Privacy policy

Last updated: July 31, 2026

Lifespan Group LLC (“Lifespan,” “we,” “us,” or “our”) respects your privacy. This Privacy and Cookie Notice explains how we collect, use, disclose, and protect personal information when you visit Lifespan.com, create, activate, or sign in to an account, subscribe through a form that may create a free Explorer account, purchase or manage a paid membership, read or watch our content, receive our communications, contact us, or otherwise use the services that link to this Notice (collectively, the “Services”).

Lifespan Group LLC is the business responsible for the personal information described in this Notice and, where applicable, the controller of that information.

This Notice does not apply to a third-party website or service that has its own privacy notice. Our separate Consumer Health Data Privacy Policy explains our practices for information that is regulated as “consumer health data” under applicable state consumer health privacy laws.

1. Information We Collect

The information we collect depends on how you interact with the Services.

Information you provide

We may collect:

Account and contact information, such as your name, email address, account identifiers, authentication information, Explorer or paid Member status, the method or source by which an account was created or activated (for example, account registration, sign-in, or a disclosed newsletter subscription), and communication preferences.
Membership and transaction information, such as Explorer status and, for paid Members, the selected plan, price, coupon code, subscription status, billing dates, renewal and cancellation history, transaction identifiers, and limited payment information provided to us by our payment providers. Payment card numbers are generally collected and processed by Shopify, its payment providers, Recharge, or another payment processor, rather than stored directly by Lifespan.
Optional profile information, including your date of birth and gender if you choose to provide them. These fields are optional. We use them only to improve your requested experience. We do not use them for targeted advertising, sell them, or use them to make decisions about your eligibility for insurance, employment, credit, housing, health care, or another similarly significant service.
Communications and submissions, including information you include in a Contact Us or support request, feedback, survey response, ask-me-anything submission, contributor inquiry, or other message to us. Please do not provide medical records or other sensitive information that we have not requested.
Delivery information, such as a recipient name and postal address, if you choose to provide it so that we can send a commemorative item to Founder Members.
Email preferences, consent records, and engagement, such as whether and where you subscribed, the choice and notice presented, relevant submission or confirmation timestamps, whether you unsubscribed, and whether a message was delivered, opened, or selected, to the extent permitted by applicable law and your settings.

Information collected automatically

When you use the Services, we and the companies that help us operate them may collect:

Internet Protocol address, browser type, operating system, device type, language, and similar technical information.
Cookie identifiers, device identifiers, session identifiers, and authentication or security signals.
The pages, articles, searches, videos, magazine content, and features you access; the date and time of access; referring and exit pages; links selected; approximate location derived from an IP address; and similar usage information.
Account and access-state information, such as whether you are signed in and whether content is available under an Explorer or paid Member account.
Diagnostic, performance, error, fraud-prevention, and security information.

We do not intentionally collect precise geolocation through the Services.

Engagement with health and longevity content may be protected as consumer health data in some jurisdictions when it is linked or reasonably linkable to you. Please see our separate Consumer Health Data Privacy Policy.

Information from other sources

We may receive information from:

Shopify, Recharge, payment providers, and other companies involved in checkout, payment, subscriptions, account administration, and fraud prevention.
Service providers that help us deliver email, support, analytics, security, video, magazine content, and other parts of the Services.
A person acting at your direction, such as someone who gives you a coupon code or contacts us on your behalf.
Public sources, but only where collection and use are permitted by law.

We do not purchase personal information from data brokers to create advertising profiles.

2. How We Use Personal Information

We may use personal information to:

Provide, maintain, and improve the Services.
Create, activate, authenticate, and administer free Explorer accounts - including when a disclosed newsletter subscription creates an Explorer account - and provide the appropriate content access.
Process membership purchases, recurring payments, renewals, plan changes, coupons, cancellations, and refunds.
Send transaction confirmations, account messages, security notices, renewal notices, and other service communications.
Provide customer support and respond to questions, requests, and feedback.
Deliver newsletters and other marketing communications you specifically request, record and manage your communication choices, and honor unsubscribe requests.
Understand how people use the Services, measure content and feature performance, identify technical problems, and improve the design, reliability, and usefulness of the Services.
Protect accounts and the Services; prevent fraud, abuse, and security incidents; and enforce our Terms.
Maintain business, accounting, tax, consent, and compliance records.
Comply with law, respond to lawful process, protect rights and safety, and establish, exercise, or defend legal claims.
Carry out a corporate transaction such as a financing, merger, acquisition, reorganization, or sale of assets, subject to applicable law.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it to serve targeted advertising. We do not use identifiable engagement with health content to create advertising audiences.

