consumer health data privacy policy

This Consumer Health Data Privacy Policy explains how Lifelong Company ("Lifelong", "we", "us") collects, uses, shares and protects consumer health data as defined under US state law — including the Washington My Health My Data Act, Nevada SB 370, and the Connecticut Data Privacy Act as amended — and the rights you have over that data.

It supplements our Privacy Policy. Where the two differ with respect to consumer health data, this document governs. Terms not defined here have the meaning given in the Privacy Policy.

1. categories of consumer health data we collect

Lifelong is a family health application, so consumer health data is not an incidental category for us — it is most of what we hold.

Individual health conditions, treatment, disease, diagnosis and status

Conditions and diagnoses you record or that we extract from documents you upload; allergies; your family’s medical history; discharge summaries, specialist letters, imaging reports and any other health record you add.

Medications and interventions

Prescriptions, dosages, schedules, adherence, and changes over time; social, behavioural and lifestyle interventions including exercise, sleep, diet and stress-management activity.

Bodily functions, vital signs, symptoms and measurements

Height, weight, heart rate, heart rate variability, resting heart rate, respiratory rate, blood pressure, blood oxygen, temperature, sleep stages and duration, activity, steps, workouts, VO2 max, and symptoms you log with their severity and duration.

Diagnoses and diagnostic testing, treatment or medication

Laboratory results including blood panels, cholesterol, HbA1c and any other test result you upload or that we extract from a document.

Surgeries, bodily structures and procedures

Procedures recorded in documents you upload or that you enter directly.

Use or purchase of prescribed medication

Medications you record and pharmacy information appearing in your records.

Precise location information that could reasonably indicate an attempt to acquire or receive health services or supplies

A single location reading captured at the moment you begin recording a medical visit, so the record can show which clinic you attended. We store the coordinates and the place name and address they resolve to. Captured once, never in the background, and only if you grant permission. Declining is a normal way to use Lifelong.

Health-related surveys and inputs

Health goals, household caregiving situation, intake questionnaires, journal entries, and free-text notes about your family’s health.

Recordings and transcripts of health encounters

Audio you record of medical appointments and the transcripts and summaries produced from them.

Health data derived or extrapolated from non-health information

This is significant for Lifelong and we call it out specifically: we generate health information. Health scores, baselines, trend alerts, structured condition timelines built by reading your documents, appointment preparation briefs, family health summaries, and the assistant’s memory of what matters to your family. We treat all of it as consumer health data, with every protection in this document.

Data identifying you as seeking health care services

The fact of your use of Lifelong, appointments you record, and providers named in your records.

2. where we get it

We do not obtain consumer health data from data brokers, advertising networks, or any third party you have not personally connected.

3. why we collect and use it

1. To provide Lifelong to you — maintaining your health record, building your timeline, producing insights and alerts, preparing you for appointments, transcribing and summarising visits, powering Alo, and sharing with your family exactly as you have directed.
2. To communicate with you about your health information — alerts, reminders and notifications you have enabled.
3. To keep the Services safe and working — security, fraud prevention, debugging and support. Where our staff need to access health data to resolve a problem you have reported, that access is limited, logged and purpose-bound.
4. To improve Lifelong — but for anything involving health information, using de-identified and aggregated data only, de-identified to a standard equivalent to HIPAA Safe Harbor, with re-identification contractually prohibited.
5. To comply with law and to establish, exercise or defend legal claims.

We do not use consumer health data for advertising, for profiling you for marketing, or to train artificial intelligence models on identifiable information.

4. who we disclose it to

We disclose consumer health data only in these circumstances:

To your family, as you direct. Only the categories and the specific people you have chosen. During setup you explicitly choose what your family can see — sharing your full health data is the option we recommend, and it requires your affirmative confirmation. You can narrow, change, or revoke sharing per category and per person at any time. Revocation takes effect immediately in the app, and we propagate it across our systems promptly and without undue delay.

To service providers and processors who help us run Lifelong under written contract. Each is limited to processing on our instructions and prohibited from using the data for its own purposes. The categories:

In plain terms: our service providers assist us with cloud infrastructure and hosting, AI processing (large language model, transcription, and voice providers), authentication, payments, communications, and analytics. Health information processed by AI providers is encrypted in transit, contractually restricted to providing the service, and not used to train their models; de-identified data may be used to improve our own product. On request, we will provide the list of third parties with whom your consumer health data has been shared, with contact details — email privacy@trylifelong.com.

