Privacy Policy
Last Updated: January 13, 2025
Outlive, LLC ("the Company", "we," or "us") respects privacy and is committed to protecting personal information. As a HIPAA-compliant healthcare technology company, we maintain the highest standards for protecting your health information. We will never sell your personal data or health information. This Privacy Policy (the "Policy") explains our practices for handling the information we may receive about visitors to our website, users of our mobile application, subscribers to our services, and others with whom we interact in providing our services. This Policy applies to information you provide to us through our website www.outlive.com (the "Site"), our mobile application (the "App"), when you subscribe to our services, communicate with us, and otherwise interact with us. The Policy describes the types of personal information we may receive, how we may use and disclose the information, and certain rights and options you may have regarding your information. Use of our Site and App is also subject to our Terms of Use.
1. Important Information About This Policy
While we always aim to provide complete and transparent information about how we process your personal information, we reserve the right to amend or update this Policy from time to time or to create additional policies in order to accurately reflect changed circumstances or new legal requirements. As a result, it is important that you read this Policy closely so that you are fully aware of how and why we are using your personal information.
To assist us in ensuring that we can provide the most accurate information possible, we ask that you check this Policy for updates. We also ask that where we have an ongoing relationship with you, and any of the data you have provided becomes no longer accurate, that you keep us informed of this so we can amend our records accordingly. By providing us with personal information or using our website or mobile application, you expressly consent to the information-handling practices described in this Policy. If you do not agree with this Policy, please do not use our website, mobile application, or services, or provide us with your information.
2. HIPAA Compliance and Protected Health Information
Outlive is a HIPAA-compliant healthcare technology company. We implement comprehensive administrative, physical, and technical safeguards to protect your Protected Health Information ("PHI") in accordance with the Health Insurance Portability and Accountability Act ("HIPAA") and its implementing regulations.
Protected Health Information includes any individually identifiable health information that we create, receive, maintain, or transmit electronically, including health conditions and diagnoses, treatment information, healthcare provider information, prescription and medication data, lab results and vital signs, and any other health-related information you provide through our Services.
Your HIPAA Rights. Under HIPAA, you have the right to: access and obtain a copy of your PHI; request corrections to your PHI; request restrictions on certain uses and disclosures; receive an accounting of disclosures of your PHI; request confidential communications; and file a complaint if you believe your privacy rights have been violated.
Our Safeguards. We protect your health information through: encryption of data at rest and in transit; access controls and authentication; audit logging and monitoring; regular security assessments and training; and business associate agreements with all third-party service providers who may access PHI.
3. No Doctor-Patient Relationship or Medical Advice
Use of the Site, App, services, and/or following us on social media does not establish a doctor-patient relationship. None of the information contained on the Site or App or provided in connection with our services or social media presence should be interpreted as medical advice rendered to any particular user or customer. Nor should any statement be construed to be relied upon as generally accepted medical advice or medically advisable practice or guideline. Any information we provide is for general informational purposes only and should not replace a consultation with your health care professional. Always consult an appropriate health care professional for your specific needs. In case of a medical emergency, call 911 or your local emergency services immediately.
4. Information We Receive
A. Personal Information
For the purposes of this Policy, "personal information" is any information that identifies, relates to, or can be used to contact a particular individual. The types of personal information we receive include the following categories.
Individual contact information – first name, last name, email address, billing address, mailing address, and telephone number.
Account information – username, account password, contact information, content accessed, preferences, and other information that we may request or that you may provide relating to your account.
Health information – health data you input including medical history, current health conditions, medications, allergies, vital signs, lab results, fitness and activity data, nutrition information, sleep patterns, health goals, and information synced from connected health devices and platforms.
Transactional information – details about your transactions with us, including method of payment, payments received, payment details, and transaction history.
Payment information – details of the payment card or financial account you use to pay for your subscription or other transactions with us. Note: We use secure third-party payment processors and do not store complete credit card numbers on our servers.
Marketing information – details regarding informational and promotional materials you may have requested or received from us, the services in which you are interested, your receipt of promotional communications, and information on your marketing or communication preferences.