If these practices change, we will update this Notice and provide any notice, choice, or consent required by law before using personal information for a materially different purpose.

3. Legal Bases for Processing

If data-protection law in the European Economic Area (“EEA”), United Kingdom, Switzerland, or another jurisdiction requires us to identify a legal basis, we rely on the following, as applicable:

Contract. We process information as necessary to create and administer an Explorer account or other service you request, including an Explorer account created through a newsletter form that discloses that result, process payments for a paid membership, manage access, and provide related customer service.
Legitimate interests. We process information as reasonably necessary to operate and improve the Services, understand service performance, communicate with users, secure the Services, prevent fraud, enforce our terms, and protect our legal rights. We consider the effect on your rights before relying on this basis.
Consent. We rely on consent where required, including for certain nonessential cookies and similar technologies, newsletter and other marketing communications, optional processing, and processing that reveals health or other specially protected information. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
Legal obligation. We process information to satisfy applicable accounting, tax, consumer-protection, privacy, security, and other legal requirements and to respond to valid legal process.

Where local law recognizes another lawful ground, we may rely on that ground as permitted by law.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described in this Notice:

Companies that operate the Services for us

These companies may process personal information under contracts or other terms that govern their use of the information. They include:

Shopify, for the website storefront, checkout, commerce, customer-account, transaction, and related infrastructure.
Recharge, for recurring membership billing and subscription management.
Payment providers, for payment authorization, processing, fraud screening, disputes, and refunds.
Klaviyo, for email delivery, preference management, and permitted email measurement.
Gorgias, for customer support and communications.
Cloudflare and Turnstile, for content delivery, network performance, bot detection, fraud prevention, and security.
Google Analytics 4, for consented site and content analytics. We do not use Google Analytics data for targeted advertising.
Vimeo and YouTube, for video hosting and playback.
Issuu, for magazine viewing and related functionality.
Other hosting, information-technology, security, professional, and operational providers that support the Services.

We require service providers to handle personal information only for authorized purposes and with appropriate protections where applicable. Some embedded content providers may process information under their own privacy notices when you choose to load or interact with their services. We use consent and privacy controls where required by law.

Other permitted disclosures

We may also disclose information:

To professional advisers such as attorneys, accountants, auditors, insurers, and consultants who need it to provide services to us.
To government authorities, courts, law enforcement, regulators, or other parties when we reasonably believe disclosure is required by law or is necessary to protect rights, safety, and security.
In connection with a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable confidentiality and legal requirements.
To another person or organization at your direction or with your consent.

We may disclose aggregated or deidentified information that cannot reasonably be linked to an individual or device. Where law requires it, we maintain deidentified information in deidentified form, do not attempt to reidentify it, and require recipients to do the same.

5. Cookies and Similar Technologies

Cookies are small files stored on a browser or device. We and the companies that support the Services may also use pixels, scripts, local storage, software development kits, and similar technologies.

We use the following categories:

Strictly necessary technologies support checkout, authentication, account access, subscription management, security, fraud prevention, network delivery, load balancing, and your privacy choices. The Services may not function properly without them.
Functional technologies remember selections and support features you request, including video and magazine content.
Analytics technologies help us understand visits, content engagement, errors, and performance so we can improve the Services. Where required, we use them only after you consent.
Email measurement technologies may tell us whether a message was delivered, opened, or selected, where permitted by law. You can unsubscribe from marketing communications at any time.

We do not currently use advertising cookies or pixels to build cross-site advertising audiences or deliver targeted advertising.

