Privacy Policy

Effective: May 1, 2026 · Last updated: May 1, 2026

TL;DR. We collect health-adjacent data you connect to us so we can produce your Life Statement and AI Coach insights. We don't sell it, we don't rent it, we don't use it to train models without explicit consent. You can export or delete everything at any time.

1. Scope

This Privacy Policy describes how SuperAging.AI ("SuperAging," "we," "us") handles personal information when you visit superaging.ai or use our services. By using our services, you agree to the practices described here.

2. What we collect

Information you provide

Account information (name, email, password hash), billing information processed by our payment provider, content you log directly (book titles, course progress, hobby notes), and messages you send to the AI Coach.

Information from connected sources

When you authorize a data source, we receive only the categories you approve. This may include:

Google Health Connect: heart rate, sleep stages, steps, workouts, weight, HRV, SpO2, blood pressure (when available)
Labcorp portal: lab results you explicitly import (lipid panel, A1C, etc.)
Brain-training apps: session times, scores, streak data
Curiosity Log: books, courses, skills you log yourself

Information collected automatically

Device type, browser, IP address, pages visited, time on site. We use minimal, privacy-respecting analytics that do not require cross-site tracking cookies.

3. How we use it

To generate your monthly Life Statement and Coach insights
To deliver the services you signed up for and process payments
To respond to your support requests
To send you account-related email (statement ready, billing receipts)
To improve our product — using anonymized, aggregate patterns only
To comply with legal obligations

We do not use your health data to train AI models unless you explicitly opt in to a specific research program. Default is off, always.

We share information only with service providers who need it to deliver the product:

Cloudflare — hosting and content delivery
Anthropic — powering the AI Coach (your prompts are not used to train models, per Anthropic's API terms)
Google — Google Health Connect integration (data flow you authorized)
Stripe — payment processing
A transactional email provider — sending statements and receipts

We never sell your data. We never share it with advertisers. We disclose information only when required by law, valid legal process, or to protect rights and safety.

5. Security

We use TLS 1.3 for data in transit and AES-256 for data at rest. Access to production systems is gated by role-based controls and multi-factor authentication. We perform regular security reviews and follow industry-standard practices. See the Compliance page for specifics.

No method of transmission or storage is 100% secure. We'll notify you promptly if a security incident affects your data.

6. Your rights

Depending on your jurisdiction, you have rights to:

Access the data we hold about you
Correct inaccurate data
Delete your data (right to be forgotten)
Export your data in a portable format
Opt out of certain uses (analytics, marketing email)
Withdraw consent for a connected data source

California residents have rights under the CCPA. EU/UK residents have rights under the GDPR. To exercise any of these, email privacy@superaging.ai. We respond within 30 days.

7. Retention & deletion

We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where law requires longer retention (e.g., tax records for billing).

Backups are purged on a rolling 90-day cycle. After that window, deletion is complete and irreversible.

8. Children

SuperAging.AI is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact privacy@superaging.ai and we'll delete it.

9. International transfers

SuperAging.AI is based in the United States. Data may be processed in the U.S. or in regions where our service providers operate. We rely on Standard Contractual Clauses or equivalent safeguards for transfers from the EU/UK.

10. Changes to this policy

We may update this policy as our product evolves or laws change. Material changes will be announced by email at least 30 days before they take effect. The "Last updated" date at the top reflects the latest revision.

Contact

Privacy questions: privacy@superaging.ai
Mailing address: SuperAging.AI, Princeton, NJ

Note: This policy is a thoughtful draft, not legal advice. If you're republishing or relying on it, review with qualified counsel.