Privacy Policy

This privacy policy describes the privacy practices of Reverse Age Method LLC (collectively, "Company", "we", "us", "our") in connection with the Aliza website, as well as associated products and services, including, without limitation, mobile applications, and wellness coaching software developed by the Company (collectively, the "Service"). In addition, this Privacy Policy describes your rights and choices concerning the personal information we collect. When required under applicable law, we will notify you of any changes to this Policy by posting an update on our Privacy Policy web page or in another appropriate manner. Your continued use of the Services after any changes in this Privacy Policy will constitute your consent to such change(s). The Services are intended solely for use by users based in the United States.

Table of Contents

• Personal Data We Collect
• Use of Personal Data
• Sharing of Personal Data
• Security and Retention
• Children's Privacy
• Telephone Consumer Protection Act
• Supplemental Terms for California Residents
• Contact Information

Personal Data We Collect

Information that you provide to us. Personal information you may provide to us through the Service or otherwise which may include the following categories of information:

• Business and personal contact information, including your full name, email address, mailing address, telephone number, job title, and company name.
• Profile information, such as your username, and password that you may set to establish an account with us.
• Registration information, such as information that may be related to signing up for our service or an event you register for.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
• Health and biometric data, such as:

• Physical activity
• Nutrition, dietary intake, and hydration logs you submit
• Symptoms, mood, or wellbeing entries you record
• Health goals and preferences
• Sexual and reproductive health and history
• Any other health information you voluntarily provide

• Usage information, such as health history, health metrics, sexual health, and other health information that you share with us when using, signing up for, or requesting more information about the Services, including, but not limited to demographic information, such as gender and birth date.

Information we obtain from social media platforms. We may maintain promotional pages and provide our Services via social media platforms, including Slack, Instagram, Twitter, LinkedIn, and other third-party platforms. When you visit or interact with us on those platforms, the privacy policies of the applicable platform will apply to your interactions and their collection, use, and processing of your personal information. You or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy. Providing health information or other sensitive personal information on these platforms is not recommended and as such we ask that you do not share this with us on social media.

Information we obtain from other third parties. We may get information about you from other sources. We may add this to the information we get from this Site and through our Services. For example, you may also be able to access your Aliza account by signing on through various sites such as Google. Your participation in the services provided on these platforms is voluntary. If you choose to sign on using this service, the Company may collect certain information from your account that could include your public profile, username, email address, birthday, stated location, city, contact lists, and other interactions on that platform (such as interests and likes). The information we may have access to will vary by platform and is controlled by privacy settings on that platform and your choices on that platform. Your use of services on third-party platforms is governed by the privacy statement and other terms of use for that third-party platform until such information is shared with us, and such information is also subject to this Policy.

Automatic Data Collection. We, and our service providers may automatically log information about you, your computer or mobile device, and your interaction with the Service, our communications, and other online services such as:

• Device data, such as IP address, operating system type, browser type, browser language, the website you visited before browsing our Site, pages you viewed, how long you spent on a page, access times, and information about your use of and actions on our Site or in the Company's mobile applications. This type of information is routinely collected to ensure the IT security and the operation of our systems to prevent or detect misuse such as fraud and other malicious actions.

Cookies and other technologies. To enhance your online experience, we use "cookies." Cookies are small text files placed by the website in your computer's browser to make a user's experience more efficient. Cookies, by themselves, do not tell us your e-mail address or other personal information. However, once you choose to furnish the website with information, this information may be linked to the data stored in the cookie. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our website. Other tools we may use to collect information by automated means include web server logs, web beacons, and pixels.

We use cookies to understand internet usage, enhance the performance of the Site, and activate special web features and security mechanisms. In addition, we may use cookies to offer you the Services.

You always have the option of setting your browser to warn you when a cookie is being accessed on your computer, to delete cookies currently on your computer, or to decline cookies altogether. However, to take full advantage of the Site and the Services, your browser will need to accept cookies.

The Company stores cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission. The Company uses different types of cookies which are listed below. Some cookies are placed by third parties.

We use the following categories on our websites and other web-based online services:

• Strictly Necessary Cookies: These cookies are necessary to enable you to browse around our website and use its features.
• Analytics Cookies: These cookies collect information about how you use our website. This data may be used to help our teams optimize our websites and make them easier for you to navigate.
• Functional Cookies: These cookies allow our website to remember the choices you make while browsing. They may also be used to keep track of what featured pages or videos have been viewed to avoid repetition.