Communication information – copies of communications and inquiries you have submitted to us, including through email, calls, in-app messages, direct messages or comments on social media, and chatbots or other features available on our Site or App.
Device and usage information – details regarding how and when you use our Site, App, and services, including the device used to connect, your IP address and device identifier, operating system, app version, the frequency and duration of your usage, the pages and features you access, what websites or search terms referred you to our Site, and information about your interaction with our Site and App.
We collect this information when you visit or navigate our Site or App, create an account, subscribe for services or to receive newsletters, fill in forms, sync connected health devices or platforms, enter into transactions with us, communicate with us (including by phone, email, or otherwise), or otherwise provide us with personal information.
Please note that we may aggregate or anonymize the foregoing types of information such that they are no longer capable of identifying you, in which case they are not considered "personal information." We may also collect information about you from third-party sources you authorize, such as healthcare providers or connected health platforms, and information about you that is publicly available.
B. Automatically Collected Usage and Device Information
Like most websites and mobile applications, our Site and App use various technologies to automatically collect information about visitors and users. Those technologies include:
Cookies. Cookies are small text files that a website transfers to a visitor's device for recordkeeping purposes. We use cookies to personalize visitors' experiences on our website, provide content that we believe may be of interest, track visitor trends and patterns, and otherwise analyze our Site traffic. For further information about cookies, including how to refuse cookies, please visit www.allaboutcookies.org. Please note that if cookies are disabled, you may not be able to enjoy certain features of our Site.
Log Files and Device Identifiers. We use log files to track actions occurring on the Site and App and collect data about visitors and users, including IP address, browser type, Internet service provider, referring/exit pages, date/time stamps, device type, operating system, and device identifiers.
Mobile Analytics. Our App may use mobile analytics software to help us understand the functionality of our App on your device. This software may record information such as how often you use the App, the events that occur within the App, aggregated usage, performance data, and where crashes occur within the App.
Analytics. Our Site and App may also use third-party analytics tools such as Google Analytics. You can find more information about how data is collected and processed in connection with the Google Analytics service at Google's privacy policy.
The information collected through these technologies may be combined with personal information or aggregated with other information on Site and App usage.
C. Information from Connected Health Devices and Platforms
With your explicit consent, we may receive health and fitness data from connected devices and platforms you authorize, including Apple Health, Google Fit, wearable fitness trackers, continuous glucose monitors, smart scales, blood pressure monitors, and other health monitoring devices. You can revoke this access at any time through your device settings or within the App.
D. Information from Social Media
If you interact with us on any social media platform: (i) depending on your social media privacy settings, the personal information that you submit on the social media platform may be read, collected, or used by us as described in this Policy, and (ii) where we respond to any interaction with you on social media, your account name/handle may be viewable by any and all members or users of our social media accounts. Social media platforms operate independently from the Company and we are not responsible for the personal information that you choose to submit or link on any social media platform. We encourage you to review the privacy policies and settings of any social media platform with which you interact to help you understand their privacy practices.
E. Information from Other Sources
With your authorization, we may obtain personal and health information about you from healthcare providers, laboratories, and other healthcare entities you designate. We may also receive information from our affiliated businesses, contractors, suppliers, and other third parties and add it to other information we have collected. We, and the third parties we engage, may combine information we collect from you over time, and across the Site and App, with information obtained from other sources. This helps us improve the information's overall accuracy and completeness, and also helps us better tailor our interactions with you.
5. How We Use Personal Information
We (or service providers acting on our behalf) may use the personal information identified above for the following purposes:
Providing our services, including personalized health insights, recommendations, and content.
Registering you as a user and providing you access to the content and benefits of your subscription.
Processing payments and managing transactions.
Providing and optimizing your experience on our Site and App and ensuring that we present our content to you in the most effective manner.
Communicating with you and responding to your inquiries.
Sending you promotional or informational communications and solicitations (with your consent where required).
Managing customer service issues.
Developing, updating, and improving our services, customer service, and user experience.
Preventing and detecting fraud, financial crime, hacking activities, security breaches, and other unlawful activities.
