Privacy Policy

The Longevity Lab ("we," "us," or "our") operates thelongevitylab.app. This policy explains what data we collect, how we use it, and what rights you have over it.

1. What we collect

Account data: Your email address, collected when you sign in via magic link.

Health metrics you enter: The data you manually input into the platform — including but not limited to HRV, resting heart rate, deep sleep duration, blood work values, body weight, and other biomarkers. You control what you enter. We do not pull data directly from any wearable device or third-party health platform in the current version of the app.

Usage data: Standard server logs including IP address, browser type, pages visited, and timestamps. We use this to keep the service running and to diagnose errors.

Payment data: Payments are processed by Stripe. We do not store your credit card number. We receive confirmation of payment status and the email address associated with your Stripe transaction.

2. How we use your data

We use your data to:

• Generate your 90-day protocol and synthesis reports
• Send you transactional emails (magic link sign-in, receipts)
• Maintain and improve the platform
• Respond to your support requests

We do not sell your data. We do not share your health metrics with third parties for advertising or marketing purposes.

3. Where your data is stored

Your data is stored in a Neon Postgres database hosted on infrastructure in the United States. The app is deployed on Vercel. Both providers maintain their own security and compliance programs.

4. How long we keep your data

We retain your data for as long as your account is active. If you delete your account via Settings → Delete Account, all your data — including your health entries, synthesis reports, and profile — is permanently deleted from our database. There is no grace period. Deletion is immediate and irreversible.

5. Your rights

You can request a copy of your data or ask us to delete it at any time by emailing support@thelongevitylab.app. We will respond within 10 business days.

If you are a resident of California or Washington state, you may have additional rights under applicable privacy law. Contact us to exercise them.

6. Cookies

We use a session cookie to keep you signed in. We do not use advertising cookies or third-party tracking pixels.

7. Children

The Longevity Lab is not intended for anyone under 18. We do not knowingly collect data from minors.

8. Changes to this policy

If we make material changes to this policy, we will update the effective date above and notify active members by email.

9. Contact

Questions about this policy: support@thelongevitylab.app