Privacy Policy

Overview

LongevityGraph (“we”, “us”, “our”) operates the longevitygraph.ai website and service. This policy explains what data we collect, how we use it, and your rights regarding that data.

The short version: We collect the health data you give us to provide the service. We don’t sell it. We don’t show you ads. We don’t share it with data brokers. Your health data is yours.

What We Collect

Account Information

• Email address (for login and communications)
• Name (optional, for personalization)
• Password hash (if using email/password login)
• Google account ID (if using Google Sign-In)

Health Data You Provide

• Biomarker lab results (entered manually, imported from CSV/PDF, or synced from Function Health)
• Supplement stack (names, dosages, timing)
• Medical conditions and medications
• Treatment and intervention history
• Genetic data (23andMe or AncestryDNA uploads)
• Health goals and targets
• Medical documents (lab reports, DEXA scans, clinical notes)
• Health profile (age, sex, weight, height, lifestyle factors)

Data From Connected Services

• Wearable data from Oura Ring, WHOOP, or Apple Health (sleep, HRV, heart rate, activity)
• Biomarker data from Function Health API sync
• Google Calendar data when an EMR provider connects their calendar (see Google API Services and Limited Use)

Technical Data

• IP address and browser user agent (for security and rate limiting)
• Login timestamps (for account security)
• Usage patterns (which features you use — no third-party analytics)

How We Use Your Data

• To provide the service: Your health data powers the AI analysis, trend tracking, supplement grading, disease risk scoring, and all other features.
• AI processing: Your data is sent to AI models (Anthropic Claude) to generate health insights, supplement recommendations, and analysis. AI providers process data per their API terms and do not use API inputs for training. Google user data obtained via Google APIs is subject to the Limited Use commitments below and is not used to train foundational or generalized AI/ML models.
• Communications: We send you emails you’ve opted into — daily supplement reminders, weekly health digests, and service updates.
• Security: We use technical data to detect abuse, enforce rate limits, and protect your account.

What We Don’t Do

• We do not sell your data to anyone.
• We do not serve ads or share data with advertising networks.
• We do not use third-party analytics (no Google Analytics, no Mixpanel, no tracking pixels).
• We do not share your health data with insurers, employers, or data brokers.

Text Messaging (SMS)

If you opt in, your healthcare practice can text you through LongevityGraph. Opting in is entirely optional and is never a condition of purchasing, using, or receiving any LongevityGraph product, service, or care — you can decline or revoke consent at any time with no effect on your care, and everything we would text you is also available in the app. You opt in by checking an explicit, un-pre-selected consent box (“I agree to receive text messages from my practice”) and verifying your mobile number with a one-time code; we send texts only after you have completed both steps. These are conversational, care-related messages: appointment and visit updates, medication and prescription-refill coordination, lab and result notifications, care check-ins, and replies to questions you send. We do not send marketing or promotional texts.

We do not share or sell your mobile phone number, SMS opt-in, or text-messaging consent with any third party, and we do not share that information with third parties or affiliates for their own marketing or promotional purposes. Mobile information is used only to operate the messaging service you opted into (including our messaging provider, Twilio, which transmits the messages on our behalf).

Message frequency varies based on your care. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help. You can also manage or revoke consent anytime in Settings → Messaging.

Data Storage and Security

• All data is stored in an encrypted database on infrastructure we control.
• Passwords are hashed using bcrypt.
• Session tokens are SHA-256 hashed before storage.
• API keys are stored as SHA-256 hashes (plaintext shown once, never stored).
• Automated encrypted backups run nightly with 7-day/4-week/12-month/3-year retention.
• All connections use TLS encryption in transit.
• File uploads are validated (content-type, magic bytes, size limits).

Bring Your Own AI Keys

You can optionally provide your own AI API keys. When configured, your AI requests go directly to the provider using your key. We never store your AI keys in plaintext — they’re encrypted at rest.

Data Retention and Deletion

• Your data is retained as long as your account is active.
• You can delete your entire account and all associated data from Settings at any time.
• Account deletion is immediate and irreversible — all health data, documents, genetic data, chat history, and account information are permanently removed.
• Waitlist email addresses are retained until you unsubscribe or your account is created.

Third-Party Services

We use the following services to operate LongevityGraph:

Google API Services and Limited Use

LongevityGraph uses Google APIs for:

• Sign-In: Google account identifier and email for authentication.
• Google Calendar (EMR providers who connect a calendar): create, update, and delete only LongevityGraph-originated events on the connected calendar (calendar.events.owned), and read free/busy availability (calendar.freebusy) for scheduling and conflict detection. Event content we push to Google is minimized (for example visit-type label, patient initials, and an EMR deep link)—not full clinical notes or free-text visit reasons. OAuth tokens for connected calendars are stored encrypted at rest and used only to provide these features.

Limited Use. The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use, transfer, or sell Google user data (including raw, aggregated, or derived data) to create, train, or improve foundational or generalized machine learning or artificial intelligence models. We do not retain Google Workspace or Calendar user data obtained through Google APIs for developing, improving, or training non-personalized AI/ML models. Google user data is used only to provide or improve user-facing features that are visible and prominent in LongevityGraph (sign-in and calendar sync / availability).

AI features in LongevityGraph (for example health insights via third-party model providers such as Anthropic) process data you or your practice put into LongevityGraph under this Privacy Policy and applicable agreements; those providers process data under their API terms and do not use API inputs for model training where that is their stated API policy. Google user data obtained via Google APIs is not used to create, train, or improve foundational or generalized AI/ML models.

We do not transfer or sell Google user data to advertising platforms, data brokers, or information resellers, and we do not use Google user data for advertising, credit-worthiness, or lending purposes.

Healthcare Provider Data

If you use LongevityGraph as a healthcare provider, we also process clinical encounter data, patient records, and practice management data within our EMR system. This data is subject to the same security and privacy protections described above.

HIPAA and Healthcare Providers

LongevityGraph serves two audiences under Multos Annos Inc:

• Individuals using LongevityGraph for personal health tracking are not establishing a provider–patient relationship with us. We are not a HIPAA covered entity for that personal-tracking use. Strong security practices still apply; LongevityGraph is not a substitute for professional medical care.
• Health care practices using the LongevityGraph EMR engage Multos Annos Inc as a business associate under HIPAA. PHI handled for those customers is governed by our Business Associate Agreement, which is incorporated into the Provider Terms of Service. Where those Terms conflict with the BAA with respect to PHI, the BAA controls.

We do not market a third-party “HIPAA certification.” Our obligations for provider customers are those of a business associate under the BAA and applicable law.

Your Rights

• Access: You can view all your data within the application at any time.
• Export: You can export your biomarker data as CSV and your full dataset as JSON.
• Deletion: You can delete your account and all data from Settings.
• Communications: You can opt out of all non-essential emails from Settings.

Contact

For privacy questions or data requests, email [email protected].

Changes

We may update this policy as the product evolves. Material changes will be communicated via email to active users. The “last updated” date at the top reflects the most recent revision.