Privacy Policy

1. Summary and scope

This policy explains how LIFE OS, Inc. collects, uses, and shares information when you use mylifeos.com, the LIFE OS application, and related services. Where LIFE OS handles protected health information on behalf of a covered entity, that information is governed by our business associate agreement with that entity and by our HIPAA Notice, which controls in the event of a conflict with this policy.

2. Information we collect

You give us

• Account details such as name, email address, date of birth, and password.
• Health information you enter, including medications, supplements, conditions, and history.
• Order and billing details when you purchase through LIFE Market. Card data is processed by our payment processor and is not stored by us.
• Messages you send us through forms or support.

Connected sources give us

• Wearable and device data you authorize, such as sleep, heart rate, activity, recovery, and glucose.
• Laboratory results from panels you order or authorize us to receive.
• Prescription and fulfillment records tied to orders you place.
• Records shared by a clinician or clinic you have authorized.

We collect automatically

• Device, browser, and approximate location derived from IP address.
• Usage data such as pages viewed and features used, for reliability and product improvement.

3. How we use information

• To build and maintain your health record and calculate your LIFE Score.
• To operate Ellen, which reads your record to explain changes and surface patterns.
• To fulfill orders, including routing prescriptions to a licensed clinician for evaluation and to a licensed pharmacy for dispensing.
• To provide support, secure the service, detect fraud, and meet legal obligations.
• To improve the platform. Where we use data to improve models or generate insights beyond your own account, it is de-identified.
• For research, only where you have separately opted in, and only in de-identified form under our IRB approved framework.

4. When we share information

We do not sell personal information and we do not share identifiable health information for advertising. We share information in these situations only:

• With clinicians you authorize. You control which clinician or clinic can see your record and you can revoke that access.
• With service providers who process data on our behalf under contract, including hosting, data normalization, payment processing, laboratory services, and pharmacy fulfillment. Providers that touch protected health information are bound by business associate agreements.
• For legal reasons, when required by law, subpoena, or to protect rights and safety.
• In a business transfer, if LIFE OS is involved in a merger or acquisition. You will be notified and this policy will continue to apply until you are given notice of any change.

5. Your choices and rights

• Access and export. You can request a copy of your record in a portable format.
• Correction. You can correct inaccurate information in your account.
• Deletion. You can delete your account and record. Some records must be retained where law requires it, including prescription and dispensing records.
• Disconnect a source. You can revoke any device, lab, or clinician connection at any time.
• Research. Research participation is opt in and revocable. Withdrawing stops future use; data already analyzed in a completed study cannot be withdrawn from that study.
• Marketing. Every marketing email includes an unsubscribe link. Service and safety messages are not marketing.

Submit any request through the contact page and select Privacy request. We verify identity before acting on a request.

6. Security

We encrypt data in transit and at rest, scope access by role, and log administrative access. No system is perfectly secure, and we will notify you and applicable regulators if a breach affecting your information occurs, in the manner and time frame required by law.

7. Retention

We keep your record for as long as your account is active and for as long afterward as is necessary to meet legal, regulatory, and accounting obligations. Prescription and dispensing records are retained for the period required by applicable pharmacy law. De-identified data may be retained indefinitely.

8. State privacy rights

Residents of California, Colorado, Connecticut, Virginia, Washington, and other states with comprehensive privacy laws have rights to access, correct, delete, and port personal information, to opt out of sale or targeted advertising, and to appeal a denied request. We do not sell personal information or use it for targeted advertising. Health data is additionally protected under state consumer health data laws, including the Washington My Health My Data Act, and we obtain separate consent where those laws require it.

9. Children

LIFE OS is intended for adults 18 and over. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it.

10. Changes and contact

We will post any change to this policy on this page and update the effective date. Material changes will be communicated directly. Reach us through the contact page or by mail at LIFE OS, Inc., 676 W Pullman Rd #326, Moscow, ID 83843.