Privacy Policy

1. Who this policy covers

This policy applies to the Longevity120 website at longevity120.ai, the Longevity120 application at app.longevity120.ai, and the Longevity120 mobile applications (together, the “Service”). It applies to visitors who browse public pages and to members who create an account.

Longevity120 is a consumer wellness service intended for adults in the United States, designed primarily for people aged 50 and over. It is not a healthcare provider, is not a health plan, and does not deliver medical care.

2. Information we collect

Information you give us

• Account information — email address, authentication credentials or passkeys, and the security settings you choose, such as multi-factor authentication and recovery codes.
• Wellness setup — the goals, preferences, routines, and interests you select so the Service can assemble a plan that matches them.
• Self-reported wellness entries — the daily actions, habits, diary notes, and measurements you choose to record.
• Documents you upload — files such as lab reports, when you upload them and give explicit consent for automated text extraction.
• Support and correspondence — what you write to us when you contact support.

Information collected automatically

• Technical and device data — IP address, browser and device type, operating system, and timestamps, used for security, abuse prevention, and reliability.
• Service usage — which features were used and when, so we can keep the Service working and improve it.

Public landing pages on longevity120.ai do not set cookies of their own and do not load third-party tracking scripts.

3. How we use information

• To create and secure your account and verify it is you.
• To generate your personal plan, daily actions, and progress view from the goals and entries you provide.
• To deliver educational programs, lessons, and reference material.
• To answer support requests and communicate about the Service, including security and service notices.
• To protect the Service against fraud, abuse, and unauthorized access.
• To meet legal obligations and to establish, exercise, or defend legal claims.

We use the minimum information that achieves each purpose. If a feature does not need a category of information, that feature does not receive it.

4. What we do not do

• We do not sell your personal information, and we do not sell or share health-related information for cross-context behavioral advertising.
• We do not use your health-related information to build advertising audiences or to target advertising to you.
• We do not place third-party advertising or analytics trackers on authenticated screens.
• We do not monitor your entries in real time, and we do not provide emergency response.
• We do not use your information to produce a medical diagnosis, a treatment decision, or a determination of urgency.

5. Automated processing and AI

Some features use automated processing, including AI-assisted text, to organize education, suggest routines, and summarize what you have recorded. Where AI is involved, the Service indicates it.

Automated features operate inside fixed limits. They do not diagnose a condition, do not prescribe or adjust medication, do not determine whether a situation is urgent, and do not replace a conversation with a qualified healthcare professional. Where a feature relies on evidence or source material, the Service is designed to show what that material is, when it was reviewed, and what its limitations are.

Automated processing is not used to make decisions that produce legal or similarly significant effects about you.

6. When information is shared

We share personal information only in these situations:

• At your direction. When you choose to share a report or record with a healthcare professional, a caregiver, or another recipient, that sharing happens because you took an explicit action, and you can revoke it.
• Service providers. Vendors that host infrastructure, deliver email, process payments, or provide security services may process information strictly on our instructions and under contractual confidentiality and security obligations. They may not use it for their own purposes.
• Legal requirements. When we are legally required to disclose information, or where disclosure is necessary to protect the rights, safety, or property of members, the public, or Longevity120.
• Business transfers. If Longevity120 is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction. We will provide notice before your information becomes subject to a materially different privacy policy.

7. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, encrypted storage for sensitive records, access controls limited to what a role requires, secure credential handling with support for passkeys and multi-factor authentication, device and session revocation, and audit logging of privileged actions.

No method of transmission or storage is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by applicable law.

8. How long information is kept

We keep account and wellness information for as long as your account is active, and afterward only as long as needed for the purposes described in this policy or as required by law. When you delete an entry, it is removed from your active record. When you close your account, we delete or de-identify your personal information within a reasonable period, except where retention is legally required — for example, records related to payments, security incidents, or legal claims.

9. Your choices and rights

Regardless of where you live, you can:

• access and review the information in your account;
• export your wellness records in a portable format;
• correct information that is inaccurate;
• delete individual entries, uploaded documents, or your entire account;
• withdraw a consent you previously gave, including consent for automated text extraction from uploaded documents;
• revoke access you granted to another person or to a device.

Residents of states with comprehensive privacy laws — including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana, among others — additionally have the right to confirm whether we process their personal information, to obtain a copy of it, to correct or delete it, to opt out of sale, targeted advertising, and certain profiling, and to appeal a decision we make about a request. We do not sell personal information and do not process it for targeted advertising, so there is nothing to opt out of, but you may still submit a request.

To exercise any right, write to info@longevity120.ai. We will verify your request through your account and respond within the period required by applicable law. We will not deny you service, charge you a different price, or provide a lower quality of service because you exercised a privacy right. An authorized agent may submit a request on your behalf with proof of authorization.

10. Children

The Service is intended for adults 18 and over and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, write to info@longevity120.ai and we will delete it.

11. Cookies and similar technologies

Public landing pages do not set cookies. Inside the application, cookies and equivalent local storage are used for essential purposes only: keeping you signed in, remembering your security preferences, and protecting against cross-site request forgery. We do not use advertising cookies. Because we do not track members across other websites, the Service does not respond differently to browser “Do Not Track” signals; where required, we honor opt-out preference signals such as Global Privacy Control.

12. Changes to this policy

We may update this policy as the Service changes. When a change is material, we will update the “last updated” date and provide notice through the Service or by email before the change takes effect. Continuing to use the Service after a change takes effect means you accept the updated policy.

13. Contact us

Questions about this policy, or a request about your information, can be sent to info@longevity120.ai. See the contact page for what to include so we can respond quickly.