To people you specifically authorise. If you direct us to share records with a caregiver, clinician or anyone else outside your family, we do so under a separate authorization you give at the time, for the scope you set, revocable at any time.

For legal and safety reasons — where legally required, or in good faith to protect life or safety, prevent fraud, or defend legal claims. We will notify you unless prohibited.

In a business transfer — see Privacy Policy §8. An acquirer would be bound by these commitments, and we will notify you first.

5. what we will never do

We do not sell consumer health data. Under Washington’s My Health My Data Act, "sell" means exchanging consumer health data for monetary or other valuable consideration. We do not do this, in any form, and we have never done so. If that were ever to change we would be required to — and would — obtain your valid authorization, a separate signed document meeting the statute’s requirements. A privacy policy update would not be enough and we would not treat it as enough.

We do not share consumer health data for cross-context behavioural advertising or targeted advertising.

We do not use consumer health data to train artificial intelligence models in identifiable form — ours or anyone else’s. Our AI vendors are contractually restricted to using our data to provide the service, and prohibited from training on it.

We do not disclose consumer health data to data brokers, advertising platforms, information resellers, insurers, employers or credit agencies.

We do not use geofencing around health care facilities, or anywhere else, to identify consumers, deliver advertising, or collect health data. Washington’s My Health My Data Act makes this a criminal matter and we do not go near it.

6. your rights over consumer health data

If you are a Washington, Nevada or Connecticut resident you have the rights below by statute. We extend them to every Lifelong user regardless of location.

Deletion, specifically. When you request deletion of consumer health data, deletion from our live systems is completed within 45 days of your verified request. We delete or de-identify the data our service providers hold for us in line with our agreements with them. Copies residing in encrypted backups expire within 7 days after that. After that only records we are legally required to retain remain, and those are never used for any other purpose.

How to make a request. Use the privacy request form, which records your request and the date our answer is due — it has an option for asking who your health data has been shared with — or, if you would rather, in the app (where available) or by email to privacy@trylifelong.com. We acknowledge within 10 business days and complete verified requests within 45 days, extendable once by 45 days where the law allows — and shorter where local law requires a faster response — with notice to you.

These requests are free, without exception. We do not charge you for exercising a right over your consumer health data, we do not refuse a request as excessive or repetitive, and nothing in the Privacy Policy’s general rights process changes that. Whatever fee or refusal reservation applies elsewhere, it does not apply here.

Verification. We will verify your identity before acting on an access or deletion request for health data. We ask for enough to be confident, because disclosing health records to the wrong person is the worse failure.

If you are 13 to 17. These laws treat you as the consumer, so your consumer health data consent is yours to give and yours to withdraw, and the rights in this section are yours to exercise — directly, without going through a parent. A parent or guardian gives permission for your account to exist and agrees to our Terms alongside you; that is a separate thing, and it is not consent on your behalf to our collection, use or sharing of your health data. A parent cannot give that consent for you, cannot withdraw it for you, and cannot make a rights request in your place. Email privacy@trylifelong.com and we will deal with you directly.

If you manage a profile for a child. For a child of any age who does not have an account, the parent or guardian managing the profile acts as that child’s representative — they give the consent, and they exercise the rights, on the child’s behalf. Information on that profile comes from the managing adult, not from the child. See Privacy Policy §14.

Appeals. Email privacy@trylifelong.com with "Appeal" in the subject line. We will respond within 45 days with a written explanation of our decision. If we deny your appeal, you may contact:

• Washington — Attorney General’s Office, atg.wa.gov/file-complaint. Washington residents also have a private right of action under the Consumer Protection Act.
• Nevada — Attorney General’s Bureau of Consumer Protection, ag.nv.gov
• Connecticut — Office of the Attorney General, portal.ct.gov/ag

7. employee and contractor access

Access to consumer health data by our personnel is restricted to those who need it to provide, secure or support the Services. Access is granted on a need-to-know basis, is logged, and is reviewed. Every employee and contractor is bound by written confidentiality obligations and is trained on handling health data. The same restrictions apply contractually to our processors.

8. security

Consumer health data is encrypted in transit (TLS 1.2+) and at rest (AES-256), held in access-controlled systems with audit logging, and segregated from development and test environments. See Privacy Policy §12, including our honest statement that Lifelong is not end-to-end encrypted and why, and the Security page for the same controls set out in full.

9. changes

We will not make a material change to how we collect, use or share consumer health data without notifying you first — by email and in the app — and, where the law requires it, obtaining your consent before the change takes effect. Previous versions remain available.

10. contact