Privacy Policy

Last updated: October 2026

The short version: your longevity numbers are calculated in your browser. Your answers never reach our servers unless you choose to save them or email them to yourself. A support payment sends Stripe the amount, never your answers. We never sell, rent, or share your data with anyone: not advertisers, not insurers, no one. Longlevity is free for everyone. The only money we take is a support payment you choose to make, never your data. Ask us to delete your data and it's gone.

What we collect

We collect only the information you voluntarily provide: first name, age, sex, height, weight, and your assessment answers, including family history. We work out a birth year from your age, and we hold a birth month only if you gave one in an earlier version of the assessment or add one in your profile. All longevity calculations run entirely in your browser. Your health data is never transmitted to our servers unless you choose to email your results, save your results to an account, or make a support payment. Anonymous usage counts are collected for every visitor, with no identifier. One of them carries a single figure derived from your result, the gap between your estimate and your potential, which is added to a running total and not stored against you. We also count visits by country.

How we use your data

We use your data exclusively to: (1) calculate your longevity estimate in your browser, (2) deliver results to your email if you request it, (3) send the transactional emails you initiate, such as sign-in links and refund confirmations, (4) if you create an account and save your results, send the one re-measure invitation per year that the save flow promises, which you can unsubscribe from at any time via any email, (5) if you make a support payment, let Stripe send you its receipt, with no email of ours and no change to your account, and (6) improve the accuracy and usefulness of Longlevity through aggregated analysis. We do not sell, rent, trade, or share your personal information with any third party for marketing, advertising, or any other purpose.

Email & server-side storage

If you save your results, we store your name, email address, estimated lifespan, and category scores on our server (Cloudflare's infrastructure) so you can return to them. When you save your results we send one re-measure invitation per year, about a year after your most recent measurement; we store a small send marker so we never send more than one a year, and it expires on its own within about a year. Your email address and unsubscribe preference are stored to honor your communication choices. If you turn on notifications on a device, we store that device's push subscription (an anonymous endpoint token, with no health data or personal details) so notifications can be delivered to that device; you can turn them off any time in your device or browser settings, and they are removed when you delete your account.

When you use Compare, the details you enter about the other person (name, age, sex) are used to draw the card on your screen. They are not sent to our servers and are not saved. We count that Compare was used, and how often you said you see each other is recorded in our analytics without those details. When you share, you share an image of your card, a short message with the numbers on it, and a plain link to Longlevity. The image is made on your device and is not uploaded to us. The link carries no personal data, only a tag for which card was shared. Anyone you send the image or message to can see what is on it, so be mindful of who you share it with. If you saved people to Compare on or before 7 September 2026, those entries stay with your account until you delete your data.

Browser storage

We use your browser's localStorage to preserve your progress between visits. This data stays entirely on your device and is automatically cleared after 7 days of inactivity, or 2 hours of inactivity once you have completed your assessment (whichever comes first). If you email yourself your results, we also store your check-in return link locally so you can get back to them without needing the email. No health data is stored in cookies. You can clear this data at any time through your browser settings.

Third-party processors

We use the following services, each bound by their own privacy policies:

Cloudflare: hosting, serverless compute, and encrypted data storage (cloudflare.com/privacypolicy)
Cloudflare Insights: aggregated, anonymized real-user performance metrics (page load times, etc.); receives no health data, no names, no email addresses (cloudflare.com/privacypolicy)
Resend: email delivery only; receives your email address and message content (resend.com/legal/privacy-policy)
Stripe: payment processing for support payments; receives billing information you provide at checkout, and passes us the email address you enter there so we can send your receipt, which we use for that email and do not store (stripe.com/privacy)
Fonts: the Inter typeface is served from longlevity.ai itself. No font request goes to Google or to any other third party
Google Analytics 4: usage and conversion analytics; receives no health answers, no names, and no email addresses (policies.google.com/privacy). GA4 sets cookies including _ga (2-year client identifier), _gid (24-hour session ID), and _gat (rate limiting). You can block analytics cookies via browser settings without affecting the calculator. If you are visiting from the European Union, the European Economic Area, the United Kingdom, Switzerland or Brazil, Google Analytics does not load at all, so none of these cookies are set and nothing about your visit reaches Google.

No other third parties receive your data.

Analytics & cookies

We use Google Analytics 4 (GA4) to understand usage patterns such as page views, device type, and approximate geographic region, and to record aggregate conversion events (for example, that a support payment occurred, its amount, and which of our ad campaigns a visitor came from). GA4 uses a pseudonymous cookie identifier to distinguish returning visitors; it never receives your name, email address, or any of your health answers. You can block analytics cookies via your browser settings or browser extensions without affecting the calculator's functionality. Visitors from the European Union, the European Economic Area, the United Kingdom, Switzerland and Brazil are not measured by Google Analytics at all. We decide that at our edge from the country of your connection, and for those visits Google's script is never loaded. Our own counters, which hold no identifier and no personal data, still count the visit.

