Privacy Policy

1. Who We Are and What This Policy Covers

Longevity AI Ltd ("the Company") (45 Rothschild Boulevard, Tel Aviv 6578401, Israel) is the database owner and data controller for personal information processed through the Longevity AI clinical decision-support platform (the "Platform") and through this website, longeuity.com (the "Site"). Contact: [email protected].

The Platform is a multimodal biomarker fusion tool for use by licensed physicians and clinic operators ("Authorized Users"). It ingests structured EMR records, laboratory panel results, and wearable-device biometric streams, merging them into unified longitudinal biological-risk profiles that support physician clinical judgment. The Platform is decision-support software only. It does not diagnose, treat, or prescribe, and it does not create a direct relationship between the Company and any patient.

This Privacy Policy explains what personal information the Company collects, why we collect it, how we use and protect it, and what rights you have under the Israeli Privacy Protection Law, 5741-1981 ("PPL").

2. Database Owner and Legal Basis

Longevity AI Ltd processes personal information as a registered database owner under the PPL. We process personal data on the following bases: performance of our contract with Authorized Users; our legitimate interests in operating and improving the Platform; and compliance with applicable legal obligations.

3. Information We Collect

3.1 Information Physicians and Clinic Operators Provide

• Account registration data: name, professional role, practice type, email address, and phone number;
• Practice and clinic details submitted during onboarding;
• Inquiry and demo-request content submitted through the Site contact form;
• Communications you send us regarding the Platform or your account.

3.2 Health-Related Data Processed on Behalf of Authorized Users

Authorized Users may connect patient-sourced health data to the Platform to receive biomarker fusion analysis. This data may include:

• Structured EMR and clinical history data (imported in FHIR-compatible or HL7 format);
• Laboratory panel results spanning metabolic, cardiovascular, hormonal, and immune panels;
• Wearable-device biometric streams including heart-rate variability, resting heart rate, SpO2, sleep architecture, and activity patterns.

This health-related data is processed on behalf of and at the direction of the Authorized User (the physician or clinic). The Company acts as a data processor for this category of information. The Authorized User and their practice retain responsibility for obtaining any consents or authorizations required from their patients under applicable law before submitting patient data to the Platform.

The Company does not use patient health data submitted through the Platform to train its models or for any purpose beyond delivering the contracted clinical decision-support service, unless the practice provides explicit written consent for a specific, clearly described secondary use.

3.3 Technical and Usage Data

• IP address, browser type, operating system, and device identifiers;
• Pages visited, session duration, and navigation paths on the Site;
• Cookies and similar technologies (see our Cookie Policy).

4. Purposes of Processing

We process personal information for the following purposes:

• Operating and delivering the Platform to Authorized Users;
• Account management, authentication, and customer support;
• Responding to demo requests and inquiries from physicians and clinic operators;
• Measuring and improving Site performance through anonymized analytics;
• Meeting legal and regulatory obligations, including security-incident reporting under the Privacy Protection (Data Security) Regulations;
• Communicating product updates, service notices, and clinical platform improvements to Authorized Users.

We do not sell personal information to third parties. We do not use health-related patient data for advertising or marketing purposes.

5. Sharing and Cross-Border Transfers

Personal information is shared only with third-party processors who support our operations under written data-processing agreements that restrict their use of data. Categories of recipients include cloud infrastructure providers, email communication services, and analytics services. Patient health data is not disclosed to any third party except as required by law or as directed by the Authorized User.

The Company is headquartered in Israel, and Authorized Users may include clinical practices in Western Europe and other regions. Where data is transferred across borders, such transfers comply with the Privacy Protection (Transfer of Data Abroad) Regulations. For European physician-practice partners, we apply contractual transfer safeguards consistent with applicable requirements.

6. Data Security

The Company applies technical and organizational security measures commensurate with the sensitivity of health-related data, including end-to-end encryption in transit and at rest, role-based access controls, and audit logging of data-access events. Access to patient health data within the Platform is restricted to the Authorized User's practice.

Where notification is required under the Privacy Protection (Data Security) Regulations, the Company will report security incidents to the Israeli Privacy Protection Authority and, where applicable, to affected data subjects in a timely manner.

7. Retention

We retain Authorized User account data for as long as the account is active and for a reasonable period thereafter to support legal, contractual, and dispute-resolution purposes. Technical usage logs are retained for up to 13 months. Health-related patient data submitted to the Platform is retained in accordance with the data-processing terms agreed with the Authorized User's practice, and is deleted or returned upon termination of the service agreement.

8. Your Rights under the PPL

Under the Israeli Privacy Protection Law, 5741-1981, you have the following rights with respect to personal information the Company holds about you:

• Right to inspect information held about you in a database registered or operated by the Company;
• Right to request correction of inaccurate or incomplete information;
• Right to request removal from a database used for direct marketing.

To exercise any of these rights, email [email protected]. We respond within 30 days.

9. Complaints

You may file a complaint with the Israeli Privacy Protection Authority at gov.il/PPA.

10. Changes to This Policy

We may update this Privacy Policy. Material changes will be posted with a new "Last updated" date. Your continued use of the Site or Platform after the effective date of changes constitutes acknowledgment of the updated policy.

11. Contact

Longevity AI Ltd
45 Rothschild Boulevard
Tel Aviv 6578401, Israel
Email: [email protected]
Phone: +972 3 795 1200