acceptable use policy

1. health information about other people

Do not:

• Add, access or keep health information about someone you have no authority to act for and no permission from
• Use family features to monitor or control someone against their wishes, including a partner, an adult family member, or someone you do not have care responsibility for
• Misrepresent your authority over another person’s health information
• Share health information you obtained through Lifelong beyond what the person who shared it with you would expect
• Use Lifelong to make clinical decisions about someone whose care you are not authorised to direct

If someone shares health information with you in Lifelong, treat it as they would. They gave you access to help them, not to circulate it.

Coercive use. Lifelong will not knowingly be a tool for surveillance of an adult who does not want to be monitored. If you are being pressured to share health information with someone through Lifelong, you can revoke access or leave the family at any time, and you can contact privacy@trylifelong.com.

Family members aged 13 to 17. Some categories on a teenager’s account are private from their parent unless the teenager chooses otherwise. Do not pressure a teenage family member into opening those categories, and do not use another person’s account or credentials to get at them.

2. recording

Do not:

• Record anyone without the consent of everyone present where consent is required
• Record where the venue or the provider prohibits it
• Continue recording after someone objects
• Share a recording in a way the people in it would not expect

See our Recording Consent Notice, which you are asked to acknowledge in the app before you first record.

3. accounts

Do not:

• Create an account if you are under 13, or if you are under 18 without the permission of your parent or guardian
• Misstate your age, or help someone else misstate theirs, to get past the age check
• Connect a child’s own phone, watch, Apple Health, Health Connect or wearable account to a profile you manage for them — a managed child profile holds what you put in it, not data taken from the child’s own device
• Create an account for someone else, or share your credentials — Lifelong has family features precisely so you don’t have to
• Access an account that is not yours, including a family member’s
• Impersonate anyone
• Create accounts by automated means, or create multiple accounts to evade limits, get extra trials, or avoid a suspension

4. security and integrity

Do not:

• Probe, scan or test the security of the Services without our written permission
• Attempt to gain unauthorised access to any system, account or data
• Circumvent authentication, rate limits, entitlement checks, quotas, or any access control
• Reverse engineer, decompile or disassemble the Services, or extract our models, prompts or training data, except where the law makes this restriction unenforceable
• Scrape or bulk-extract data from the Services by automated means
• Introduce malware, or interfere with the Services or the infrastructure behind them
• Overload the Services, including by abusing the assistant or the API behind it

Responsible disclosure. If you find a vulnerability, email privacy@trylifelong.com before disclosing it publicly. We will respond promptly, will not pursue legal action against good-faith security research conducted under this paragraph, and will credit you if you would like.

5. the alo assistant

Do not:

• Use Alo to obtain medical advice you intend to act on without professional confirmation
• Attempt to make Alo produce diagnosis, prescription, or treatment recommendations
• Use prompt injection or similar techniques to make the assistant bypass its safeguards or reveal information you are not permitted to see
• Use Alo to generate content that is unlawful, harassing, or harmful
• Automate or resell access to Alo
• Bring Alo into a group conversation without telling the other participants that messages will be processed by Lifelong

6. content

Do not upload or transmit content that:

• Is unlawful, defamatory, harassing, threatening or abusive
• Infringes anyone’s intellectual property or privacy rights
• Contains malware
• Is deliberately false health information intended to mislead a family member
• You have no right to provide

7. commercial and professional use

Lifelong is licensed for personal, non-commercial family use.

Do not, without a written agreement with us:

• Use Lifelong to manage patients or clients in a professional capacity
• Use Lifelong as a healthcare provider’s record-keeping system
• Resell, sublicense or provide the Services to third parties
• Use Lifelong to build or train a competing product

Professional caregivers engaged by a family may be given access by that family under the external sharing rules in our Family Sharing and Authorized Representative Terms. That is permitted use. Running your own caseload out of Lifelong is not.

8. legal compliance

Do not use Lifelong:

• In violation of any applicable law, including health privacy, recording, and consumer protection law
• To violate anyone’s rights
• From a country subject to a US Government embargo, or if you are on a US Government restricted-party list
• To facilitate any illegal activity

9. reporting a violation

Email privacy@trylifelong.com. Include what happened and any accounts involved. We investigate every report.

If you believe someone is in immediate danger, contact emergency services. Lifelong is not an emergency service and cannot respond to safety emergencies.

10. what we do about violations

Depending on severity, we may: contact you to resolve it; remove content; restrict a feature; suspend or terminate an account; or report the matter to law enforcement.

We will usually contact you first and give you a chance to fix the problem. We act immediately without notice only where there is a risk to someone’s safety, a serious security threat, or a legal requirement.

If your account is suspended, we will tell you why and how to respond. Suspension does not cut you off from your data: you can still request a copy of it, and its deletion, by emailing privacy@trylifelong.com. We will acknowledge a request within 10 business days and provide your data in a structured, machine-readable format within 45 days of a verified request. We will not hold your family’s health record hostage.

Appeals: reply to our notice, or email privacy@trylifelong.com. We will review and respond within 30 days.

11. changes

We may update this policy. Material changes are notified as described in Terms of Service §22.

Questions: privacy@trylifelong.com