Privacy Policy

1. General provisions

LLC "LONGEVITY CLUB" (EDRPOU 46392590, Ukraine, 04111, Kyiv, Salyutna St., building 2, premises 18-283) operates the website longevityclub.com.ua and the associated Telegram bot.

This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. By using our services you agree to the practices described here. This policy is effective from June 2026.

2. Data we collect

When you register and use our services, we may collect:

• Name, email address, and phone number (provided during registration or profile setup);
• Telegram ID and username (used for booking confirmations and bot notifications);
• Health goals (free-text, entered voluntarily by you);
• Health documents you choose to upload (lab results, medical files — stored in private cloud storage, accessible only to you);
• Biomarker measurements (recorded via manual entry, extraction from uploaded documents, or automatic sync from connected wearable devices);
• Photos you upload for meal logging or skin assessment (processed by AI to extract nutrition or skin metrics; stored in private cloud storage, accessible only to you).

3. Wearable & health integrations

When you connect a wearable device or health platform (currently WHOOP and Garmin, with Polar, Google Health, Apple Health, Withings, and others planned), the following applies:

• 🔐 Connection is established via the provider's standard OAuth 2.0 flow — you authorise on the provider's website. We never see your provider password or credentials.
• 📊 We fetch daily health metrics: resting heart rate, daily steps, active calories, and active minutes.
• 📅 On first connection, a 12-month historical backfill is performed to populate your biomarker timeline.
• 🔑 OAuth tokens (access and refresh) are stored server-side and used solely to fetch your metrics. They are deleted immediately when you disconnect the provider.
• 💾 Metric measurements already synced and stored in your biomarker history are retained after disconnection (they are part of your health record, not temporary data).

4. How we use your data

We use your data only to deliver and improve the Longevity Club service:

• Booking management, membership tracking, and access control;
• Sending booking confirmations, reminders, and club updates via Telegram;
• Visualising your biomarker trends and providing health context in your personal dashboard;
• Generating AI-powered insights — Health Coach responses, biomarker/functional-age explanations, and photo-based meal or skin analysis — using a third-party AI provider (see Section 7);
• Masked session recordings — we record how members navigate the app (page views and clicks) with all personal and health data hidden, to improve the app's design.
• 🚫 We never sell, rent, or share your personal data with third parties for advertising, profiling, or any purpose unrelated to delivering our service.

5. Data retention

Your data is retained while your account is active.

• Disconnecting a wearable provider immediately deletes your OAuth tokens from our servers.
• To request full deletion of your account and all associated data, please contact us using the form below.
• Certain data (e.g., payment records) may be retained longer where required by Ukrainian law.

6. Your rights

You have the right to:

• View your biomarker data and health documents in your Dashboard;
• Disconnect any wearable integration at any time from the Settings page;
• Request access to, correction of, or deletion of your personal data by contacting us.

7. Third-party services

We use the following third-party services:

• Wearable & health data providers (WHOOP, Garmin, Polar, Google Health, Apple Health, Withings, and others as integrated) — data source only. When you authorise a provider, we fetch your metrics on your behalf. Each provider's own privacy policy governs how they handle your data on their side. We do not use these providers for advertising or analytics.
• Google Gemini — AI provider used to generate Health Coach responses, biomarker/functional-age explanations, and photo-based meal or skin analysis. Only the data needed to generate each response is sent; it is not used to train Google's models beyond their standard API terms.
• Monobank — payment processing only. We do not store payment card details.
• We do not use advertising networks, data brokers, or behavioural analytics services.

8. Contact

For questions about this policy or to exercise your data rights, please use our contact form. Contact us