Data retention

Unsubscribe preferences: kept until you save your results again, which asks for the yearly invitation afresh. In between, your opt-out is honored
Account data (your saved assessments): kept for as long as you have an account. A refund changes nothing in your account. It is removed only when you ask us to delete it (see "Your rights" below).
Assessment snapshots: when you save your results or re-assess as a member, we keep a snapshot of the answers behind that result (your assessment answers including family history, your age and the birth year worked out from it, a birth month if you ever gave one, your sex, your height and weight and the body mass index worked out from them, and your first name if you gave one) for up to 5 years per snapshot. This lets us show you how your estimate has changed if you return and reassess. These snapshots are tied to your email, are never sold or shared, and are deleted along with everything else if you request deletion.
People you enter in Compare: not saved. Entries saved to an account on or before 7 September 2026 stay with it until you delete your data
Annual invitation marker (one send per year): expires automatically within about a year of each send
Browser localStorage: 7 days from last activity for incomplete sessions, 2 hours from last activity for completed sessions, then automatically cleared
Sign-in on this device: when you sign in, this browser keeps a sign-in token for 90 days and the email address you signed in with beside it. Both are removed when you log out or when the token expires. If you delete your account, the token stops working at once and is cleared from the device on its next visit. On a shared computer, log out when you are done
We keep these snapshots solely to show you your own progress over time. We do not build advertising or behavioral profiles, and we do not sell or share your data.

Your rights

Regardless of where you live, you have the right to:

Access: Request a copy of any personal data we hold about you
Deletion: Request complete removal of all your data from our systems
Correction: Request correction of any inaccurate data
Opt-out: Unsubscribe from emails at any time via the link in any email
Portability: Request your data in a standard, machine-readable format

To exercise any of these rights, email contact@longlevity.ai. We will respond within 30 days.

For California residents (CCPA)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), you have the right to know, correct, and delete the personal information we collect, and to opt out of its sale or sharing. We do not sell or share your personal information, and we do not use sensitive personal information (such as your health answers) for anything beyond providing the service you request. We never discriminate against you for exercising these rights. We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out request. To submit a request, email contact@longlevity.ai with the subject line "Privacy Request."

Users outside the United States

Longlevity is operated from the United States and is intended for users in the U.S. We do not target, market to, or specifically offer our service to residents of the European Economic Area, the United Kingdom, or other regions. If you choose to access Longlevity from outside the United States, you do so on your own initiative, and your information is processed and stored in the United States under U.S. law.

Wherever you are located, the access and deletion controls described above apply to you. You can request a copy of your data, or its deletion, at any time by emailing contact@longlevity.ai. We honor these requests regardless of your country of residence. Citron Labs LLC (300 Lenora St, #6499, Seattle, WA 98121) is responsible for the data described in this policy.

Health data

Longlevity collects lifestyle information (sleep, exercise, diet, stress, smoking, alcohol habits) to generate longevity estimates. This data is processed locally in your browser and is only transmitted to our server when you email yourself your results, or save your results to an account. A support payment sends only the amount. We treat this information as sensitive and do not share it with any third party. We are not a covered entity under HIPAA and do not provide medical services.

Children's privacy

Longlevity is intended for adults aged 18 and older. The assessment does not accept an age under 18, and we do not knowingly collect personal information from anyone under 18. Our servers also refuse to store any assessment record whose age indicates a child under 13. If you believe a person under 18 has provided us with personal information, please contact us immediately at contact@longlevity.ai and we will delete it promptly.

Security

We protect your data using industry-standard measures including HTTPS encryption in transit, Cloudflare's enterprise-grade infrastructure, HMAC-signed tokens for email security, and rate limiting on all API endpoints. We temporarily process IP addresses for rate limiting and abuse prevention. While no system is perfectly secure, we take reasonable precautions to safeguard your information.

Changes to this policy

If we make material changes to how we handle your data, we will update the "last updated" date above. For significant changes, we will notify affected users via email if we have their address. Continued use after changes constitutes acceptance of the updated policy.

Data breach notification

In the event of a confirmed data breach affecting your personal information, we will notify affected users without unreasonable delay, consistent with applicable law, via email or by posting notice on our website. We will also notify regulatory authorities as required by applicable law.

Contact

Questions about your privacy or data? Email us at contact@longlevity.ai or write to us at Citron Labs LLC, 300 Lenora St, #6499, Seattle, WA 98121. We aim to respond to all privacy inquiries within 7 business days.