Privacy Policy

1. Introduction

LongevityDocs, LLC ("LongevityDocs," "we," "us," or "our") operates longevitydocs.ai (the "Service"), an AI-powered intelligence platform designed exclusively for licensed longevity medicine professionals. This Privacy Policy explains what personal data we collect, how we use and protect it, and your rights as a User.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, you must discontinue use of the Service.

2. Scope and Important Limitations

2.1 Not a HIPAA-Covered Platform

LongevityDocs, LLC is not a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA). The Service is not designed, certified, or intended to store, transmit, or process Protected Health Information (PHI) as defined under HIPAA.

Users are strictly prohibited from submitting any patient-identifiable information — including names, dates of birth, medical record numbers, diagnoses, or any other data that could identify an individual patient — through any feature of the Service, including Hippo, Rounds, or file uploads.

Any PHI submitted in violation of this prohibition is done so entirely at the User's own risk and liability. LongevityDocs assumes no responsibility for PHI submitted in violation of these terms. Users who submit PHI may have their access suspended or terminated.

If your organization requires a HIPAA-compliant environment, this Service is not appropriate for that use without a separately executed Business Associate Agreement (BAA). Contact support@longevitydocs.org to discuss enterprise compliance arrangements.

2.2 Professional Platform Only

The Service is intended exclusively for licensed healthcare professionals (MDs and DOs). It is not a consumer health platform and does not provide medical advice, diagnosis, or treatment to patients.

3. Information We Collect

3.1 Account and Profile Information

• Full name, professional title, and medical credentials
• Email address (used for authentication and communications)
• Phone number (optional; hidden by default)
• Practice location and geographic region
• Professional specialties, bio, qualifications, and listed treatments
• Profile photo (uploaded voluntarily)

3.2 Usage and Behavioral Data

• Conversations with Hippo, including prompts submitted and responses received
• Messages, reactions, and files shared in community channels (Rounds)
• Documents and images uploaded to the platform
• Token usage, session activity, and feature interaction patterns
• Course progression and certification data (via LearnWorlds integration)
• Search queries and navigation behavior within the platform

3.3 AI Interaction Data

We collect and store all interactions with Hippo, including the full text of prompts and AI-generated responses. This data may be used to improve the Service and to train or fine-tune AI models, subject to the safeguards described in Section 5.

3.4 Automatically Collected Technical Data

• IP address (used for rate limiting, security, and approximate geolocation)
• Browser type, version, and operating system
• Device identifiers and HTTP request headers
• Access timestamps and session duration
• Push notification subscription tokens (if you opt in)

4. How We Use Your Information

We use the data we collect for the following purposes:

• Authentication and access control — To verify your identity and authorize access to the Service
• Service delivery — To operate Hippo, Rounds, School, Members, News, Practice, and other platform features
• Profile display — To make your professional profile visible to other authenticated community members
• Communications — To send login links, invitations, system notifications, and Service updates
• Course tracking — To record progression and issue CLD certifications
• Security and abuse prevention — To enforce usage limits, detect misuse, and protect platform integrity
• AI improvement and model training — To improve Hippo's accuracy, relevance, and clinical utility (see Section 5)
• Product development — To analyze usage patterns and prioritize platform improvements
• Legal compliance — To meet applicable legal, regulatory, and contractual obligations

We do not use your data for advertising purposes and do not sell your personal information to third parties.

5. AI Training and Model Improvement

5.1 Our Commitment to Transparency

LongevityDocs is committed to being transparent about how User data contributes to AI development. This section explains our practices clearly so you can make informed decisions about your use of the Service.

5.2 What Data May Be Used for AI Training

LongevityDocs may use the following categories of data to train, evaluate, fine-tune, and improve Hippo and other AI systems:

• Anonymized or pseudonymized AI interaction data (prompts and responses)
• Aggregated usage patterns and feature interaction data
• Anonymized community content from Rounds, where Users have granted the applicable license under our Terms of Use

5.3 Safeguards Applied to AI Training Data

• PHI exclusion. Any content identified as containing PHI will be excluded from training pipelines.
• Anonymization. Personal identifiers will be removed or pseudonymized before data is used for model training.
• Source integrity. LongevityDocs maintains a distinction between faculty-curated curriculum content and community peer exchange content in AI training pipelines.
• No third-party sale. Training data derived from User interactions will not be sold or licensed to third parties for their own AI development purposes.

5.4 Your Right to Opt Out of AI Training

You have the right to opt out of having your AI interaction data used for model training purposes. To exercise this right, submit a written request to support@longevitydocs.org with the subject line "AI Training Opt-Out." Opting out will not affect your ability to use the Service but may limit future personalization features.

