Privacy Policy

This policy explains how LifeFrom Health, Inc. (“LifeFrom,” “we,” “us”) collects, uses, protects, and shares personal information through our websites, apps, and services (the “Services”). For the data you provide to use LifeFrom, we act as the business responsible for it.

LifeFrom is a technology company, not a healthcare provider, health plan, or clearinghouse, so we are generally not a “covered entity” under HIPAA. HIPAA typically governs the doctors, labs, and hospitals that create your records — not a tool you use to organize them yourself.

That doesn’t lower our bar. Your uploaded health information is among the most sensitive data we handle, and we protect it accordingly. If in the future we connect you with independent providers or labs, those entities may be HIPAA-covered and will handle information they create under their own notices of privacy practices.

Information you give us:

• Account details — name, email, and household members you add;
• Health information you upload or enter — lab results, imaging, genetic data, microbiome and ECG reports, symptoms, medications, and the data we derive from them (such as extracted markers);
• Your messages to the AI assistant and to support;
• Payment information, processed by our payment provider (we don’t store full card numbers).

Information collected automatically: device and browser details, IP address, app usage, and cookie data (see Cookies below).

We use your information to:

• provide the Services — parse your documents, explain results, answer your questions;
• maintain your account, process payments, and provide support;
• secure the Services and prevent fraud and abuse;
• improve the product — using aggregated or de-identified data, or your own data on your behalf, with safeguards (see AI & your data);
• comply with law and enforce our terms.

Some features send your content to trusted AI processors under contract, acting only on our instructions, to generate explanations and responses. We do not use your identifiable health data to train third-party or public AI models.

We don’t use AI to make decisions that produce legal or similarly significant effects about you without human involvement. You can learn more on our AI Use & Limitations page.

We share information only as needed to run the Services:

• Service providers — cloud hosting and database, AI model providers, payment processing, and analytics, each bound to protect it and use it only for us;
• Providers you choose — if you ask us to share data with a clinician, lab, or household member;
• Legal reasons — to comply with law, respond to lawful requests, or protect rights and safety;
• Business transfers — as part of a merger, acquisition, or financing, subject to this policy;
• Aggregated or de-identified data — which can no longer identify you.

We do not sell your personal information, and we do not share your health data with advertisers.

Depending on where you live (including California and other U.S. states with privacy laws), you may have the right to:

• know what personal information we collect and how we use and disclose it;
• access a copy of your data, and receive it in a portable format;
• correct inaccurate data;
• delete your data;
• opt out of any “sale” or “sharing” of personal information (we don’t sell or share for ads);
• limit the use of sensitive personal information;
• not be discriminated against for exercising these rights.

To exercise any of these, email julian@lifefrom.ai from your account address, or use the controls in the app. We’ll verify your request and respond within the time the law requires (generally 45 days, extendable when needed). You can also authorize an agent to act for you with proof of authorization.

We keep your information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete data or close your account, we delete or de-identify your personal information within a reasonable period, except where we must retain it by law.

We use technical and organizational safeguards appropriate to the sensitivity of your data, including encryption in transit and at rest, access controls, and monitoring. No system is perfectly secure, so we can’t guarantee absolute security — but if a breach affects your information, we’ll notify you as required by law.

The Services are for adults 18 and older. We don’t knowingly collect information from children. If we learn we have, we’ll delete it — contact julian@lifefrom.ai.

LifeFrom is based in the United States, and your information may be processed and stored in the U.S. and in other countries where we or our service providers operate. Those locations may have different data protection rules than your own; by using the Services, you understand your information may be transferred there.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand product usage. You can control cookies through your browser settings; blocking some may limit functionality. Where we offer analytics, we honor applicable opt-out choices. We currently do not respond to browser “Do Not Track” signals.

We may update this policy as the product and the law evolve. We’ll change the “Last updated” date and, for material changes, provide additional notice. Please review it periodically.

Privacy questions or requests? Email our privacy team at julian@lifefrom.ai. LifeFrom Health, Inc., Attn: Privacy.