Privacy Policy

How Longlivety collects, uses, and protects information about its users. This document is compliant with the Law of the Republic of Uzbekistan "On Personal Data" No. ZRU-547 dated 02.07.2019 and is aligned with international data protection standards (GDPR).

This policy is an integral part of the Terms of Service. By using longlivety.ru, the pwa.longlivety.pro application, or related Longlivety products, you confirm that you have read and agree to the terms of this Policy.

Who we are — the data controller

Within the Longlivety service, we act as the operator of personal data within the meaning of the Uzbekistan Personal Data Law and as the data controller within the meaning of the GDPR.

What data we collect

2.1. Data on your device

Biomarkers, lab results, supplement protocols, and symptom logs are stored exclusively on your device in an encrypted local database (SQLCipher, AES-256). This data is never transmitted and never stored on our servers as discrete fields or structures.

2.2. AI conversation data

When you query the AI team, the text of your request may contain personal context: biomarker values, supplement dosages, well-being dynamics. This context is necessary to provide a relevant response and is transmitted to the inference network as part of the request text. Network nodes do not retain requests after generating the response.

2.3. Account data

• Email address — for sign-in and communication
• Name or nickname — optional, at your choice
• Time zone and interface language — for correct Service operation

2.4. Payment data

Payments are processed by payment service providers (Stripe and similar). We do not store card numbers, CVV, or other payment details. We only receive transaction status, payer identifier, and amount.

2.5. Technical data

• IP address, browser type, operating system
• Request time and URL (access logs)
• Cookies for session maintenance

Purposes and legal basis

We process your personal data on the following legal grounds (Art. 6 GDPR; Art. 6, 9 Uzbekistan Personal Data Law):

• Performance of a contract — processing of email, name, conversation history, and payments is necessary to provide the Service.
• Legitimate interest — improving AI response quality based on anonymized aggregated analytics, ensuring Service security, protection against abuse.
• Consent — marketing communications and analytics cookies are processed only with your explicit consent. Consent can be withdrawn at any time.
• Legal obligation — retention of payment and tax records in accordance with the legislation of the Republic of Uzbekistan.

Who we share data with

We do not sell and do not transfer your personal data to third parties for commercial purposes. Transfer is possible only in the following cases:

• Payment processors (Stripe and similar) — for processing transactions. These companies act as independent data controllers for payment information.
• Inference network nodes — Longlivety uses a distributed network for AI request processing. Requests are transmitted in real time and not retained by nodes after the response is generated. Nodes are participants of a decentralized network.
• Government authorities — only upon an official and substantiated request in cases expressly provided for by law.
• Service providers (hosting, CDN, email) — under confidentiality agreements and only to the extent necessary to provide the service.

Cross-border data transfers

Part of the Service infrastructure (payment processors, CDN servers, email services) is located outside the Republic of Uzbekistan. We transfer data only to countries with an adequate level of personal data protection or under Standard Contractual Clauses (Art. 46 GDPR).

By using the Service, you consent to the cross-border transfer of personal data in accordance with Article 25 of the Uzbekistan Personal Data Law.

Retention periods

• On-device data — until you manually delete it or uninstall the application. We do not have access to this data.
• Account data — for the duration of the account plus 12 months after closure (for dispute resolution).
• Server-side conversation history — up to 30 days by default; you can delete it at any time via settings.
• Payment and tax records — 5 years in accordance with the tax legislation of the Republic of Uzbekistan.
• Session cookies — until the browser is closed; functional cookies — up to 12 months or until consent is withdrawn.
• Access logs — 90 days for Service security.

Your rights

Under the Uzbekistan Personal Data Law and international standards (GDPR), you have the following rights:

• Access — confirm whether your data is being processed and obtain a copy (Art. 17 UZ Law; Art. 15 GDPR).
• Rectification — request correction of inaccurate or incomplete data (Art. 18 UZ Law; Art. 16 GDPR).
• Erasure — request deletion of your data, the right to be forgotten (Art. 19 UZ Law; Art. 17 GDPR).
• Restriction of processing — suspend processing pending dispute resolution (Art. 18 GDPR).
• Portability — obtain a copy of your data in a machine-readable format (Art. 20 GDPR).
• Objection — object to processing based on legitimate interest (Art. 21 GDPR).
• Withdrawal of consent — withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Complaint — file a complaint with the State Personalization Center of the Republic of Uzbekistan or another authorized supervisory authority.

To exercise any of these rights, write to support@longlivety.pro. We will respond within 30 calendar days; for urgent requests — within 7 days (Art. 22 UZ Law).

Security measures

We implement the following technical and organizational protective measures:

• On-device encryption — SQLCipher with AES-256 key
• Encryption in transit — TLS 1.3 for all connections
• Server-side encryption — AES-256 for sensitive fields
• Data minimization — we collect only what is necessary to provide the service
• Regular security audits and key rotation
• Employee access to data — strictly on a need-to-know basis and with logging

Important for the beta version: at the current stage of service development, personal context (biomarkers, dosages) is transmitted to the inference network as text in the request body. After integration of an on-device first layer of the neural network (planned for upcoming versions), only numerical activations without the original text will leave the device — this is an architectural privacy upgrade we are committed to.

Children's data

The Service is intended for persons over 18 years of age. We do not knowingly collect data from minors. If you become aware that a minor has provided us with personal data, please contact us — we will delete this data.

Cookies and similar technologies

The site uses the following types of cookies:

• Strictly necessary — sign-in session, interface settings. These cookies operate without your consent because the Service cannot function without them.
• Functional — remembering language and interface preferences.
• Analytics — anonymized usage analytics. Activated only after your explicit consent.
• Marketing — tracking advertising campaign effectiveness. Activated only after your explicit consent.

You can withdraw consent for analytics and marketing cookies in your browser settings or via the application interface.

Policy updates

We may update this Policy. We will notify you of material changes by email and through the application interface at least 14 days before a new version takes effect. For non-material changes (typos, clarifications without changing meaning), we simply publish the new version.

The current version is always available at: longlivety.ru/legal/privacy-en.html

Data protection contacts

For any questions regarding personal data protection, exercising your rights, or filing a complaint, contact us:

If your personal data rights are violated, you have the right to file a complaint with the State Personalization Center of the Republic of Uzbekistan — the authorized body in the field of personal data protection.

This document is a legally binding agreement. In case of any discrepancies between the Russian version and the English version, the Russian version shall prevail as the primary language of the agreement in the jurisdiction of the Republic of Uzbekistan.