California Do Not Track Disclosure. We currently do not support the Do Not Track browser setting or respond to Do Not Track signals. Do Not Track (or DNT) is a preference you can set in your browser to let the websites you visit know that you do not want them collecting certain information about you. For more details about Do Not Track, including how to enable or disable this preference, visit http://www.allaboutdnt.com.

If you choose to interact on the Site or through the Services (such as by registering, using our Services, completing questionnaires, surveys, service contacts, or requests for information) the Company will collect the personal information that you provide. We may collect personal information about you that you provide through email, or other communications. If you provide us with personal information regarding another individual, we will assume that you have that person's consent to give us their personal information. Providing personal information about another individual without their consent could be viewed as a data privacy violation and could subject you to sanctions.

Use of Personal Data

Recipients. The Company is a US company and has service providers in the United States and other countries. Your personal information may be collected, used, and stored in the United States or other locations outside of your home country. When our partners or service providers process personal data, they do so only based on binding agreements in which they agree to comply with contractual obligations to protect your data, including, but not limited to, compliance with this Privacy Policy.

At times, we may work with a contracted third party to support the delivery of our Services or to deliver Services to you directly.

Whenever you voluntarily disclose anyone's personal information on publicly viewable web pages, that information can be collected and used by others. For example, if you post your email address to our social media pages, you may receive unsolicited messages. We cannot control who reads your post or what other users may do with the information that you voluntarily post, so we encourage you to exercise discretion and caution concerning the information you disclose through these interactive features. When an individual chooses to post information that will be publicly disclosed, he or she is responsible for all legal consequences. We are not responsible under any data protection laws for information that you voluntarily post on a site that can be accessed by others.

Use of Information Collected. Subject to this Privacy Policy, the Aliza Terms of Use, and applicable terms and conditions of third-party applications, all data transmitted through the Services is controlled by the Company except personal health data which you retain ownership of. However, unless you explicitly agree to our Terms of Use and opt-in during the registration process, you may not transmit any data to the Company. Generally, we may use information in the following ways and as otherwise described in this Privacy Policy:

• To provide the Services and personalize your experience. We use information about you to provide the Services to you, including to:

• help establish and verify the identity and eligibility of users;
• for the purposes for which you specifically provided it including, without limitation, to enable us to provide tailored wellness information and coaching, including recommendations for wellness products;
• to send you information about your relationship or transactions with us;
• to otherwise contact you with information that we believe will be of interest to you, including marketing and promotional communications;
• to enhance or develop features, products, and Services;
• to allow us to personalize the content that you see on the Services; and
• to create aggregated, anonymous data by removing information that makes the data personally identifiable, which we may use to improve the Service and for other, lawful business purposes.

• For research and development: We are always looking for ways to make our Services smarter, secure, integrated, and useful to you. We use collective learnings about how people use our Services and feedback provided to us to troubleshoot and to identify trends, usage, activity patterns, and areas for integration and improvement of the Services; to analyze and improve our Site and/or Services (including developing new products and services); improving safety; managing our communications; analyzing our products; performing market research; for peer-reviewed and non-peer-reviewed clinical research; and performing data analytics. For example, we use information collected about how users engage with our Services to design a better, more user-friendly user experience. In some cases, we may apply these learnings across all our Services to improve and develop similar features or to better integrate the Services you use. We also test and analyze certain new products, workflows, and user experiences with some users before rolling them out to all users.
• AI features and model training: To generate a coaching response, we send your message and relevant health context, which may include symptoms, health history, lab values, and protocol information, to Anthropic's API. The coach removes your first name from its assembled health-context prompt and refuses to send that prompt if it contains your known email address or account ID. Text you type and files you upload may still contain identifying details. Other features, including lab extraction, meal analysis, voice transcription, and progress summaries, send the information needed for that feature to AI providers through the Lovable AI Gateway. We do not use member content to train general-purpose AI models, and we have not authorized our AI providers to use it for model training. These providers process the information to deliver the feature you requested.
• To communicate with you about the Services:

• We use your contact information to send transactional communications via email, push notifications, SMS text messages, and within our digital platforms, including sending you reminders, responding to your comments, questions, and requests, providing customer support, soliciting outcomes and feedback, and sending you technical notices, updates, security alerts, and administrative messages.
• We may also provide tailored communications based on your activity and interactions with us. For example, certain actions you take in the Services may automatically trigger a feature or third-party app suggestion within the Services. These communications are part of the Services and in most cases, you cannot opt out of them as they are an integral part of our Services.

