legal

Every policy that governs Lifelong, in one place. They are written to be read — if any of them is unclear, that is a defect and we would like to hear about it at privacy@trylifelong.com.

If you want the plain-English version first, the FAQ summarises what these documents say. Where a summary and a policy disagree, the policy governs.

• Privacy Policy

  What we collect, why, who it goes to, how long we keep it, and the rights you have over all of it — wherever you live.

• Consumer Health Data Privacy Policy

  Required by Washington's My Health My Data Act, Nevada SB 370 and Connecticut law. Read this if health data is the part you care about.

• Terms of Service

  The agreement between you and Lifelong Company: eligibility, your content, families, subscriptions, and dispute resolution.

• Family Sharing and Authorized Representative Terms

  How sharing works inside a family: nothing is shared until you confirm it, the person the data is about controls it, and you can always take it back.

• Recording Consent Notice

  Recording a medical visit. In many places the law requires everyone's permission, and getting it is your responsibility — so ask first.

• Medical Disclaimer

  Lifelong is not medical care, is not monitored, and will not summon help. Where its information can be wrong, and what to do about it.

• AI and Alo Disclosure

  Where AI is used, what we send to model providers, what the models get wrong, and the things AI in Lifelong will never do.

• Acceptable Use Policy

  Use Lifelong for your family's health, with the permission of the people whose health it is. What that rules out.

• Australian Privacy Addendum

  How the Privacy Act 1988 and the Australian Privacy Principles apply to us, including where your data physically sits.

• Anti-Spam Policy

  How Lifelong may and may not be advertised in electronic messages, and how to report a message that broke the rules.

doing something about it

• Make a privacy request

  Access, correct, delete or export your data, withdraw a consent, or ask who your health data has been shared with. Acknowledged within 10 business days, completed within 45.

• Security

  What protects your family's health information — encryption, access controls, audit logging — what we have not certified, and how to report a vulnerability.

• Accessibility

  WCAG 2.2 AA is what we aim at, we have not been audited against it, and this is how to tell us about a barrier.

Security researchers: the safe harbour and the reporting route are summarised on the Security page; the binding version is in the Acceptable Use Policy, and the machine-readable contact details are at /.well-known/security.txt.

Lifelong is operated by Lifelong Company, a Delaware corporation, 2810 North Church Street, Wilmington, DE 19802, United States.