Shopify, Recharge, Cloudflare, Google Analytics 4, Vimeo, YouTube, Issuu, Klaviyo, and other providers may place or access technologies in connection with their respective functions. The specific technologies, providers, purposes, and durations in use may change as the Services evolve. The Cookie Settings tool should display the current nonessential technologies available on the version of the Services you use.

Your cookie choices

Where required by law, nonessential technologies will not be activated unless you consent. You can accept or reject categories of nonessential technologies and later change your selection through the Cookie Settings link in the website footer. Withdrawing consent does not affect processing that occurred before withdrawal.

You can also use browser settings to delete or block cookies. Blocking strictly necessary technologies may prevent checkout, login, video, magazine, or other requested functions from working.

Some browsers offer a “Do Not Track” setting, but there is no uniform industry standard for responding to it, and the Services do not respond to Do Not Track signals. Where required, we recognize legally valid browser-based opt-out preference signals, such as Global Privacy Control, as a request to opt out of the sale or sharing of personal information. We do not currently sell personal information or share it for cross-context behavioral advertising.

Embedded video or magazine providers may receive technical and interaction information when their content loads. Where applicable law requires consent, we will not activate that nonessential collection until the required choice has been made.

6. Membership and Marketing Communications

We may send communications necessary to create, authenticate, secure, and administer an Explorer or paid Member account, such as authentication codes, account confirmations, purchase confirmations, renewal and cancellation notices, security notices, and important changes to the Services. These service communications may continue even if you opt out of marketing.

Creating, activating, holding, or signing in to an Explorer account does not by itself authorize marketing. We send newsletters and other marketing messages only as permitted by law and consistently with the separate choice you make. You may unsubscribe using the link in a message or available settings. Unsubscribing stops future marketing covered by that choice but does not close your Explorer account; account closure is a separate action. We may keep a minimal suppression record so that we can honor the request and avoid adding you back unintentionally.

7. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Notice, including to provide the Services, maintain security and business records, comply with law, resolve disputes, and enforce agreements. The period depends on the type of information and why we collected it. For example:

Account and profile information is generally retained while the account is active and for a reasonable period afterward to complete deletion, resolve issues, prevent fraud, and satisfy legal obligations.
Transaction, subscription, consent, tax, accounting, and dispute records are retained for the periods required or permitted by applicable law.
Support and other communications are retained for as long as needed to respond, maintain an appropriate record, improve support, and protect legal rights.
Analytics information is retained according to our configured analytics settings and is aggregated or deleted when it is no longer needed.
Cookie retention depends on the cookie and is reflected, where available, in Cookie Settings.

Deletion from encrypted backups may occur on a delayed cycle, and information may be retained where law permits or requires an exception to deletion. We will not restore deleted information from a backup for ordinary business use.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, taking into account its nature and the risks involved. These measures include limiting access, using service providers with appropriate safeguards, protecting information in transit where appropriate, and maintaining security and incident-response processes.

No method of storage or transmission is completely secure. You are responsible for maintaining control of your email account, devices, and authentication messages and for notifying us if you believe your account has been compromised.

9. International Processing and Transfers

Lifespan is based in the United States, and we and our service providers may process personal information in the United States and other countries. These countries may have privacy laws that differ from those where you live.

Where law requires a transfer safeguard, we use a legally recognized mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the United Kingdom International Data Transfer Addendum or Agreement, or another authorized mechanism. You may use our Contact Us for information about applicable safeguards.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

Confirm whether we process your personal information and access or receive a copy of it.
Correct inaccurate personal information.
Delete personal information.
Receive certain information in a portable format.
Restrict or object to certain processing.
Withdraw consent at any time.
Opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling.
Appeal our refusal to act on a request.
Lodge a complaint with your local privacy or data-protection regulator.
Receive equal service and pricing without unlawful discrimination for exercising a privacy right.

You can submit a request through the Contact Us by selecting the privacy-request option, or email privacy@lifespan.com. Please describe the right you wish to exercise and the account or email address involved. We may ask for information reasonably necessary to verify your identity and authority. We will use verification information only for that purpose.

