Privacy Policy

1. Who we are

PlusYears ("PlusYears", "we", "us") provides a personal health analysis service at plusyears.ai. We are the controller of the personal information described in this policy.

You can reach us about anything on this page at privacy@plusyears.ai.

2. What we collect

Account information

Your email address and authentication details, so you can sign in and so we can send you the things you asked for. We also record the date and exact text of the medical release you accepted, because a consent record is only worth keeping if it says what you actually agreed to.

Health information you give us

This is the heart of the product, and it is the most sensitive information we hold. Depending on how much of your profile you fill in, it can include:

• Vitals and body composition
• Personal medical history, conditions and procedures
• Family medical history
• Medications and supplements
• Allergies and sensitivities
• Cardiometabolic, digestive, hormonal and cognitive markers
• Lab results, including any you upload as a document
• Sleep, nutrition, physical activity and substance use
• Stress, mental health, energy, environmental exposures
• Social relationships, sense of purpose and wellbeing
• Preventive screening history, and the care team and appointment dates you maintain

You choose how much of this to enter. The app works with less; it works better with more. Nothing in this list is required to hold an account.

Documents you upload

If you upload a lab report or similar PDF, we extract the values from it so they can be read as part of your record. See How AI processing works for what happens to the file.

Activity data from connected devices

If you connect a fitness tracker, smartwatch or similar device, we receive the health and activity data that device records. This is covered in detail in the next section.

Payment information

Subscriptions are handled by Paddle, which acts as the merchant of record. Paddle collects and processes your payment details directly. We never receive or store your card number. We receive your subscription status, plan and billing events.

Diagnostics and usage

We record which features ran and what they cost us to run, so we can operate the service. When something breaks, an error report is sent to our monitoring provider (Sentry); those reports include your account id and email address so we can tell whether a bug affected you specifically. If you send us feedback, we keep what you wrote and any screenshot you attached.

3. Activity data from connected devices

Connecting a device is entirely optional and is always something you initiate. If you never connect one, nothing in this section applies to you.

How the connection works

We do not read your device account directly. Device connections are handled by Terra (Terra API, Inc.), a health-data aggregator. When you connect a device account, you sign in to that provider through Terra, the provider sends your data to Terra, and Terra passes it on to us. We never see the username or password for your device account.

What activity data we receive and store

We receive the data categories your device records and your device account makes available, which can include:

• Heart — resting and average heart rate, heart rate zones and variability, and where your device supports it, irregular-rhythm classifications and pulse wave velocity
• Sleep — total and staged sleep durations, sleep architecture, efficiency and timing
• Activity and movement — workouts, steps, distance, elevation, calories, activity type and duration
• Body — weight, body composition, blood pressure, blood glucose where a sensor reports it, and oxygen saturation
• Respiration and stress — breathing rate, stress scores, recovery and readiness metrics
• Nutrition — logged food, macronutrients and micronutrients, where you log them
• Menstruation — cycle data, where your device or app records it
• Device metadata — the make and model of the device and when it last synced

What we deliberately do not keep

Some of what a watch produces is extremely high frequency — heart rate every few seconds, sleep stage transitions minute by minute, raw ECG traces. We do not store those raw sample streams. They are reduced on arrival to summary numbers (minimum, maximum, average, count, time spent in each band) and only those summaries are kept. Certain fields we have no use for are discarded on arrival and never written down at all.

How activity data is used

Your activity data is used for one purpose: producing your own analysis. It feeds the nightly review that generates your daily recommendation, your trends, your projections and your biological-age estimates. A curated subset of it is included in the prompt sent to our AI provider for that analysis — see the next section.

How activity data is disclosed

Activity data is disclosed only to the processors listed in section 6 — the aggregator that delivers it (Terra), the database that stores it, and the AI provider that analyses it — each acting on our instructions to deliver the service to you. We do not sell activity data, we do not use it for advertising, we do not share it with employers, insurers or data brokers, and we do not disclose it to any other user.

Disconnecting

You can disconnect a device at any time from within the app. Disconnecting revokes our access at Terra, and no further data is sent to us. Activity data already received stays in your record, because it is part of your health history — if you want it gone, delete your account or write to us and we will remove it.

Deleting your account also revokes the device connection at Terra as part of the deletion.

4. How we use your information

• To produce your analysis. Each night we review your record and generate your recommendations, scores, trends and projections.
• To answer your questions. When you ask the app something, your question and the relevant parts of your record are used to answer it.
• To prepare things you ask for — doctor-visit preparation, care-team reminders, and similar features you switch on.
• To email you the reminders and check-ins you asked for, and notices about your account.
• To find clinicians near you, if you use that feature. We query public federal provider directories using a location derived from your ZIP code and the type of clinician you are looking for. Your health record is not sent to those directories.
• To take payment and manage your subscription.
• To keep the service running — diagnosing errors, monitoring cost and capacity, and preventing abuse.
• To meet legal obligations where they apply to us.

