Privacy Policy
Last updated: January 2025
1. Introduction
LongevityHub Pro ("we", "us", "our") operates longevityhub.net and the LongevityHub Pro application at app.longevityhub.net ("the Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data. By using the Service you agree to this policy.
2. Information We Collect
We collect the following categories of personal data:
- Account data: name, email address, and hashed password on registration.
- Profile data: role, organisation, and focus areas entered during onboarding (all optional).
- Usage data: modules accessed, searches run, content bookmarked, and alert settings configured.
- Payment data: billing details processed by Lemon Squeezy. We never store your full card number or CVV.
- Communications: messages sent to us at info@longevityhub.net.
- Technical data: IP address, browser type, and session identifiers via authentication cookies.
3. How We Use Your Information
We use your data to:
- Provide, operate, and improve the Service.
- Personalise your dashboard and content feed based on your stated focus areas.
- Send transactional emails (welcome, billing receipts, account notifications).
- Deliver your requested keyword alert email digests.
- Process payments and manage subscriptions through Lemon Squeezy.
- Respond to support requests.
- Detect, investigate, and prevent fraud or misuse.
We do not sell, rent, or trade your personal data to any third party.
4. Data Sharing and Sub-Processors
We share data only with the following sub-processors, each bound by GDPR-compliant data processing agreements:
- Supabase (database, authentication, and storage infrastructure)
- Lemon Squeezy (subscription billing and payment processing)
- Resend / Lovable Cloud (transactional email delivery)
- Vercel or Lovable Cloud (application hosting and edge functions)
We do not share data with advertisers or data brokers.
5. Data Retention
- Active accounts: data retained for the duration of your subscription.
- Cancelled accounts: data retained for 90 days after your final access date, then permanently and irreversibly deleted.
- Email logs: retained for 12 months, then deleted.
- You may request deletion at any time (see Your Rights, section 8).
6. Security
We protect your data with:
- TLS 1.2+ encryption for all data in transit.
- AES-256 encryption for data at rest (via Supabase).
- Row-level security policies ensuring each user can only access their own data.
- Bcrypt password hashing with a minimum cost factor of 12.
No method of electronic transmission or storage is 100% secure. Use the Service at your own risk.
8. Your Rights (GDPR and UK GDPR)
If you are located in the EEA, UK, or Switzerland, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct any inaccurate or incomplete data.
- Erasure: request deletion of your personal data ("right to be forgotten").
- Restriction: ask us to limit how we process your data.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests.
To exercise any of these rights, email info@longevityhub.net. We will respond within 30 days. Identity verification may be required.
9. Children
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided personal data, we will delete it immediately.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you by email at least 14 days before material changes take effect and update the "Last updated" date above. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
11. Contact Us
For privacy questions or to exercise your rights:
Email: info@longevityhub.net
LongevityHub Pro