Effective date: 12 October 2026
This Privacy Policy explains what personal data Longevity Engineer collects, how we use it, who we share it with, and the choices you have. We have written it in plain English. We handle your data in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
Who we are. “Longevity Engineer”, “we”, “us” and “our” means Longevity Engineer, a sole proprietorship (Udyam registration UDYAM-HR-05-0205364) owned by Prashant Singh, at C-12, The Icon, Block 12, Golf Course Road, Gurgaon, Haryana 122002, India. We are the “Data Fiduciary” for your personal data under the DPDP Act.
The short version
- Your health data is sensitive. We encrypt it in transit and at rest.
- We use your data only to provide the service to you.
- We never sell your data. We do not show ads.
- You can view and edit everything in Your File.
- You can delete all your data any time by messaging DELETE MY DATA on WhatsApp. See How to delete your data.
1. What our service is
Longevity Engineer is a personal health and longevity assistant that works over WhatsApp, with an optional iOS app. It gives guidance on nutrition, training, sleep and recovery. It is not a medical service and does not diagnose or treat any condition. It is free during our beta.
2. Data we collect
Information you give us
- Your WhatsApp phone number and profile name.
- Messages you send to the assistant: text, photos (for example, meal photos) and voice notes. Voice notes are transcribed to text so the assistant can understand them.
- Health and lifestyle information you share, such as goals, age, height, weight, diet, exercise, sleep, symptoms, conditions, medications and lab results.
- Health context you choose to import from ChatGPT (by pasting text, sharing a link, or uploading a data export). We show you what we found and only save it after you confirm.
- Files you send us on WhatsApp, such as lab or blood-test reports, a glucose (CGM) export file from LibreView, or a training plan from your coach (as a photo, PDF or text).
- Details you provide when you book a call (name, email, chosen time).
Information from connected services, only if you choose to connect them
- Apple Health / Apple Watch (iOS app): with your permission, our iOS app reads the Apple Health data types you choose to grant through Apple HealthKit. Depending on what you allow, this can include activity (such as steps and active energy), workouts, heart data (such as heart rate and heart rate variability), sleep, body measurements (such as weight and body fat), vitals, nutrition, mobility, and cardio fitness (VO2 max). We only read the types you grant, and you can change this any time in iOS Settings > Health > Data Access & Devices.
- Health Auto Export: if you set up the third-party Health Auto Export app to send your Apple Health data to us, we receive the data types you configure in that app.
- Google Calendar: if you connect your Google Calendar, we read your upcoming events (such as times and titles) so the assistant can plan meals, reminders and bedtime around your day. You can disconnect it any time.
- Swiggy (Food, Instamart, Dineout): if you connect a Swiggy service, we access what is needed to place and track your orders and bookings: the link to your Swiggy account, your saved addresses, your cart, and order or booking details. Each Swiggy service requires your separate consent, and we never place an order or booking without your final, explicit confirmation.
Information collected automatically
- Technical data needed to run the service, such as message timestamps, delivery status, and basic logs and error reports.
- On our website, see Cookies and website analytics below.
3. How we use your data
We use your data only to provide and improve the service for you, specifically to:
- reply to your messages and give you personalised guidance;
- log your meals, activity and progress, and keep Your File up to date;
- send you check-ins and reminders (you can reply STOP to opt out of these proactive messages);
- help you place orders through Swiggy, when you have connected it and confirmed the order;
- arrange calls you book with us;
- keep the service secure, fix problems and respond to your requests;
- comply with the law.
We do not sell your data, use it for advertising, or share it with data brokers. We use AI model providers under their business (commercial or API) terms, which restrict how they may use customer data, including limits on using it to train their models.
4. Apple HealthKit data
Data obtained through Apple HealthKit is used only to provide health and fitness guidance to you within Longevity Engineer. In line with Apple’s rules:
- we read HealthKit data only with your explicit permission;
- we never use HealthKit data for advertising or marketing, and never sell it to advertising platforms, data brokers or information resellers;
- we never share HealthKit data with third parties except service providers who help us run the service (and are bound to protect it) or where you have asked us to;
- we do not store HealthKit data in iCloud.
5. Who we share data with
We use a small number of trusted service providers (“Data Processors”) to run Longevity Engineer. They process data only on our instructions and only to provide their service to us.
| Provider | What they do | Data involved |
|---|---|---|
| Meta Platforms (WhatsApp Cloud API) | Delivers messages between you and our assistant | Your phone number, profile name, messages and media |
| Serri (WhatsApp business messaging provider, India) | Relays WhatsApp messages between Meta and our servers | Your phone number, profile name, messages and media |
| Supabase | Database hosting (Singapore) | Your profile, Your File, message history and logs |
| Railway | Server hosting for our application (Singapore) | Data passing through our servers while being processed |
| Anthropic (Claude) | AI model that generates the assistant’s replies and reads meal photos, reports and files you send | The messages, photos, files and relevant context needed for each reply |
| Groq | Transcribes voice notes to text | Your voice notes |
| Google (Calendar, only if you connect it) | Provides your calendar events | Calendar events and the sign-in link to your Google account |
| Vercel | Website hosting and privacy-friendly website analytics | Standard web request data (such as IP address and browser type) when you visit our website |
| Cal.com | Call booking | Name, email and booking details |
| Swiggy (only if you connect it) | Food, grocery and dining orders | Account link, addresses, cart and order details |
| Apple (HealthKit, iOS app only) | Provides health data on your device, with your permission | Health data types you allow |
We may also disclose data if required by law or by a lawful request from a government authority, or to protect the rights, safety and security of our users or the public.
