--- title: "Consumer Health Data Privacy Policy | Lifelong" description: "How Lifelong collects, uses, shares and protects consumer health data under the Washington My Health My Data Act, Nevada SB 370 and Connecticut law." url: https://trylifelong.com/consumer-health-data --- [← Back to home](https://trylifelong.com/) # consumer health data privacy policy Effective: 16 August 2026 Last updated: 16 August 2026 This Consumer Health Data Privacy Policy explains how Lifelong Company ("Lifelong", "we", "us") collects, uses, shares and protects consumer health data as defined under US state law — including the Washington My Health My Data Act, Nevada SB 370, and the Connecticut Data Privacy Act as amended — and the rights you have over that data. It supplements our [Privacy Policy](https://trylifelong.com/privacy). Where the two differ with respect to consumer health data, this document governs. Terms not defined here have the meaning given in the Privacy Policy. The short version: almost everything Lifelong holds about you is consumer health data. We collect it to run the product you asked for. We do not sell it, we do not advertise against it, and we do not train models on it in identifiable form. ## 1\. categories of consumer health data we collect Lifelong is a family health application, so consumer health data is not an incidental category for us — it is most of what we hold. ### Individual health conditions, treatment, disease, diagnosis and status Conditions and diagnoses you record or that we extract from documents you upload; allergies; your family’s medical history; discharge summaries, specialist letters, imaging reports and any other health record you add. ### Medications and interventions Prescriptions, dosages, schedules, adherence, and changes over time; social, behavioural and lifestyle interventions including exercise, sleep, diet and stress-management activity. ### Bodily functions, vital signs, symptoms and measurements Height, weight, heart rate, heart rate variability, resting heart rate, respiratory rate, blood pressure, blood oxygen, temperature, sleep stages and duration, activity, steps, workouts, VO2 max, and symptoms you log with their severity and duration. ### Diagnoses and diagnostic testing, treatment or medication Laboratory results including blood panels, cholesterol, HbA1c and any other test result you upload or that we extract from a document. ### Surgeries, bodily structures and procedures Procedures recorded in documents you upload or that you enter directly. ### Use or purchase of prescribed medication Medications you record and pharmacy information appearing in your records. ### Precise location information that could reasonably indicate an attempt to acquire or receive health services or supplies A single location reading captured at the moment you begin recording a medical visit, so the record can show which clinic you attended. We store the coordinates and the place name and address they resolve to. Captured once, never in the background, and only if you grant permission. Declining is a normal way to use Lifelong. ### Health-related surveys and inputs Health goals, household caregiving situation, intake questionnaires, journal entries, and free-text notes about your family’s health. ### Recordings and transcripts of health encounters Audio you record of medical appointments and the transcripts and summaries produced from them. ### Health data derived or extrapolated from non-health information This is significant for Lifelong and we call it out specifically: we generate health information. Health scores, baselines, trend alerts, structured condition timelines built by reading your documents, appointment preparation briefs, family health summaries, and the assistant’s memory of what matters to your family. We treat all of it as consumer health data, with every protection in this document. ### Data identifying you as seeking health care services The fact of your use of Lifelong, appointments you record, and providers named in your records. ## 2\. where we get it Source What You Everything you type, upload, record or say to Alo, in the app, on our website, over iMessage, or when you contact support Your family Health information a family member files about you, or that they share with you, under the permissions described in the Privacy Policy — including records filed on behalf of someone without an account Your devices Apple Health / HealthKit, Android Health Connect, and Samsung Health, only with your permission and only for the categories you approve Connected services Wearable and health services you authorise, such as Oura and Whoop. We receive data through an authorisation you grant; we never receive your credentials Generated by us Insights, scores, alerts, extractions, summaries and other derived health information, as described in §1 We do not obtain consumer health data from data brokers, advertising networks, or any third party you have not personally connected. ## 3\. why we collect and use it 1. To provide Lifelong to you — maintaining your health record, building your timeline, producing insights and alerts, preparing you for appointments, transcribing and summarising visits, powering Alo, and sharing with your family exactly as you have directed. 