6. Third-Party Service Providers

We work with the following third-party providers to operate the Service. Each processes data only as necessary to deliver their function and is subject to confidentiality obligations:

We encourage you to review the privacy policies of these providers. LongevityDocs is not responsible for the data practices of third-party services beyond our contractual agreements with them.

7. FTC Compliance and AI Disclosure

In accordance with Federal Trade Commission (FTC) guidelines on AI transparency and unfair or deceptive practices:

• You are interacting with an AI system. Hippo is an artificial intelligence assistant, not a human physician or clinical advisor. Responses are generated algorithmically.
• Source transparency. Hippo's responses may draw from faculty-curated CLD curriculum content, peer-reviewed scientific literature, and community practitioner discussions.
• No efficacy claims. LongevityDocs does not make therapeutic, diagnostic, or clinical efficacy claims through the Service or its AI outputs.
• Honest data representations. All data practices described in this Privacy Policy accurately reflect how we collect, use, and share your information.

8. Your Privacy Rights

8.1 All Users

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Correct or update inaccurate profile information
• Delete individual conversations, messages, and uploaded files
• Control your phone number visibility within the platform
• Request full deletion of your account and associated data
• Withdraw consent and discontinue use of the Service
• Opt out of AI training data use (see Section 5.4)

8.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know — Request full disclosure of personal information collected about you
• Right to Delete — Request deletion of your personal information, subject to certain legal exceptions
• Right to Correct — Request correction of inaccurate personal information
• Right to Opt Out of Sale or Sharing — LongevityDocs does not sell or share your personal information for cross-context behavioral advertising. No opt-out action is required.
• Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA/CPRA rights

To exercise your California privacy rights, contact us at support@longevitydocs.org with the subject line "California Privacy Request."

8.3 European and International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or applicable equivalent legislation.

Legal Basis for Processing. We process your personal data on the following legal bases:

• Contractual necessity — To deliver the Service you have contracted for
• Legitimate interests — To improve the Service, ensure security, and develop AI systems
• Consent — For optional features such as push notifications and AI training use

Your GDPR rights include:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time without affecting prior processing

Data Controller. LongevityDocs, LLC is the data controller for personal data processed through the Service.

International Data Transfers. If you are located outside the United States, your data will be transferred to and processed in the United States. We rely on appropriate safeguards — including Standard Contractual Clauses where required — to ensure such transfers comply with applicable law.

Right to Lodge a Complaint. You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

9. Profile Visibility

Your professional profile — including name, title, specialties, bio, and location — is visible to other authenticated members of the platform. Your phone number is hidden by default and is only visible to other members if you explicitly enable this setting. Your email address is used solely for authentication and is not displayed to other members.

10. Data Retention

Your personal data is retained for the duration of your active membership. AI conversation data, community messages, and uploaded files are stored while your account remains active and may be deleted by you at any time within the platform.

Upon account deactivation or termination:

• Personal profile data will be deleted within 90 days, unless retention is required by law
• AI interaction data retained for model training purposes will be anonymized within 90 days of account closure
• Aggregated or anonymized data derived from your usage may be retained indefinitely as it no longer constitutes personal data

We may retain certain data for longer periods where required by applicable law, to resolve disputes, or to enforce our agreements.

11. Data Security

LongevityDocs implements industry-standard security measures to protect your personal data, including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Secure authentication using JWT tokens with HKDF encryption
• Role-based access controls limiting internal data access
• Rate limiting and input validation to prevent abuse
• Cloud infrastructure with enforced access controls for file storage
• Regular security reviews of third-party integrations

No method of transmission over the internet is completely secure. While we implement robust protections, we cannot guarantee absolute security. In the event of a data breach that materially affects your rights, we will notify affected Users in accordance with applicable law.

12. Children's Privacy

The Service is designed exclusively for licensed healthcare professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal data, we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. Material changes will be communicated to Users via email or a prominent notice within the Service at least 14 days prior to taking effect. Continued use of the Service after the effective date of any update constitutes acceptance of the revised policy.

14. Contact and Data Requests

For all privacy-related inquiries, data access or deletion requests, opt-out elections, or complaints:

• Entity: LongevityDocs, LLC
• Email: support@longevitydocs.org
• Data requests: Subject: "Privacy Request"
• AI training opt-out: Subject: "AI Training Opt-Out"
• California rights: Subject: "California Privacy Request"
• GDPR rights: Subject: "GDPR Request"

We will respond to all verifiable requests within 30 days, or within the timeframe required by applicable law.