6. Where your data is stored
Your data is stored outside India, in Singapore, where our database (Supabase) and our application server (Railway) are hosted. Some providers, such as Meta, Anthropic, Groq, Google, Vercel and Cal.com, may also process data in other countries, such as the United States. We transfer data outside India in line with the DPDP Act and any restrictions notified by the Government of India, and we choose providers with strong security practices.
7. How we protect your data
We treat health data as sensitive. Data is encrypted in transit (TLS) and at rest. Access is limited to what is needed to run the service, and links to Your File are sent to you privately by the bot. No system is perfectly secure, but we take reasonable security measures to protect your data, and if a personal data breach occurs we will notify you and the Data Protection Board of India as required by law.
8. How long we keep your data
We keep your data for as long as you use Longevity Engineer. If your account has no activity for 12 months, we will message you in advance and then delete your data. If you ask us to delete your data, we do so as described below. Backups are kept for up to 30 days and then overwritten. We may keep a minimal record (for example, your consent record, or that a deletion request was completed) where the law requires it.
9. Cookies and website analytics
Our public website does not use advertising or tracking cookies, and we do not use Google Analytics, Meta Pixel or similar tracking tools.
- Vercel Web Analytics. We use Vercel’s privacy-friendly analytics to count page visits. It does not use cookies, does not track you across other websites, and does not build a profile of you. It may store a small value in your browser’s local storage to tell us how you arrived at our site.
- Google Fonts. Our pages load fonts from Google Fonts, so your browser connects to Google’s servers, which receive your IP address.
- Your File. When you open Your File through the secure link the bot sends you, we may use a strictly necessary cookie to keep you signed in. It is not used for tracking or advertising.
10. Your rights and choices
Under the DPDP Act and this policy, you can:
- Access and correct your data. View and edit everything we hold about you in Your File, which you open through a secure link the bot sends you on WhatsApp. You can also ask us by email.
- Withdraw consent. Disconnect Apple Health (in iOS Settings), Google Calendar, or any Swiggy service at any time, and stop proactive messages by replying STOP on WhatsApp. Withdrawing consent does not affect processing done before you withdrew it.
- Delete your data. See the next section.
- Raise a grievance. Contact us (details below). If you are not satisfied with our response, you may complain to the Data Protection Board of India.
- Nominate someone. You may nominate a person to exercise your rights if you die or become unable to do so, by emailing us.
11. How to delete your data
You can delete all of your data at any time, for any reason.
Option 1: On WhatsApp (fastest)
- Open your chat with Longevity Engineer on WhatsApp.
- Send the message: DELETE MY DATA
- We will confirm that we received your request.
Option 2: By email Email prashants2015@email.iimcal.ac.in with the subject “Delete my data”, and include the WhatsApp phone number you use with Longevity Engineer, so we can find your account. We may ask you to confirm the request from that WhatsApp number to make sure it is really you.
What gets deleted. Your profile, everything in Your File, your message history, meal photos, uploaded reports and files, voice note transcripts and logs, imported ChatGPT context, any Apple Health and glucose data we have stored, and your Google Calendar and Swiggy connection details. We will also ask our processors to delete it.
When. Deletion is completed within 30 days of your request. This includes our backups, which are kept for no more than 30 days. We may keep a minimal record that the request was completed, where the law requires it.
Apple Health. To stop our iOS app reading Health data, go to iOS Settings > Health > Data Access & Devices > Longevity Engineer and turn off access, or delete the app.
WhatsApp. Deleting your data with us does not delete your WhatsApp account or chats on your phone; those are managed by WhatsApp/Meta.
12. Children
Longevity Engineer is only for people aged 18 or over. We do not knowingly collect data from anyone under 18. If we learn that a user is under 18, we will delete their data.
13. Not medical advice
Our guidance is for general wellness and information only. It is not medical advice, diagnosis or treatment. Always consult a qualified doctor about medical concerns.
14. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will let you know on WhatsApp and update the effective date on this page.
15. Contact and grievances
Grievance contact: Prashant Singh, Founder
Email: prashants2015@email.iimcal.ac.in
Phone: +91 9911249301
Address: Longevity Engineer, C-12, The Icon, Block 12, Golf Course Road, Gurgaon, Haryana 122002, India
We respond to privacy requests and grievances within 7 days, and aim to resolve them as quickly as possible, within the timelines required by law.