2. To communicate with you about your health information — alerts, reminders and notifications you have enabled. 3. To keep the Services safe and working — security, fraud prevention, debugging and support. Where our staff need to access health data to resolve a problem you have reported, that access is limited, logged and purpose-bound. 4. To improve Lifelong — but for anything involving health information, using de-identified and aggregated data only, de-identified to a standard equivalent to HIPAA Safe Harbor, with re-identification contractually prohibited. 5. To comply with law and to establish, exercise or defend legal claims. We do not use consumer health data for advertising, for profiling you for marketing, or to train artificial intelligence models on identifiable information. ## 4\. who we disclose it to We disclose consumer health data only in these circumstances: To your family, as you direct. Only the categories and the specific people you have chosen. During setup you explicitly choose what your family can see — sharing your full health data is the option we recommend, and it requires your affirmative confirmation. You can narrow, change, or revoke sharing per category and per person at any time. Revocation takes effect immediately in the app, and we propagate it across our systems promptly and without undue delay. To service providers and processors who help us run Lifelong under written contract. Each is limited to processing on our instructions and prohibited from using the data for its own purposes. The categories: Category What they receive Cloud infrastructure, database and file storage Health records, derived health data, files, audio Authentication Account identifiers only — no health data Wearable and health data infrastructure Health metrics and other health data from your devices and connected services AI and large language model providers Health information sent for processing — encrypted in transit, contractually restricted to providing the service, and not used to train their models Transcription providers Visit audio, deleted at the provider once the transcript is returned — verified, with automatic retry Document processing Health documents converted to structured text Email delivery Notification and message content — we do not include health information in email Analytics, crash and error reporting Usage and diagnostic data. Screen recordings are fully masked. Not used for advertising Subscription management Purchase and entitlement data — no health data In plain terms: our service providers assist us with cloud infrastructure and hosting, AI processing (large language model, transcription, and voice providers), authentication, payments, communications, and analytics. Health information processed by AI providers is encrypted in transit, contractually restricted to providing the service, and not used to train their models; de-identified data may be used to improve our own product. On request, we will provide the list of third parties with whom your consumer health data has been shared, with contact details — email [privacy@trylifelong.com](mailto:privacy@trylifelong.com). To people you specifically authorise. If you direct us to share records with a caregiver, clinician or anyone else outside your family, we do so under a separate authorization you give at the time, for the scope you set, revocable at any time. For legal and safety reasons — where legally required, or in good faith to protect life or safety, prevent fraud, or defend legal claims. We will notify you unless prohibited. In a business transfer — see [Privacy Policy](https://trylifelong.com/privacy) §8. An acquirer would be bound by these commitments, and we will notify you first. ## 5\. what we will never do We do not sell consumer health data. Under Washington’s My Health My Data Act, "sell" means exchanging consumer health data for monetary or other valuable consideration. We do not do this, in any form, and we have never done so. If that were ever to change we would be required to — and would — obtain your valid authorization, a separate signed document meeting the statute’s requirements. A privacy policy update would not be enough and we would not treat it as enough. We do not share consumer health data for cross-context behavioural advertising or targeted advertising. We do not use consumer health data to train artificial intelligence models in identifiable form — ours or anyone else’s. Our AI vendors are contractually restricted to using our data to provide the service, and prohibited from training on it. We do not disclose consumer health data to data brokers, advertising platforms, information resellers, insurers, employers or credit agencies. We do not use geofencing around health care facilities, or anywhere else, to identify consumers, deliver advertising, or collect health data. Washington’s My Health My Data Act makes this a criminal matter and we do not go near it. ## 6\. your rights over consumer health data If you are a Washington, Nevada or Connecticut resident you have the rights below by statute. We