Privacy Policy
Ageproof AI Wellness ("Ageproof", "we", "us", or "our")
Effective Date: January 27, 2026
Our Commitment: Your health data is personal. We collect only what's necessary to provide personalized wellness insights, and we never sell your data to third parties.
1. Information We Collect
1.1 Information You Provide
When you use Ageproof, you may provide us with:
- Account Information: Name and email address (via Apple Sign In)
- Profile Information: Birth date, gender, height, and weight
- Wellness Preferences: Your health goals (energy, sleep, focus, longevity), intensity preferences, and notification settings
1.2 Health Data (with Your Permission)
With your explicit consent, we access the following data from Apple HealthKit:
- Sleep Data: Sleep duration and sleep stages (awake, light, deep, REM)
- Heart Data: Resting heart rate and heart rate variability (HRV)
- Activity Data: Daily steps and workout information
This health data is used solely to calculate your biological age and generate personalized wellness protocols. You can revoke HealthKit access at any time through your iPhone's Settings app.
1.3 Automatically Collected Information
- Usage Data: App interactions, features used, and protocol completions
- Device Information: Device type, operating system version, and app version
- Analytics: Aggregated, anonymized usage statistics to improve our service
2. How We Use Your Information
We use your information to:
- Calculate Biological Age: Analyze your health metrics to estimate your biological age
- Personalize Protocols: Generate AI-powered wellness recommendations tailored to your data and goals
- Track Progress: Show trends and improvements in your wellness journey
- Send Notifications: Remind you of daily protocols and wellness tips (if enabled)
- Process Subscriptions: Manage your premium subscription status
- Improve Our Service: Analyze usage patterns to enhance app features
3. Data Storage and Security
3.1 Local Storage
Most of your personal data, including health metrics and onboarding information, is stored locally on your device using secure encrypted storage. This means your sensitive health data stays on your phone.
3.2 Cloud Services
Limited data is transmitted to our secure servers:
- AI Processing: When generating personalized protocols, anonymized health metrics are sent to our AI service to create recommendations. No personally identifiable information is included in these requests.
- Subscription Management: Your subscription status is managed through RevenueCat, a secure third-party payment processor.
3.3 Security Measures
We implement industry-standard security measures including:
- Encryption of data in transit (HTTPS/TLS)
- Secure authentication via Apple Sign In
- No storage of raw health data on external servers
- Regular security assessments
4. Third-Party Services
Ageproof integrates with the following third-party services:
- Apple HealthKit: To read your health and fitness data (with your permission)
- Apple Sign In: For secure authentication
- RevenueCat: For subscription and payment processing. See their Privacy Policy
- Anthropic (Claude AI): For generating personalized wellness protocols. Health data sent for AI processing is anonymized and not linked to your identity
5. Data Sharing
We do not sell your personal data. We never have and never will sell your health information or personal data to advertisers, data brokers, or any third parties.
We may share information only in these limited circumstances:
- Service Providers: With trusted partners who help us operate our service (e.g., cloud hosting, payment processing), bound by strict confidentiality agreements
- Legal Requirements: If required by law, court order, or government request
- Safety: To protect the rights, safety, or property of Ageproof, our users, or the public
6. Your Rights and Choices
You have control over your data:
- Access: View all data we have about you within the app's Settings
- HealthKit Permissions: Manage or revoke health data access in iPhone Settings → Privacy → Health
- Notifications: Enable or disable notifications in app Settings
- Account Deletion: Delete your account and all associated data through the app's Settings menu. Deletion is permanent and cannot be undone.
- Data Export: Request a copy of your data by contacting us
7. Children's Privacy
Ageproof is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide you services. Local data on your device persists until you delete the app or clear app data. When you delete your account, we remove your personal information from our servers within 30 days, except where retention is required by law.
9. International Users
Ageproof is operated from the United States. If you are accessing our app from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending you a notification. Your continued use of Ageproof after changes become effective constitutes acceptance of the revised policy.
11. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information (we don't sell data)
- Right to delete personal information
- Right to non-discrimination for exercising privacy rights
12. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights including:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing