MyImmortality Privacy Policy

Effective date: Draft, October 31, 2026; effective on publication. · Last updated: Draft, October 31, 2026; effective on publication.

1. Who we are

MyImmortality ("MyImmortality," "we," "us") is a mobile app for iOS and Android and the website MyImmortality.com. Both are run by My Immortality LLC, a [STATE] limited liability company ("My Immortality LLC"). You can reach us at hello@myimmortality.com or [MAILING ADDRESS].

This policy explains what information we handle, why, who sees it, and the choices you have. It covers the MyImmortality app, MyImmortality.com, and the website waitlist.

If you live in Washington, Nevada, Connecticut, or any other state with a consumer health data law, also read our Consumer Health Data Privacy Policy at myimmortality.com/health-data-privacy. Where that policy gives you more protection, it applies.

2. The short version

• Your health data stays on your phone. The app stores it encrypted on your device. We do not have accounts, and we do not keep your health data on our servers.
• AI features are optional, and you approve every request. Before anything goes to our AI provider, you see the exact data that will be sent and tap Send or Don't send. What gets sent is a de-identified summary (totals, averages, and ranges), not your name, email, contacts, device ID, raw logs, or files.
• The AI provider does not keep it. We use a paid service tier with zero data retention, and the provider does not use your data to train its models.
• No ads. No analytics or tracking tools. We never sell or share your data for advertising.
• You are in control. You can export or delete everything from the app's Settings at any time.
• MyImmortality gives educational estimates, not medical advice. See our Wellness Disclaimer at myimmortality.com/disclaimer and in the app under Settings > Legal.

3. Information that stays on your device

The app processes the following information on your device only. Unless you approve an AI request (Section 4), it is never sent to us or anyone else.

a. Data you let us read from Apple Health (HealthKit) or Android Health Connect. The app reads this data and never writes to it. You choose each data type in your phone's permission screen, and the app only asks for types a feature uses. The types may include: steps, active energy, workouts, heart rate, resting heart rate, heart rate variability, sleep, respiratory rate, blood oxygen, body weight and body composition, nutrition, hydration, alcohol intake, blood glucose, blood pressure, and body temperature.

b. Things you log yourself. For example: caffeine, alcohol, nicotine products (including nicotine pouches), cannabis, water and other fluids, mood, symptoms, supplements, meals, and training notes.

c. Results you enter or upload. For example: blood test values, DEXA or body-scan values, and lab report PDFs or photos.

d. What the app calculates. These include your Vital Signal score, Deep Read estimates (for example, modeled nutrient intake and modeled caffeine or alcohol levels over time), trends, and AI-generated summaries you have received.

e. App settings and preferences, including your consent choices.

How it is protected. This data is stored in an encrypted database on your device. It is excluded from iCloud and Google cloud backups. The app never writes modeled or estimated values back into Apple Health or Health Connect.

4. Information that leaves your device: AI features (only when you tap Send)

Some features, such as the Health Snapshot and written explanations of your patterns, use a third-party artificial intelligence (AI) service. Here is how that works:

1. You turn it on. AI features are off until you give separate, explicit permission (see the in-app consent screens). You can turn them off at any time in Settings.
2. The app builds a de-identified summary on your device. It contains things like totals, averages, ranges, trends, and general profile details you have chosen to include, limited to an age range, sex, and height and weight ranges. It does not contain your name, email, phone number, contacts, precise location, device or advertising IDs, original files, or raw entry-by-entry logs.
3. You preview it. Each time, the app shows you the exact payload and you tap Send or Don't send. If you don't tap Send, nothing goes out.
4. It passes through our relay. The request goes over an encrypted connection (HTTPS) to a small relay we run on Cloudflare Workers. The relay adds our AI account key and forwards the request. It does not log or store the content of requests or responses.
5. The AI provider processes it and sends back a response. Our provider is Anthropic, PBC (Claude API, Claude Haiku model tier). Requests reach Anthropic only through our Cloudflare Workers relay. We use Anthropic's paid API under its zero data retention arrangement, so Anthropic does not store your request or response after processing and does not use them to train its models. The response is shown to you and saved only on your device.

Technical information the relay sees. Like any internet service, Cloudflare receives your device's IP address and basic request details (time, size, and the app version) in order to deliver the request and protect against abuse. We do not combine that information with the content of your request, and we do not use it to identify you. Cloudflare keeps that technical data only for its own default retention periods. We do not turn on Logpush, custom logging, or analytics for the relay, and we do not export or keep copies of these logs.

5. Information collected on our website

Waitlist. If you join the waitlist, we collect and store the following. We never ask for health information on the website.

Waitlist records are stored in Cloudflare D1, a database run by Cloudflare, Inc. Confirmation and update emails are sent through Cloudflare Email Service. Every update email has an unsubscribe link. We use waitlist information only for the waitlist, attribution, and the referral feature. We do not sell it, use it for third-party advertising, or combine it with app or health data. If you joined through someone's referral link, that person may see that a referral was credited (for example, a higher place in line), Referrers see only their own referral count and place in line. They never see your email address or any other detail about you.

• Server logs. Our website host, Cloudflare, Inc. (Cloudflare Pages and Workers), automatically receives standard technical information such as IP address, browser type, pages requested, and time. It uses this information to deliver the site and keep it secure, and keeps it only for Cloudflare's default retention periods. We do not turn on Logpush or custom logging.
• Cookies. We do not use advertising, analytics, or tracking cookies. The site uses only cookies that are strictly necessary to run or secure it, if any.