You may use an authorized agent where applicable. We may request proof of the agent’s authority and may need to verify your identity directly. You do not need to create a new account to make a request, although we may ask you to use an existing account when appropriate.

We will respond within the period required by applicable law. We may deny or limit a request where an exception applies, such as when information must be retained for security, fraud prevention, legal compliance, transactions, or legal claims. If we deny a request, we will explain the basis and any available appeal process.

You may update certain account information directly in your profile. To withdraw consent to nonessential cookies, use Cookie Settings. To unsubscribe from marketing, use the link in the message.

EEA, United Kingdom, and Switzerland

In addition to the rights above, you may object to processing based on legitimate interests, request restriction, and lodge a complaint with the data-protection authority where you live or work or where you believe a violation occurred. Where we rely on consent, withdrawal is effective for future processing. Where we rely on contract or legal obligation, not providing necessary information may prevent us from providing the requested membership or service.

California and other United States residents

Subject to applicable thresholds and exceptions, state privacy laws may provide rights to know, access, correct, delete, and obtain a portable copy of personal information and to opt out of sale, targeted advertising, sharing for cross-context behavioral advertising, or certain profiling.

During the 12 months before this Notice's last-updated date, the categories collected through Lifespan's pre-launch services included identifiers and contact information; Internet or other electronic activity; approximate location derived from an IP address; communications and user-submitted content; and account or security information where applicable. We collected these categories from the sources described in Section 1, used them for the purposes described in Section 2, and disclosed them to the applicable recipient categories described in Section 4.

During that period, we did not sell personal information or share it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of people under 18. We do not offer a financial incentive in exchange for personal information.

For operational business purposes during that period, we disclosed the applicable pre-launch categories described above to service providers, professional advisers, and legal recipients described in Section 4. After the Phase 1 launch, we will also collect and disclose customer-record information, commercial and transaction information, and account credentials as described prospectively in Sections 1 and 4. We will update this historical disclosure as required after those launch practices have been in effect.

Our Your Privacy Choices link provides access to applicable opt-out and privacy controls. Because we do not currently sell personal information or share it for cross-context behavioral advertising, submitting an opt-out will not change those practices, but we will record and honor the request as required.

Consumer health data rights are described separately in our Consumer Health Data Privacy Policy.

Canada, Australia, and other jurisdictions

You may have rights to access and correct personal information, withdraw consent subject to legal or contractual limits, and complain to Lifespan and then to the privacy regulator in your jurisdiction. We will address requests and complaints in accordance with applicable local law.

11. Age Requirement

The Services are intended for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information, please use our Contact Us so that we can investigate and take appropriate action.

12. Consumer Health Data Privacy Policy

This section is our Consumer Health Data Privacy Policy. It is required by the Washington My Health My Data Act, Nevada’s consumer health data law, and substantially similar laws, and it is published here as part of this Notice. It can be linked directly at lifespan.com/policies/privacy-policy#consumer-health-data.

This Consumer Health Data Privacy Policy applies only to “consumer health data” regulated by the Washington My Health My Data Act, Nevada’s consumer health data law, and substantially similar laws that require this separate policy. It describes the consumer health data practices of Lifespan Group LLC (“Lifespan,” “we,” “us,” or “our”) in connection with Lifespan.com and the services that link to this Policy.

“Consumer health data” generally means personal information that is linked or reasonably linkable to a consumer and identifies, or is used to identify, the consumer’s past, present, or future physical or mental health status. Depending on applicable law, this can include data identifying a person seeking or trying to learn about health-care services and health information inferred or derived from other information.

Categories of Consumer Health Data We Collect and How We Use Them

Depending on how you use Lifespan, we may collect the following categories:

Health-content engagement

This may include the health or longevity articles, searches, videos, magazine content, downloads, links, or other topics you access or interact with; associated dates, times, and actions; and an account, cookie, IP address, device identifier, or other identifier that makes the activity reasonably linkable to you.

We use this information to:

Deliver content and features you request.
Authenticate an account and provide the correct level of access.
Remember a requested interaction or playback state.
Maintain, troubleshoot, secure, and protect the service.
Measure and improve content and service performance, using consent where required and using aggregated or deidentified information where reasonably possible.