• To market, promote, and support engagement with the Services:

• We may use your contact information and information about how you use the Services to send promotional communications that may be of specific interest to you, including by email. These communications are aimed at driving engagement and maximizing what you get out of the Services, including information about new features, products and services offered by us or our selected partners, survey and beta testing requests, and articles we think may be of interest to you. You can control whether you receive these communications within the communication itself or in your account settings.

• For customer support: We use your information to resolve technical issues you encounter, to respond to your requests for assistance, to analyze crash information, and to repair and improve the Services.
• To comply with law. We use your personal information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal processes, such as to respond to subpoenas, investigations, or requests from government authorities and to defend and enforce legal claims as may be necessary.
• For compliance, fraud prevention, and safety. We may use your personal information and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to (a) protect our, your or others' rights, privacy, safety, or property (including by making and defending legal claims); (b) audit our internal processes for compliance with legal and contractual requirements or our internal policies; (c) enforce the terms and conditions that govern the Service; and (d) protect, identify, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
• With your consent: We use information about you where you have given us consent to do so for a specific purpose not listed above.

Sharing of Personal Data

We may share your personal information with the following third parties and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection:

Service Providers. We may use other companies to perform services including, without limitation, facilitating some aspects of our Services such as sending emails, text messages, and push notifications, providing scheduling functionality and updates, and fulfilling data reporting and/or requests. These other companies may be supplied with or have access to your personal information solely to provide these services to you on our behalf. Such service providers shall be bound by appropriate confidentiality and security obligations, which may include, as applicable, business associate contract obligations.

• To deliver AI-powered functionality, we transmit the information needed for the feature you use to these AI service providers:

• Anthropic's API, to generate AI coach replies using your messages and relevant health context
• The Lovable AI Gateway and the model providers it routes to, to process requested features such as lab extraction, meal analysis, voice transcription, and progress summaries

Business Partners. When you make purchases or engage in promotions offered through our Services, we may share personal information with the businesses with which we partner to offer you those products, services, and promotions. When you accept a particular business partner's offer, you authorize us to provide your information to that business partner.

Security and Retention

The security of your data is of utmost importance to us. We maintain appropriate security procedures and technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, disclosure, alteration, or use. We have put in place procedures to deal with any suspected information breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Your personal data will be generally retained as long as necessary to fulfill the purposes for which we collected the personal data. Once you have closed your account or otherwise ended your relationship with us, we may retain your personal data in our systems and records to comply with applicable legal, tax, or accounting requirements. When we have no ongoing legitimate business need nor lawful legal ground to process your personal data, we will delete, anonymize, or aggregate it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible. If you want to know more about retention periods applicable to your particular circumstance, please contact us using the details provided in the Contact Information section below.

Security of Health Information. Though the Company is not a covered entity or business associate under the Health Insurance Portability and Accountability Act (HIPAA), and does not generate, process, store, or collect protected health information (PHI) as defined by HIPAA, the protection of health information is core to our values. We use a HIPAA-informed data security approach, in which we align our data security practices with HIPAA security standards where commercially feasible. This includes:

• Collecting, using, and sharing the minimum amount of health information necessary to provide the Services;
• Aggregating and deidentifying health information when it is transmitted, unless otherwise required to provide the Services;
• Prohibiting the sale or commercialization of any health information you provide through the Services;
• Prohibiting targeted marketing based on health information you provide, outside of the terms of this Policy and the Terms of Use;
• Restricting access to health information you provide to us to a need-to-know basis, consistent with the terms of this Policy;
• Promptly notifying you, and requiring our service providers to promptly notify us, of any confirmed data security breaches;
• Contractually requiring our service providers with access to health information to use HIPAA-compatible privacy and security protocols; and
• Regularly auditing and monitoring our data use practices and procedures, to ensure security protocols and safeguards are working as intended.

Your health information will otherwise be treated consistent with applicable laws.

