Consumer Health Data Privacy Policy

01Who this policy is for

This policy applies to consumers in Washington (My Health My Data Act), Nevada (SB 370), Connecticut and other U.S. states with consumer health data laws. It covers “consumer health data”: personal information that identifies, or can reasonably be linked to, your past, present or future physical or mental health.

LifeFrom is provided by Harvest Sterling LLC (doing business as LifeFrom), 30 N Gould St, STE R, Sheridan, WY 82801, USA. This policy adds to our Privacy Policy.

02Consumer health data we collect, and where it comes from

From you: lab results, imaging and scan files, DNA file records and the variants you ask about, gut and microbiome tests, ECG files, symptoms, conditions, medicines and supplements, meals, workouts, cycle information, photos, voice notes and documents you add, and your messages to LifeFrom AI and to support.
From Apple Health, with your permission: the categories you allow, such as heart rate, heart rate variability, sleep, activity, body measurements, blood pressure, blood glucose, blood oxygen, temperature and cycle tracking.
From devices you connect: the LifeFrom band (over Bluetooth), Withings (including ECGs from Withings devices) and other devices you link.
Derived by LifeFrom: extracted markers, trends, scores (such as biological age and Life Force) and AI-written summaries.
From your purchases: the supplements in the packs you buy and your order history, because they can suggest something about your health.
About people you add: health information you enter for household members, as their parent, guardian or authorised representative.

03Why we collect and use it

to provide LifeFrom to you: store your record, read your documents, explain results and show trends;
if you turn AI on, to answer your questions with LifeFrom AI;
if you ask, to suggest a supplement protocol from your record. LifeFrom makes the suggestion; it is not sent to our payment processor or manufacturer;
to make, ship and support the supplement packs you buy;
to provide support and send you service messages;
to secure the Services and prevent fraud and abuse;
to comply with law.

04Who we share it with

We share consumer health data only with processors that act on our instructions to run LifeFrom:

Supabase (on Amazon Web Services, United States): stores your record and files;
Vercel: hosts the website and web app that you view your data through;
OpenRouter, OpenAI (possibly via Microsoft Azure), Google and Mistral: AI processing, only when AI is on and you have agreed;
Deepgram: transcribes audio when you dictate on the website;
Apple: delivers notifications and may provide speech recognition;
Withings: if you connect it, to sync your readings;
Resend: sends the emails we send you (your email address and the email content).
OK Capsule (United States), our supplement manufacturer: only if you buy a pack, the products and quantities in it, with your name, email, phone number and delivery address, to make and ship it. It never receives your health records, results or AI conversations;
Stripe: only if you buy a pack, your payment, billing and delivery details and the order amount, to take payment. Stripe receives the product name “monthly supplement pack,” not your health records.

We may also disclose it where the law requires, or as part of a merger or acquisition subject to this policy. The categories shared are those listed above that each processor needs for its task.

05We don't sell consumer health data

We do not sell consumer health data. The research program (not open yet) would license de-identified data for a specific study only with your separate consent, and with your separate signed authorisation where the law requires one. Data from Apple Health is never included in research and is never licensed to anyone. Residents of Washington and Nevada can't join research studies for now.

06Your consent

We collect and share consumer health data with your consent, given in the app before we collect it, or as needed to provide the Services you ask for. You can withdraw consent at any time in the app's Settings (Withdraw health-data consent, or turn LifeFrom AI off) or by emailing privacy@lifefrom.ai.

07Your rights and how to use them

Access: confirm whether we collect, share or sell your consumer health data, get a copy of it, and get a list of the third parties and affiliates we have shared it with. Email privacy@lifefrom.ai.
Delete: in the app, Settings, Delete account and data, or email privacy@lifefrom.ai. We delete it straight away, from backups within 30 days, and tell our processors to delete it too.
Withdraw consent: in the app's Settings, or by email to privacy@lifefrom.ai.

We'll verify your request and respond within 45 days (extendable by 45 more days where reasonably necessary, and we'll tell you why). We won't discriminate against you for using these rights.

Appeals: if we decline your request, email privacy@lifefrom.aiwith “Appeal” in the subject within a reasonable time. We'll answer in writing within 45 days and explain our decision. If we deny your appeal, you can complain to your state Attorney General, for example the Washington Attorney General at atg.wa.gov.

08Contact

privacy@lifefrom.ai. Harvest Sterling LLC (doing business as LifeFrom), Attn: Privacy, 30 N Gould St, STE R, Sheridan, WY 82801, USA.