Privacy policy

Account details — your name, email address, an optional profile picture, and your timezone, which we use to work out what “today” means for you. Your password is handled by our authentication provider and is never seen or stored by this application.

Health data you add — documents you upload such as lab results and scan reports, the values read from them, and the check-in notes you write.

Device data, only if you connect it — if you connect an Oura ring, we read your sleep, activity, readiness, stress, and heart rate data. You can disconnect at any time.

We do not use advertising trackers, third-party analytics, or cookies beyond the one that keeps you signed in.

We use a small number of services to run the app. Each sees only what it needs to do its job.

The original file is stored privately so a misreading can be checked against the source. Nothing extracted is saved to your record until you have reviewed it and chosen to save it.

Every health record carries the identity of the person it belongs to, and the database refuses to return rows belonging to anyone else. This is enforced by the database, not by application code — a bug in the app cannot expose one member’s records to another. We test this directly rather than assuming it.

Uploaded documents are held in private storage. There is no public link to any of them. Viewing one creates a temporary link that expires after five minutes.

Your records stay until you remove them. Delete an individual reading and it is gone immediately. Close your account and everything associated with it — records, notes, documents, and your profile — is deleted.

Deleting your account does not reach back into a third party’s systems. Document contents already sent to Anthropic age out on their 30-day schedule.

Export — ask and we will send you everything we hold about you in a portable format.

Correct — every value in your record can be edited or removed by you directly, including data that came from a device.

Delete — email us and we will delete your account and its contents. We will confirm when it is done.

Disconnect a device — revoke the Oura connection from your account page. Data already imported stays until you delete it.

Longevity Vibes AI is not a healthcare provider, and using it does not create a patient relationship. Because we are not a provider and do not act on a provider’s behalf, HIPAA does not generally apply to what you store here. That is a statement about which law applies, not a lower standard of care — we treat your records as sensitive regardless.

If we change how your data is handled in a way that matters, we will tell you before it takes effect rather than quietly updating this page.