Privacy Policy

1. Who we are

Longeviq is a science-backed longevity tracking platform operated by Longeviq ("we", "us", "our"). Our website is located at longeviq.health.

For the purposes of GDPR and the Swiss Federal Act on Data Protection (revDSG), Longeviq is the data controller responsible for your personal data.

Contact: lena.longeviq@gmail.com

2. What data we collect

2.1 Data you provide directly

When you complete the baseline questionnaire or weekly check-ins, we collect:

• First name
• Email address
• Your health KPI scores (sleep quality, energy level, resting heart rate, grip strength, waist circumference, cognitive sharpness, mood & resilience, physical strength, recovery speed)
• Your primary longevity goal
• Date of baseline completion

2.2 Newsletter subscribers

If you subscribe to the Longeviq newsletter, we collect your first name and email address.

2.3 Data collected automatically

When you visit our website, we may collect standard technical data including your IP address, browser type, and pages visited. This data is used solely for security and performance monitoring.

2.4 Data we do NOT collect

• We do not collect payment or financial information
• We do not collect precise location data
• We do not collect medical records or clinical health data
• We do not collect government ID or passport information

3. How we use your data

We use your data exclusively for the following purposes:

• Delivering the 30-day tracker: Storing your baseline scores and weekly check-in results so you can track your progress over time
• Sending weekly check-in reminders: Emailing you at days 7, 14, 21, and 28 with your personalised check-in link
• Sending your 30-day report: Delivering your final progress report on day 28
• Newsletter delivery: Sending weekly longevity insights if you have subscribed
• Improving our service: Analysing aggregated, anonymised data to improve the Longeviq platform

We will never use your data for advertising targeting, profiling, or any purpose not listed above without your explicit consent.

Our legal basis for processing your data is your consent, given when you complete the baseline questionnaire or subscribe to the newsletter (Article 6(1)(a) GDPR).

4. Data storage and security

Your data is stored securely in Supabase, a PostgreSQL database service hosted in the European Union (West EU — Ireland). Supabase is compliant with GDPR requirements.

We implement the following security measures:

• Row-level security policies on all database tables
• HTTPS encryption for all data transmission
• Access restricted to authorised personnel only
• Regular security reviews

While we take all reasonable precautions, no internet transmission is 100% secure. If you believe your data has been compromised, please contact us immediately.

5. Third-party services

We use the following third-party services to operate Longeviq. Each has its own privacy policy:

Supabase

Database and backend infrastructure. Stores your health KPI scores and email address. Hosted in the EU. Supabase Privacy Policy

MailerLite

Email marketing and automation. Stores your name and email address for newsletter delivery and check-in reminders. MailerLite Privacy Policy

Vercel

Website hosting. May process your IP address for security and performance purposes. Vercel Privacy Policy

We do not sell, rent, or share your personal data with any other third parties.

6. Cookies

Longeviq uses minimal cookies necessary for the website to function correctly. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

The cookies we use include:

• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your session on the site
• Preference cookies: Used to remember your settings if applicable

You can disable cookies in your browser settings, but this may affect the functionality of certain features on the site.

7. Your rights

Under GDPR and the Swiss revDSG, you have the following rights regarding your personal data:

• Right of access: Request a copy of all personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw your consent at any time without affecting prior processing

To exercise any of these rights, email us at lena.longeviq@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU, you may contact your local supervisory authority.

8. Data retention

We retain your personal data for as long as necessary to provide the Longeviq service:

• Tracker data: Retained for 12 months from your last check-in, then automatically deleted
• Newsletter subscriber data: Retained until you unsubscribe
• Technical logs: Retained for 90 days

You may request deletion of your data at any time by contacting us at lena.longeviq@gmail.com.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically. Continued use of Longeviq after changes constitutes acceptance of the updated policy.