Optional profile information associated with health activity

This may include an optional date of birth, age derived from that date, and gender, if you choose to provide them, when the information is treated as consumer health data or is associated with other consumer health data.

We use this information only to improve your requested experience. Providing it is optional. We do not use it to determine or infer a diagnosis, medical condition, treatment need, reproductive status, gender-affirming care need, or other health status.

Information you voluntarily submit

This may include health-related information you choose to include in a support or Contact Us request, feedback, survey, ask-me-anything submission, or other communication.

We use it to respond to your request, provide the feature or communication you requested, moderate a submission where applicable, protect the service, and maintain an appropriate record of the interaction.

Device and usage data associated with health content

This may include an IP address, cookie or device identifier, browser and device information, approximate region derived from an IP address, authentication or access state, referring page, and diagnostic or security data when associated with health-content activity.

We use it to deliver and secure the service, prevent fraud and abuse, diagnose technical problems, and, with consent where required, understand service performance.

Health inferences

We do not create or collect inferred diagnoses, health conditions, treatment needs, reproductive or sexual health status, gender-affirming care status, or other individualized health profiles from your use of Lifespan. We do not use consumer health data to make decisions about insurance, employment, credit, housing, health care, or another similarly significant service.

Sources of Consumer Health Data

We collect consumer health data from:

You, when you choose content, conduct a search, provide optional profile information, submit information, or otherwise interact with Lifespan.
Your browser or device, through site requests, cookies, logs, security tools, analytics technologies, and interactions with content, subject to applicable consent requirements.
Processors that operate Lifespan for us, when they return account, subscription, support, media, security, or analytics information generated through your use of the service.

We do not buy consumer health data from data brokers.

Purposes and Manner of Processing

We collect and process consumer health data only:

To the extent necessary to provide a product, content item, feature, account, membership, support response, or other service you request; or
With the affirmative, voluntary, specific consent required by applicable law.

We process consumer health data by collecting it through requested interactions and permitted technologies; associating it with an account or identifier when needed to provide or secure the service; using it for the disclosed purposes; storing it in systems operated by us or our processors; and deleting or deidentifying it when appropriate.

Consent to collect consumer health data is separate from acceptance of general Terms where applicable law requires separate consent. If we seek consent to share consumer health data, that request will be separate and distinct from consent to collect it.

We do not use consumer health data for targeted advertising. We do not use it to create advertising audiences. We do not sell consumer health data.

Categories of Consumer Health Data We Share

We do not share consumer health data with a third party or affiliate for its own marketing, advertising, profiling, or other independent purpose.

To provide requested video and magazine features, device identifiers and content-interaction information may be disclosed to video or digital-publication providers when you choose to activate their content. The relevant categories are:

Device and online identifiers.
The video, magazine, page, or content item requested.
Playback, viewing, navigation, and similar interaction data.
Technical, diagnostic, and approximate-location information.

Where such a disclosure constitutes regulated sharing of consumer health data, we will request the separate affirmative consent required by applicable law before the disclosure occurs.

We may also disclose consumer health data where required or expressly authorized by law. We do not have affiliates with which we share consumer health data.

Categories of Third Parties and Processors

Third-party content providers

The categories of third parties with which the data described in Section 4 may be shared are video-hosting and digital-publication providers. The providers currently used are Vimeo, YouTube, and Issuu. Any regulated sharing occurs only as described above and subject to required consent.

Processors acting on our behalf

The following categories of processors may process consumer health data solely to the extent that the information is present in the system or service they provide:

Shopify, for the storefront, account, commerce, checkout, transaction, and related infrastructure.
Recharge, for subscription billing and membership management.
Payment providers, for payment, fraud screening, disputes, and refunds.
Cloudflare and Turnstile, for network delivery, performance, bot detection, fraud prevention, and security.
Google Analytics 4, for consented analytics and service measurement.
Klaviyo, if consumer health data is included in an email preference or communication record.
Gorgias, if consumer health data is included in a support or Contact Us communication.
Vimeo, YouTube, and Issuu, to the extent they act on our behalf to provide requested video or magazine functionality.
Hosting, data-storage, security, and information-technology providers needed to operate Lifespan.

