Sleep performance (duration, stages, efficiency)
• Heart rate and HRV measurements
• Respiratory rate
• Skin temperature variations

Other Integrations

• Oura Ring sleep and readiness data
• Garmin fitness and health metrics
• Other compatible wearable devices you choose to connect

2.3 Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Features used, screens viewed, and interaction patterns within the app
• Log Data: Access times, error logs, and diagnostic information

3. How We Use Your Information

We use your information to:

• Provide Personalized Health Insights: Analyze your health data to deliver tailored recommendations, track progress toward your goals, and identify health trends
• Power AI Features: Our AI health assistant uses your data to provide contextual, personalized responses to your health questions
• Improve Our Service: Understand usage patterns to enhance features and user experience
• Communicate With You: Send service-related notifications, updates, and respond to your inquiries
• Ensure Security: Detect and prevent fraud, abuse, and security incidents
• Comply With Legal Obligations: Meet applicable legal and regulatory requirements

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored on secure cloud infrastructure provided by Google Cloud Platform (GCP), with servers located in the United States. We use industry-standard encryption for data at rest and in transit.

4.2 Security Measures

• TLS 1.3 encryption for all data transmission
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Access controls and authentication requirements for all personnel
• Secure authentication via Firebase Authentication (Google, Apple Sign-In)

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal health information to third parties for their marketing purposes.

5.2 Limited Sharing

We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our Service (e.g., cloud hosting, analytics), bound by strict confidentiality agreements
• With Your Consent: When you explicitly authorize sharing with specific third parties
• Legal Requirements: When required by law, court order, or governmental authority
• Safety: To protect the rights, safety, or property of Longevitee, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with continued protection of your data

5.3 Aggregated and De-identified Data

We may use aggregated, anonymized data that cannot reasonably be used to identify you for research, analytics, and service improvement purposes.

6. Your Rights and Choices

6.1 Access and Portability

You can access your personal data through the app at any time. You may request a copy of your data in a portable format by contacting us.

6.2 Correction

You can update or correct your account information directly in the app settings.

6.3 Deletion

You may request deletion of your account and associated data at any time. Upon request, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention).

6.4 Wearable Disconnection

You can disconnect any wearable device integration at any time through the app settings. Once disconnected, we will no longer collect new data from that source.

6.5 Communication Preferences

You can opt out of promotional communications while still receiving essential service notifications.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our Service. After account deletion:

• Personal data is deleted within 30 days
• Anonymized, aggregated data may be retained indefinitely for analytics
• Backup copies are purged within 90 days
• Data required for legal compliance may be retained as required by law

8. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete that information promptly.

9. International Data Transfers

If you access our Service from outside the United States, your data may be transferred to and processed in the United States. By using our Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

10. Third-Party Services

Our Service may integrate with third-party services (WHOOP, Apple HealthKit, etc.). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@longevitee.com
• Address: Longevitee Ltd, London, United Kingdom

For data deletion requests or to exercise your privacy rights, please email us at privacy@longevitee.com with the subject line "Privacy Request."