6. Other information

• Support. If you email us, we receive your email address and whatever you choose to include. Please don't send health details by email. We use your message only to respond and keep it for 24 months.

• Purchases. MyImmortality v1 is free and has no in-app purchases, so we receive no payment information.

• Crash and diagnostic data. We do not include third-party analytics or crash-reporting tools in the app. If you have opted in to share diagnostics with Apple or Google, they may give us aggregated crash reports that do not include your health data.

7. How we use information

We use the information described above only to: - run the app's features on your device and show you your estimates and trends; - send AI requests that you approve and show you the responses; - operate, secure, and prevent abuse of our relay and website; - manage the waitlist, measure which links and campaigns bring people to the site (attribution), and run the waitlist referral and place-in-line feature; - respond to you; and - comply with the law and enforce our Terms of Use at myimmortality.com/terms.

We do not use health data for advertising, marketing, or data mining based on how you use the app. We do not use it to make decisions about credit, insurance, employment, or housing, and we do not use it to train AI models.

8. What we never do

• We do not sell your personal information or health data.
• We do not share it for targeted or cross-context advertising.
• We do not show ads or use advertising IDs.
• We do not use third-party analytics, tracking, or advertising tools in the app.
• We do not give health data to data brokers, insurers, or employers.
• We do not use your location, and we do not geofence.

9. Who receives information

10. Apple Health and Health Connect

• We use Apple Health and Health Connect data only to provide MyImmortality's health and fitness features to you.
• We do not use it for advertising or marketing, sell it, or give it to data brokers or information resellers.
• We do not store it in iCloud or on our servers.
• We disclose it to a third party only in the form of a de-identified AI payload, and only when you have turned on AI features and tapped Send.

• Health Connect: MyImmortality's use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.

• You can revoke access at any time in iOS Settings > Health > Data Access & Devices, or in Android's Health Connect settings.

11. How we protect information

• Health data is encrypted on your device.
• AI requests are encrypted in transit (HTTPS), and the relay does not log their content.
• The AI account key is kept on the relay, not in the app.
• Access to the relay and our service accounts is limited and protected by multi-factor authentication.

No system is perfectly secure. Your phone's own security matters most, so please use a passcode and keep your operating system updated. If you export your data, the exported file is no longer protected by the app's encryption, so store and share it carefully.

12. How long we keep information

13. Your choices and rights

In the app (instant, no request needed): - Export: Settings > [Export my data] creates a copy of your data in JSON and CSV formats. - Delete all: Settings > [Delete all data] permanently erases everything the app has stored on your device. Uninstalling the app also erases it. - AI on or off: Settings > [AI features] lets you withdraw AI consent at any time. You can still decline any single request with Don't send. - Health permissions: turn individual data types on or off in Apple Health or Health Connect settings.

Waitlist: use the unsubscribe link, or email hello@myimmortality.com.

Requests to us. Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, to withdraw consent, and to opt out of sale, targeted advertising, or profiling. (We don't do any of those last three.) Send requests to hello@myimmortality.com with the subject "Privacy Request." Because we have no accounts and hold no health data, the information we might hold about you is usually just a waitlist record or a support message. We will respond within 45 days, or sooner if the law requires. If the law allows, we may extend this once by another 45 days and will tell you if we do. We will not treat you differently for using your rights.

Appeals. If we decline your request, you can appeal by replying with the subject "Privacy Appeal." We will respond within 45 days. If you are not satisfied, you can contact your state attorney general.

14. If something goes wrong

If information we are responsible for is ever accessed or disclosed without authorization, we will notify affected people, regulators, and others as the law requires, including under the FTC Health Breach Notification Rule and applicable state laws.

15. HIPAA

HIPAA, the federal health privacy law, applies only to "covered entities" and their "business associates." Covered entities are health plans, health care clearinghouses, and health care providers (such as doctors, clinics, and pharmacies) that conduct certain standard electronic transactions. A business associate is a company that handles protected health information on a covered entity's behalf. (HHS: Covered Entities and Business Associates)

My Immortality LLC is not a covered entity, and MyImmortality is not offered by or on behalf of one, so we are not a business associate either. You choose to use the app on your own. HIPAA therefore does not apply to MyImmortality.

Your health information is still protected by law. The FTC Health Breach Notification Rule (16 CFR Part 318) covers health apps that are not covered by HIPAA and requires notice to you, the FTC, and in some cases the media after a breach (FTC: Health Breach Notification Rule). State consumer health data laws, such as Washington's My Health My Data Act, also apply. See our Consumer Health Data Privacy Policy at myimmortality.com/health-data-privacy. This policy and the protections described in it are how we handle your information.

16. Age limit

MyImmortality is for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has joined our waitlist or contacted us, email hello@myimmortality.com and we will delete the information.

17. Where we operate

MyImmortality is offered in the United States only. Information is processed in the United States.

18. Changes to this policy

If we change this policy, we will update the "Last updated" date. If a change is material, especially one about what leaves your device or who receives it, we will tell you in the app and ask for your consent again before the change applies to you.

19. Contact

My Immortality LLC · [MAILING ADDRESS] · hello@myimmortality.com