Processors may access consumer health data only where reasonably necessary to provide the requested service or carry out the disclosed purpose, and their processing must be governed by applicable contractual and legal restrictions.

Collection Over Time and Across Websites

Lifespan does not authorize a third party to collect consumer health data over time and across unaffiliated websites or online services for targeted advertising.

Embedded-media providers may independently collect device and usage information over time and across websites or online services when their content is activated, as described in their own privacy notices. Where that activity would constitute regulated collection or sharing of consumer health data, Lifespan will not activate the technology until the consent required by applicable law has been obtained.

Your Consumer Health Data Rights

Subject to applicable law, you may:

Confirm whether we collect, share, or sell consumer health data concerning you.
Access consumer health data concerning you.
Obtain a list of the third parties and affiliates, if any, with which we shared or to which we sold your consumer health data, together with contact information where required.
Withdraw consent and ask us to stop future collection or sharing of your consumer health data.
Delete consumer health data concerning you.
Review and request correction of consumer health data.
Appeal a refusal to act on your request.
Exercise these rights without unlawful discrimination.

We do not sell consumer health data, so a request to cease selling will confirm and preserve that status.

Reviewing or changing information

You may review or change available optional profile information through your account settings. You may request access to or correction of other consumer health data through the process below.

Withdrawing consent

You may withdraw consent to analytics or embedded-media technologies through Cookie Settings, where available. To withdraw another consumer health data consent or ask us to cease collection or sharing, submit a Consumer Health Data Request. Withdrawal applies to future collection or sharing and does not by itself delete data already collected; you may request deletion at the same time.

Submitting a request

Use the Contact Us, select the privacy-request option, and identify the request as a “Consumer Health Data Request.” You may instead email privacy@lifespan.com with that subject line.

Please identify the right you wish to exercise and the email address or account involved. We will use commercially reasonable methods to authenticate your identity and may request additional information reasonably necessary for that purpose. We will not require you to create a new account, although we may ask you to use an existing account.

We provide responses free of charge as required by law. Manifestly unfounded, excessive, or repetitive requests may be denied or subject to a reasonable fee where permitted, and we bear the burden of supporting that decision.

We will act without undue delay and within the period required by applicable law. Washington generally requires a response within 45 days after receipt, subject to one reasonably necessary 45-day extension with timely notice. Nevada generally requires a response within 45 days after authentication, subject to one reasonably necessary 45-day extension with timely notice.

For a verified deletion request, we will delete covered data from our systems and notify relevant processors, contractors, and third parties as required. Applicable law may permit delayed deletion from archived or backup systems, including up to six months under Washington law and up to two years under Nevada law.

Appeals

If we refuse to act on your request, you may appeal by using the Contact Us or emailing privacy@lifespan.com with the subject “Consumer Health Data Appeal.” Please include the decision being appealed and any information you would like us to consider.

We will respond to an appeal within the period required by applicable law. If an appeal is denied, we will explain the decision and provide the applicable attorney general’s contact information or another method to submit a complaint where required.

Changes to this consumer health data section

We will post a revised Notice with a new effective date and provide prominent notice on Lifespan.com, through an account or email, or by another appropriate method when a material change requires notice.

We will not collect, use, or share an additional category of consumer health data, add a new category of third party or affiliate with which we share it, or process it for a materially new purpose without first updating this section and obtaining the affirmative consent required by applicable law.

Consumer health data contact

Submit a Consumer Health Data Request or Appeal through the Contact Us using the privacy-request option, or contact:

Privacy Officer, Lifespan Group LLC
privacy@lifespan.com

Lifespan Group LLC
292 Newbury St, #120
Boston, MA 02115
United States

13. Changes to This Notice

We may update this Notice to reflect changes to the Services, our practices, or the law. We will post the revised Notice with a new “Last updated” date. If a change is material, we will provide additional notice or request consent where required by law.

14. Contact Us

For privacy questions, requests, or complaints, use our Contact Us and select the privacy-request option, or contact: