Privacy Policy
Last updated: July 2026
The short version: your longevity numbers are calculated in your browser. Your answers never reach our servers unless you choose to save, share, or buy. We never sell, rent, or share your data with anyone: not advertisers, not insurers, no one. We make money from memberships, not from your data. Ask us to delete your data and it's gone.
What we collect
We collect only the information you voluntarily provide: first name, birth month and year, gender, height, weight, and lifestyle assessment answers. All longevity calculations run entirely in your browser. Your health data is never transmitted to our servers unless you choose to email your results, save your plan, or make a purchase.
How we use your data
We use your data exclusively to: (1) calculate your longevity estimate in your browser, (2) deliver results to your email if you request it, (3) send check-in reminders when you create an account and save your plan, which you can unsubscribe from at any time via any email, and (4) improve the accuracy and usefulness of Longlevity through aggregated analysis. We do not sell, rent, trade, or share your personal information with any third party for marketing, advertising, or any other purpose.
Email & server-side storage
If you save your results or make a purchase, we store your name, email address, estimated lifespan, category scores, and selected action plan on our server (Cloudflare's infrastructure) so you can return to them. When you create an account we schedule a one-time 7-day check-in reminder (deleted within 30 days) and a recurring check-in reminder at the cadence you choose (default monthly), which we keep until you change it, unsubscribe, or delete your account. Your email address and unsubscribe preference are stored to honor your communication choices. If you turn on notifications on a device, we store that device's push subscription (an anonymous endpoint token, with no health data or personal details) so we can deliver your check-in reminders as notifications; you can turn them off any time in your device or browser settings, and they are removed when you delete your account.
Compare & sharing features
When you're signed in and add someone to Compare, the details you enter about them (name, age, gender) are saved to your account so you can return to the comparison. They're kept until you remove that person or delete your account, and they're never shown to anyone but you. When you share results or a compare link, some personal data (name, age, estimated lifespan) may be stored on our servers for up to 90 days to allow recipients to access the link. That link data is visible to anyone who receives the link. Legacy share links encode data directly in the URL. Be mindful of who you share these links with.
Browser storage
We use your browser's localStorage to preserve your progress between visits. This data stays entirely on your device and is automatically cleared after 7 days of inactivity, or 2 hours of inactivity once you have completed your assessment (whichever comes first). If you email yourself a plan, we also store your check-in return link locally so you can access your plan without needing the email. No health data is stored in cookies. You can clear this data at any time through your browser settings.
Third-party processors
We use the following services, each bound by their own privacy policies:
- Cloudflare: hosting, serverless compute, and encrypted data storage (cloudflare.com/privacypolicy)
- Cloudflare Insights: aggregated, anonymized real-user performance metrics (page load times, etc.); receives no health data, no names, no email addresses (cloudflare.com/privacypolicy)
- Resend: email delivery only; receives your email address and message content (resend.com/legal/privacy-policy)
- Stripe: payment processing for purchases; receives billing information you provide at checkout (stripe.com/privacy)
- Google Fonts: serves the Inter typeface used across the site; Google may receive your IP address when the font loads (policies.google.com/privacy)
- Google Analytics 4: usage and conversion analytics; receives no health answers, no names, and no email addresses (policies.google.com/privacy). GA4 sets cookies including
_ga(2-year client identifier),_gid(24-hour session ID), and_gat(rate limiting). You can block analytics cookies via browser settings without affecting the calculator.
No other third parties receive your data.
Analytics & cookies
We use Google Analytics 4 (GA4) to understand usage patterns such as page views, device type, and approximate geographic region, and to record aggregate conversion events (for example, that a purchase occurred, its amount, and which of our ad campaigns a visitor came from). GA4 uses a pseudonymous cookie identifier to distinguish returning visitors; it never receives your name, email address, or any of your health answers. You can block analytics cookies via your browser settings or browser extensions without affecting the calculator's functionality.
Data retention
- Unsubscribe preferences: retained indefinitely to permanently honor your opt-out
- Account data (your saved assessments, plan, and any purchases): kept for as long as you have an account. If your Longlevity Plus expires or you receive a refund, your data is kept dormant (read-only), not deleted, so your history is intact if you return. It is removed only when you ask us to delete it (see "Your rights" below).