extend them to every Lifelong user regardless of location. Right Detail Confirm Whether we collect, share or sell your consumer health data — and, on request, the list of every third party it has been shared with, with contact details Access A copy of your consumer health data — on request, in a structured, machine-readable format Delete Deletion of your consumer health data, including from our archived and backup systems within the timeframes below Withdraw consent Withdraw consent to collection and to sharing, at any time, separately Appeal Appeal any denial, with a written explanation Non-discrimination No penalty, price change or degraded service for exercising these rights Deletion, specifically. When you request deletion of consumer health data, deletion from our live systems is completed within 45 days of your verified request. We delete or de-identify the data our service providers hold for us in line with our agreements with them. Copies residing in encrypted backups expire within 7 days after that. After that only records we are legally required to retain remain, and those are never used for any other purpose. How to make a request. Use the [privacy request form](https://trylifelong.com/privacy-request), which records your request and the date our answer is due — it has an option for asking who your health data has been shared with — or, if you would rather, in the app (where available) or by email to [privacy@trylifelong.com](mailto:privacy@trylifelong.com). We acknowledge within 10 business days and complete verified requests within 45 days, extendable once by 45 days where the law allows — and shorter where local law requires a faster response — with notice to you. These requests are free, without exception. We do not charge you for exercising a right over your consumer health data, we do not refuse a request as excessive or repetitive, and nothing in the [Privacy Policy](https://trylifelong.com/privacy)’s general rights process changes that. Whatever fee or refusal reservation applies elsewhere, it does not apply here. Verification. We will verify your identity before acting on an access or deletion request for health data. We ask for enough to be confident, because disclosing health records to the wrong person is the worse failure. If you are 13 to 17. These laws treat you as the consumer, so your consumer health data consent is yours to give and yours to withdraw, and the rights in this section are yours to exercise — directly, without going through a parent. A parent or guardian gives permission for your account to exist and agrees to our Terms alongside you; that is a separate thing, and it is not consent on your behalf to our collection, use or sharing of your health data. A parent cannot give that consent for you, cannot withdraw it for you, and cannot make a rights request in your place. Email [privacy@trylifelong.com](mailto:privacy@trylifelong.com) and we will deal with you directly. If you manage a profile for a child. For a child of any age who does not have an account, the parent or guardian managing the profile acts as that child’s representative — they give the consent, and they exercise the rights, on the child’s behalf. Information on that profile comes from the managing adult, not from the child. See [Privacy Policy](https://trylifelong.com/privacy) §14. Appeals. Email [privacy@trylifelong.com](mailto:privacy@trylifelong.com) with "Appeal" in the subject line. We will respond within 45 days with a written explanation of our decision. If we deny your appeal, you may contact: - Washington — Attorney General’s Office, atg.wa.gov/file-complaint. Washington residents also have a private right of action under the Consumer Protection Act. - Nevada — Attorney General’s Bureau of Consumer Protection, ag.nv.gov - Connecticut — Office of the Attorney General, portal.ct.gov/ag ## 7\. employee and contractor access Access to consumer health data by our personnel is restricted to those who need it to provide, secure or support the Services. Access is granted on a need-to-know basis, is logged, and is reviewed. Every employee and contractor is bound by written confidentiality obligations and is trained on handling health data. The same restrictions apply contractually to our processors. ## 8\. security Consumer health data is encrypted in transit (TLS 1.2+) and at rest (AES-256), held in access-controlled systems with audit logging, and segregated from development and test environments. See [Privacy Policy](https://trylifelong.com/privacy) §12, including our honest statement that Lifelong is not end-to-end encrypted and why, and the [Security](https://trylifelong.com/security) page for the same controls set out in full. ## 9\. changes We will not make a material change to how we collect, use or share consumer health data without notifying you first — by email and in the app — and, where the law requires it, obtaining your consent before the change takes effect. Previous versions remain available. ## 10\. contact Email [privacy@trylifelong.com](mailto:privacy@trylifelong.com) Privacy Officer Razi Syed Post Lifelong Company, 2810 North Church Street, Wilmington, DE 19802, United States