Privacy Policy

1. Who we are

LongevityMate is a biomarker tracking and education platform that helps you understand your blood test results and monitor trends over time. The Service may include AI-generated insights and reports.

Contact: hello@longevitymate.com

2. The information we collect

We collect information in a few categories:

3. How we use your information

• Provide, operate, and improve the Service
• Generate dashboards, reports, recommendations, and personalized insights
• Import and summarize data you authorize through Apple Health or Health Connect
• Store biomarker history, account settings, consent records, and uploaded report data in your account
• Run AI-powered features only when you enable them, such as AI reports, Mate, and lab extraction
• Validate an uploaded DNA file and produce supported educational findings when you explicitly enable Genetic Blueprint
• Use approved derived genetic findings in Mate, My Plan, and personalized reports only when you separately allow that use
• Maintain security, prevent fraud, and stop bot/spam abuse
• Process subscriptions and manage billing status
• Communicate with you about account updates and support
• Analyze usage to improve reliability and user experience
• Comply with legal obligations and enforce Terms

4. Legal bases (EEA/UK)

• Contract – to provide the Service you requested
• Legitimate interests – to secure and improve the Service
• Consent – where required (including explicit consent for genetic and other special-category data, and consent for certain cookies or marketing emails)
• Legal obligation – when law requires it

5. How we share information

We do not sell your personal information. We share data only as needed to provide the Service and only with service providers or parties described below:

• Supabase for application infrastructure, database storage (Postgres), authentication, and related storage
• Stripe or other payment processors for subscription and billing workflows
• Approved AI providers, such as OpenAI, Gemini, or Grok, only when you enable AI analysis and use AI-powered features such as AI reports, Mate, or lab extraction
• Customer support, email, analytics, and security providers as needed
• Legal or safety requests when required by law
• Business transactions (merger, acquisition, or reorganization) with safeguards

We require third-party service providers to protect data using the same or equivalent safeguards that we require for our own systems and to use the data only for the contracted service.

We do not send your raw DNA upload to advertising or analytics providers, or include the raw file in prompts to AI providers. We do not use genetic data for advertising, sell it, or use it for research or model training. A future research program, if ever offered, would require a separate, specific opt-in.

6. Cookies and tracking

We use cookies for essential functions, remembering preferences, and analytics. Control them via your browser.

We may use first-party aggregate heatmap analytics on public website pages to understand clicks and scroll depth. This does not record session videos, form values, private dashboard pages, uploaded health data, or report contents.

7. Data security

We use encryption, access controls, and monitoring to protect your information. No method is 100% secure.

Structured account, biomarker, report, wearable, and consent data is stored in Supabase-backed Postgres. Genetic metadata, supported findings, and consent records are stored there as well. Uploaded files and generated assets may also be stored in private cloud storage tied to that infrastructure.

8. Data retention

We retain information only as long as needed to provide the Service, comply with law, or resolve disputes.

You can request deletion of your account, AI chat history, or connected health data controls from within the product or by contacting support.

For Genetic Blueprint, the raw source file is temporary: we delete it after successful processing. Failed, interrupted, or abandoned raw uploads are placed on an automatic 24-hour expiry after the upload session begins. We keep only the supported marker matches needed to substantiate your findings, the derived explanations, quality and coverage receipts, and consent records. Those records remain in your account until you delete Genetic Blueprint data, withdraw genetic-data processing consent, delete your account, or retention is otherwise required by law.

A deletion removes genetic content from the active product systems. Residual encrypted backup copies, where they exist, are isolated from normal use and age out under our infrastructure provider's backup-retention schedule unless the law requires longer retention.

9. Your rights and choices

You may request access, correction, deletion, portability, restriction, objection, or consent withdrawal.

Genetic Blueprint has separate controls. You can turn off use of derived findings by Mate, My Plan, and reports while keeping the blueprint itself, or delete all Genetic Blueprint data. Withdrawing genetic-data processing consent deletes the blueprint and stops its future use without deleting your other health data. Withdrawing consent does not make earlier lawful processing unlawful.

Email requests to hello@longevitymate.com. We may need to verify your identity.

You can unsubscribe from marketing emails at any time. Service emails may still be sent.

10. International transfers

Your information may be processed in other countries. We use safeguards required by law for transfers.

11. Children

The Service isn’t intended for children under 13 (or the minimum legal age). Contact us if you believe a child provided data.

12. Changes

We may update this Privacy Policy. We’ll update the “Last updated” date and provide notice for material changes.

13. Contact

Questions or requests: hello@longevitymate.com