Where we rely on consent as our legal basis — which includes all health data processing under UK and EU law — you gave it when you accepted the medical release, and you can withdraw it at any time by deleting your account or writing to us.

5. How AI processing works

PlusYears uses third-party AI services to analyse your record. This is not incidental to the product; it is how the product works, and you acknowledged it when you accepted the medical release.

In practice this means a prompt containing relevant parts of your health record and your recent device data is sent to an AI provider, which returns the analysis you read in the app. We use Anthropic for this, and the same provider reads the contents of any document you upload.

Anthropic's commercial API terms state that content submitted through the API is not used to train their models. We do not permit any AI provider to use your information for their own purposes.

The analysis is produced by software and can be wrong or incomplete. It is not medical advice.

6. Who we disclose your information to

We do not sell your information. We share it only with the service providers below, each of which processes it on our instructions in order to deliver the product to you.

Provider	What they receive	Why
Terra	Device and activity data	Connects your device and delivers its data to us
Supabase	Your account and your full record	Database, authentication and file storage
Netlify	Requests to the site and app	Hosting and server functions
Anthropic	The parts of your record needed for an analysis, and documents you upload	Produces your recommendations and insights, and reads values out of uploaded lab reports
Resend	Your email address and message contents	Sends reminders and account emails
Sentry	Error reports, your account id and email	Tells us when something is broken and for whom
Paddle	Your payment and billing details	Takes payment as merchant of record

We may also disclose information if we are legally required to, or where it is necessary to protect someone's safety or our legal rights. If PlusYears is ever acquired or merged, your information may transfer with it; we will tell you before that happens and before any new privacy policy applies to you.

7. What we never do

• We never sell your personal or health information, to anyone, for any price.
• We never share it with employers, insurers, advertisers or data brokers.
• We never use your health information for advertising or to build advertising profiles.
• We never make your record visible to other users.

8. How long we keep it, and how to delete it

While your account is open, we keep your record — that is the point of it. Your history is what makes next year's analysis better than this year's.

If you cancel or your trial lapses

Everything is kept exactly as you left it for 90 days, so that coming back means signing in rather than starting over. After 90 days the account and its record are deleted. We send you advance notice by email before that happens — twice, three weeks and one week ahead — so a deletion deadline never arrives unannounced.

If you delete your account

You can delete your account yourself at any time, from My Profile & Data → Account. Deletion removes your record, your uploaded documents, your feedback and any screenshots attached to it, cancels any active subscription, and revokes any device connection at Terra. It is immediate and it is not reversible.

What outlives deletion

Some records survive, in limited form and for limited reasons: billing and tax records held by our payment provider, which we are required to keep; aggregate operational counts that identify nobody; and backups, which are overwritten on their ordinary cycle. Error reports already sent to our monitoring provider expire on that provider's own retention schedule.

9. Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it, and we will do it. Write to privacy@plusyears.ai. We do not charge for this and we will not make it difficult.

If you are in the UK or the European Economic Area

Under the UK GDPR and the EU GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to how we process it, to receive it in a portable machine-readable format, and to withdraw consent at any time — including the consent that permits us to process health data — without affecting processing that already happened. We respond within one month.

You also have the right to complain to your data protection authority. In the UK that is the Information Commissioner's Office; in the EEA it is your national supervisory authority.

If you are in California

Under the CCPA and CPRA you have the right to know what personal information we collect and why, to receive a copy of it, to have it deleted, to correct it, and to limit the use of sensitive personal information. Health information is sensitive personal information, and we use it only to provide the service you asked for.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months. You will never be charged a different price or given a worse service for exercising any of these rights.

10. How we protect it

• Everything travels over encrypted connections, and is encrypted at rest by our database and storage provider.
• Your record is protected by row-level security, so one account's queries cannot reach another account's rows.
• Incoming device data is verified by cryptographic signature before we accept it, and stale or replayed deliveries are rejected.
• Provider API keys are encrypted with a server-side secret that never reaches a browser.
• Administrative access is limited to named accounts and is used for support and operations, not for reading records for interest.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information we will tell you and the relevant regulators as the law requires.

11. Where your data is processed

PlusYears is operated from the United States and our providers process data in the United States and other countries where they operate. If you are in the UK or the EEA, that means your information is transferred outside your home country. Those transfers rely on the safeguards our providers put in place, such as Standard Contractual Clauses, and on your explicit consent to use a service operated from the United States.

12. Children

PlusYears is for adults. It is not directed to anyone under 18 and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, write to us and we will delete it.

13. Changes to this policy

If we change this policy we will update the date at the top of the page. If a change materially affects how we use or disclose your information, we will tell you directly rather than relying on you to notice.

14. Contact us

Questions, requests, complaints, or anything on this page that reads as though it might not be true: privacy@plusyears.ai.