Children's Privacy

Our Sites and Services are not directed to children under the age of 18 and we do not knowingly enroll or collect information directly from children. If we determine that you are under the age of 18, we reserve the right to terminate your account without advance notice to you. If you are a parent or guardian of a minor child and believe that the child has disclosed online personal data to us, please contact us using the details provided in the Contact Information section below.

Telephone Consumer Protection Act

Where you provide a telephone number and consent to receive calls or text messages from us, we may contact you for transactional, service-related, or, with your express written consent, marketing purposes consistent with the Telephone Consumer Protection Act (TCPA) and applicable state law. Message and data rates may apply. You can opt out at any time by replying STOP to any text message or contacting us using the details in the Contact Information section below.

Supplemental Terms for California Residents

This Privacy Policy describes the personal information we collect or process about California residents in connection with the Site or the Services, how we use, share, and protect that personal information, and what your rights are concerning personal information that we collect or process.

In this section, "personal information" has the same meaning as under the California Consumer Privacy Act (CCPA), California Civil Code Section 1798.83: information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information does not include information that has been de-identified or aggregated or information that is considered "PHI" under HIPAA or medical information protected under California's Medical Information Act.

Personal Information We Collect and Share, and For What Purpose: In the past 12 months, we have collected and shared personal information from visitors in the following circumstances when they interact with the Site or the Services, as described in detail above:

• Information that you provide to us
• Information we obtain from other third parties
• Automatic Data Collection
• Cookies and other technologies

As described in detail above, we use your personal information for a variety of purposes to operate, assess activity on, and improve the performance of the Services, including the following:

• To provide the Services and personalize your experience
• For research, development, and improvement of the Services
• To communicate with you about the Services
• To market, promote, and support engagement with the Services
• For customer support
• For safety and security
• To protect our legitimate business interests and legal rights

The Company uses a limited number of third-party service providers to assist us in processing data for certain purposes. These third-party providers help support certain application features, perform database monitoring and other technical operations, assist with the transmission of data, and provide data storage services. These third parties may process or store personal data while providing their services. The Company maintains contracts with these third parties restricting their access, use and disclosure of personal data in compliance with our legal obligations, and the Company remains liable if they fail to meet those obligations. Except as described in detail above, we will not share information about you with third parties without your consent.

We do not share your personal information with third parties for third party marketing purposes.

Your Rights as a California Resident: Under California law, users who are California residents have specific rights regarding their personal information. These rights are subject to certain exceptions described below. When required, we will respond to most requests within 45 days unless it is reasonably necessary to extend the response time.

Right to Disclosure of Information: You have the right to request that we disclose certain information regarding our practices with respect to personal information. If you submit a valid and verifiable request and we confirm your identity and/or authority to make the request, we will disclose to you any of the following at your direction:

• The categories of personal information we have collected about you in the last 12 months.
• The categories of sources for the personal information we have collected about you in the last 12 months.
• Our business or commercial purpose for collecting that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you.
• If we disclosed your personal information to a third party for a business purpose, a list of the personal information types that each category of recipient received.

Right to Delete Personal Information: You have the right to request that we delete any of your personal information collected from you and retained, subject to certain exceptions. Upon receiving a verified request to delete your personal information, we will do so unless otherwise authorized by law.

How to Exercise these Rights: You may submit a verifiable consumer request to us for disclosure or deletion of personal information by emailing us. We will respond to verifiable requests for disclosure or deletion of personal information free of charge, within 10 days of receipt.

In order to protect your privacy and the security of your information, we verify consumer requests by matching personal information that you provide with information in our possession, in order to confirm your identity. Any additional information you provide will be used only to verify your identity and not for any other purpose.

You may designate an authorized agent to make requests on your behalf. You must provide an authorized agent written permission to submit a request on your behalf, and we may require that you verify your identity directly with us. Alternatively, an authorized agent that has been provided power of attorney under Probate Code sections 4000-4465 may submit a request on your behalf.

Right to Opt Out of Sale of Your Personal Information: We do not sell your personal information.

Right to Non-Discrimination: You have the right not to be discriminated against for the exercise of your California privacy rights described above.

Contact Information

For questions relating to this Privacy Policy, please contact hello@reverseagemethod.com, or write to:

Reverse Age Method LLC
2010 NW 16th Ave
Portland, OR 97209

See also our Terms of Use.