Your health data is yours. Here's exactly what we do — and don't do — with it.
The short version:We use your health data only to give you insights. We don't sell it, share it with advertisers, or use it to train shared AI models. You can export or delete everything at any time.
We collect health data you upload or sync (HRV, sleep, glucose, labs, workouts, medications, etc.), account information from Google Sign-In (email, name, profile photo), usage data (pages visited, features used), and feedback you submit voluntarily. We do not collect payment information directly — payments are handled by Stripe.
Health data is processed solely to generate your personal insights, run your experiments, and power Care Chat responses. Account data is used to authenticate you and communicate with you. Usage data helps us improve the product.
We never sell your data. We never share your health data with advertisers or data brokers. We never use your personal health data to train shared AI models without your explicit, affirmative opt-in. We never show you ads. We never track you across the web.
Your data is stored in encrypted databases. Data at rest is encrypted using AES-256. Data in transit is encrypted using TLS 1.3. Our infrastructure runs in US data centers. We use subprocessors (cloud providers, monitoring tools) under data processing agreements — the list is available on request.
Longvai uses Gemini AI to generate insights. Your data is sent to Google's API to generate responses. This is governed by Google's API data processing terms. Your data is not used to train Google's general-purpose models. We use the API in zero-data-retention mode where available.
You can export all your data at any time from Settings → Export (CSV and FHIR format). You can delete your account and all associated data from Settings → Account. If you're in the EU/UK/Canada, you have additional rights under GDPR/PIPEDA including access, rectification, erasure, and portability — contact hi@longvai.com to exercise them.
We retain your data as long as your account is active. When you delete your account, we delete your health data within 30 days (except where we're legally required to retain it longer). Anonymized, aggregated statistics may be retained indefinitely.
Longvai is not intended for children under 16. We don't knowingly collect data from minors. If you believe we've received data from a minor, contact us immediately.
We'll notify you by email for material changes to this policy. The updated policy takes effect 30 days after notification, unless you delete your account first.
Privacy questions: hi@longvai.com. We respond to all privacy requests within 5 business days. Last updated: May 2026.