privacy policy

This Privacy Policy explains how Ahana Studios ("Ahana Studios", "we", "us", "our") collects, uses, and protects your information when you use the Lifelong mobile app and trylifelong.com (together, "Lifelong" or the "Service"). Health data is deeply personal and we treat it with the seriousness it deserves.

1. who we are & scope

Lifelong is operated by Ahana Studios, a company based in New Zealand. This policy covers the Lifelong app and our website. For any privacy question you can reach us at director@ahanastudios.com. For the purposes of GDPR, Ahana Studios is the data controller for the personal information described here.

2. the short version

• We only collect health data you connect or enter yourself.
• We use it to power your — and your family's — wellness, and nothing else.
• We never sell your data.
• We never use your data for advertising.
• You can delete everything, anytime.

3. information we collect

Account information. Your name, email address, and profile photo, collected through our authentication provider, Clerk, or through Sign in with Apple or Sign in with Google when you choose those options.

Health & fitness data. Metrics from Apple Health and any wearables you connect — such as steps, sleep, heart-rate variability (HRV), resting heart rate, and workouts — together with information you enter yourself, such as medical-record photos, notes, symptoms, and medications. We only collect what you explicitly provide or authorise.

Family information. Details about family members you add or who join your family group, and the wellness information each member chooses to share.

Subscription information. Your subscription status, managed through Apple and RevenueCat. Apple processes your payment — we never see your full card details.

Usage & diagnostics. Basic usage and product-interaction analytics (processed by PostHog), plus device and crash/diagnostic logs (processed by Sentry and Axiom), to help us keep the app reliable and understand how features are used; and push-notification tokens (through Expo and Apple's push service) so we can send the notifications you enable.

4. how we use your data

We use your information to:

• Power the wellness features you use in the app.
• Generate your personalized insights using AI (see section 5).
• Enable family sharing where you have opted in.
• Send notifications you have turned on.
• Provide support, security, and keep the Service working.

We never sell your data, and we never use it for advertising.

5. ai & how your insights are generated

To generate your personalized insights, and to interpret notes and symptoms you write, we share certain health information with our AI providers — OpenAI and Cerebras — which process it on our behalf solely to produce your insight text and to label your entries. Data sent through their APIs is not used to train their models and is retained only briefly, if at all, for abuse monitoring. We never use this data for advertising, and we never sell it. In the app, we ask for your consent before using AI to process your information.

6. apple healthkit

Data from Apple Health is used only to power features you use in the app. We never use it for advertising or marketing, never sell it, and never store it in iCloud.

7. how we share data

We do not sell your personal information. We share data only with the service providers (sub-processors) that help us run Lifelong, each acting on our instructions:

• Convex — secure storage and backend.
• OpenAI and Cerebras — generating insights and interpreting your notes.
• Clerk, Apple, and Google — account creation and sign-in.
• RevenueCat and Apple — processing and managing subscriptions.
• Expo and Apple — push notifications and app updates.
• Sentry — crash reporting and diagnostics.
• PostHog — product analytics.
• Axiom — diagnostics and crash logging.

We also share data with family members you invite, strictly as you direct (see section 8); and where we are legally required to, to protect safety, or as part of a business transfer such as a merger or acquisition (in which case this policy continues to apply).

California (CCPA). We do not sell or share your personal information for cross-context behavioral advertising.

8. family & shared data

Lifelong is built around the belief that health should be communal. When you add or invite someone to your family group, certain wellness information is surfaced to that group. Each member controls their own sharing and can change or revoke it at any time. The family owner and individual members may see different things, depending on what each person has chosen to share.

9. children

Lifelong is not directed to children under 13, and minors cannot create their own accounts. If you add a minor as a family member, you represent that you are their parent or legal guardian, or otherwise have authority to do so. You can remove a child's data at any time from within the app, or by emailing us.

10. retention & deletion

We keep your data for as long as your account is active or as needed to provide the Service. You can delete your account — and all associated personal and health data — from within the app, or by emailing director@ahanastudios.com. We remove your data within 30 days of a deletion request, except where we are required by law to retain it.

11. your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in the EU or UK, we process your data on the legal bases of your consent, performance of our contract with you, and our legitimate interests in running and improving the Service. If you are in California, you have the right to know, delete, and opt out of any sale or sharing of your information — though, as noted above, we do not sell or share it.

You can exercise most of these rights directly in the app, or by contacting us at director@ahanastudios.com.

12. security

We encrypt your data in transit and at rest, and restrict access to authorised personnel. We follow industry best practices for handling sensitive health information. No system is perfectly secure, but we are committed to protecting your data with the same care we would expect for our own.

13. international transfers

Lifelong is operated from New Zealand and our service providers may process your data in the United States and other countries. Where we transfer personal information internationally, we rely on appropriate safeguards (such as the data-protection terms in our agreements with those providers) to protect it.

14. a note on HIPAA

Lifelong is a consumer wellness product, not a HIPAA covered entity or business associate; your information is not protected health information under HIPAA. We protect it under this policy and applicable law.

15. changes & contact

We may update this policy from time to time. If we make material changes, we will notify you by email or through the app before they take effect. Questions? Reach us anytime at director@ahanastudios.com.