- Assessment snapshots: when you save a plan or re-assess as a member, we keep a snapshot of the answers behind that result (your lifestyle responses, birth month and year, sex, height and weight, and first name) for up to 5 years per snapshot. This lets us show you how your estimate has changed if you return and reassess. These snapshots are tied to your email, are never sold or shared, and are deleted along with everything else if you request deletion.
- People you add to Compare: kept with your account until you remove them or delete your data
- Compare and gift links: up to 90 days, then automatically deleted
- One-time 7-day reminder: deleted within 30 days
- Recurring check-in schedule: kept until you change your cadence, unsubscribe, or delete your data
- Browser localStorage: 7 days from last activity for incomplete sessions, 2 hours from last activity for completed sessions, then automatically cleared
- We keep these snapshots solely to show you your own progress over time. We do not build advertising or behavioral profiles, and we do not sell or share your data.
Your rights
Regardless of where you live, you have the right to:
- Access: Request a copy of any personal data we hold about you
- Deletion: Request complete removal of all your data from our systems
- Correction: Request correction of any inaccurate data
- Opt-out: Unsubscribe from emails at any time via the link in any email
- Portability: Request your data in a standard, machine-readable format
To exercise any of these rights, email contact@longlevity.ai. We will respond within 30 days.
For California residents (CCPA)
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), you have the right to know, correct, and delete the personal information we collect, and to opt out of its sale or sharing. We do not sell or share your personal information, and we do not use sensitive personal information (such as your health answers) for anything beyond providing the service you request. We never discriminate against you for exercising these rights. We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out request. To submit a request, email contact@longlevity.ai with the subject line "Privacy Request."
Users outside the United States
Longlevity is operated from the United States and is intended for users in the U.S. We do not target, market to, or specifically offer our service to residents of the European Economic Area, the United Kingdom, or other regions. If you choose to access Longlevity from outside the United States, you do so on your own initiative, and your information is processed and stored in the United States under U.S. law.
Wherever you are located, the access and deletion controls described above apply to you. You can request a copy of your data, or its deletion, at any time by emailing contact@longlevity.ai. We honor these requests regardless of your country of residence. Citron Labs LLC (300 Lenora St, #6499, Seattle, WA 98121) is responsible for the data described in this policy.
Health data
Longlevity collects lifestyle information (sleep, exercise, diet, stress, smoking, alcohol habits) to generate longevity estimates. This data is processed locally in your browser and is only transmitted to our server when you email yourself your results, save your plan, or make a purchase. We treat this information as sensitive and do not share it with any third party. We are not a covered entity under HIPAA and do not provide medical services.
Children's privacy
Longlevity is intended for users aged 13 and older, and purchases require you to be at least 18. We do not knowingly collect personal information from children under 13. When the age entered in the assessment is under 13, we automatically disable account creation, email sign-up, and checkout, so no email address, saved data, or payment information is collected, and our servers refuse to store any assessment record whose age indicates a user under 13. The estimate and habit tips still work on the device, but nothing is saved or emailed. If you believe a child under 13 has provided us with personal information, please contact us immediately at contact@longlevity.ai and we will delete it promptly.
Security
We protect your data using industry-standard measures including HTTPS encryption in transit, Cloudflare's enterprise-grade infrastructure, HMAC-signed tokens for email security, and rate limiting on all API endpoints. We temporarily process IP addresses for rate limiting and abuse prevention. While no system is perfectly secure, we take reasonable precautions to safeguard your information.
Changes to this policy
If we make material changes to how we handle your data, we will update the "last updated" date above. For significant changes, we will notify affected users via email if we have their address. Continued use after changes constitutes acceptance of the updated policy.
Data breach notification
In the event of a confirmed data breach affecting your personal information, we will notify affected users without unreasonable delay, consistent with applicable law, via email or by posting notice on our website. We will also notify regulatory authorities as required by applicable law.
Contact
Questions about your privacy or data? Email us at contact@longlevity.ai or write to us at Citron Labs LLC, 300 Lenora St, #6499, Seattle, WA 98121. We aim to respond to all privacy inquiries within 7 business days.