Enforcing our agreements with users, complying with our legal or regulatory obligations, and defending or advancing legal claims.
Notifying you about changes to our Site, App, services, or material changes to this Policy.
Performing other functions as otherwise described to you at the time of collection or to which you otherwise consent.
6. Our Marketing Efforts
We may send you direct marketing communications from time to time including news, updates, offers, and other promotions relating to our services and activities. We will only send marketing messages where the law allows us to do so and, in the event that you no longer wish to receive marketing from us, then you can always unsubscribe using the option provided in the footer of the communication you have received, through the App settings, or by contacting us using the information below.
7. Disclosure of Personal Information
WE WILL NEVER SELL YOUR PERSONAL DATA OR HEALTH INFORMATION. This is a core principle of our company.
When the information we collect about you is aggregated, anonymized, or otherwise does not identify you, we may use that information for any purpose or disclose it to third parties, to the extent permitted by applicable law.
In addition, we may disclose your information with the following types of entities:
With Your Consent. We share information when you explicitly authorize us to do so, such as connecting with healthcare providers or sharing data with family members you designate.
Service providers we use to facilitate our business operations and administration. These third parties have access to your personal information only to perform specific tasks on our behalf and are contractually obligated to protect your information. All service providers handling PHI have signed Business Associate Agreements as required by HIPAA. For example, our service providers include (i) IT and system administration providers that host our Site and App and enable user access to content, (ii) data storage providers, and (iii) vendors to facilitate payments and payment processing.
Healthcare providers you authorize to receive your health information to support your care.
Regulatory and governmental authorities, law enforcement agencies, and courts, as necessary to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful request for information, or to otherwise protect our rights.
Buyers or other successors prior to or in the event of a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as a part of bankruptcy, liquidation, or similar proceeding, where the information is among the assets transferred. We will provide notice and the opportunity to delete your data before any such transfer.
Other parties for any purpose we disclose at the time you provide the information.
8. Your Choices About Personal Information
We respect your right to make choices about the ways we collect, use, and disclose your information. We try to offer you meaningful choices regarding your personal information. Some choices you have regarding personal information include the following.
Marketing Emails – As required by applicable laws, you can opt-out of receiving promotional emails from us by clicking the "opt out" link in any such promotional emails and following the instructions provided.
Push Notifications – You can opt-out of receiving push notifications through your device settings or within the App settings.
Mobile Permissions – You can control app permissions (location, camera, health data access, notifications) through your device settings. Disabling certain permissions may limit app functionality.
Connected Health Devices – You can disconnect linked health devices and platforms at any time through the App settings or your device settings.
Cookies – Depending on your browser or device, you may have the option to set the browser to accept all cookies, reject all cookies, notify you when a cookie is set, or delete cookies. Each browser and device are different, so we recommend you evaluate the tools and settings available in your browser or device.
Google Analytics – If you would like to refrain from having your data collected by Google Analytics, Google has developed an opt-out browser add-on that you can use.
Declining to Provide Information – You can choose not to provide us with information we may request, but that may result in you being unable to use certain features of our Site or App, or initiate other transactions with us.
Account Deletion – You may request deletion of your account and associated data by contacting privacy@outlive.com or through the App settings. Certain data may be retained as required by law.
Do Not Track Mechanisms – Please note that our Site does not honor "Do Not Track" signals, and such signals will not impact the operation of this Site.
9. Links to Third-Party Websites and Services
Our Site and App may contain links to third-party websites, apps, or services. Such websites and services have separate privacy policies that you should review. We do not control these third-party websites or services and are not responsible for the content of linked websites or those companies' data-handling practices.
10. Rights Afforded California Residents
This section is included pursuant to the California Consumer Privacy Act, including as amended by the California Privacy Rights Act (collectively, the "CCPA"). This section applies to California residents ("consumers" as defined by CCPA) and explains our online and offline personal information practices when acting as a "business" under the CCPA.
A. Information We Collect and Disclose
In the past 12 months, the Company has collected the following categories of personal information from consumers: Identifiers (name, email, phone, IP address); Commercial information (transaction history); Internet or similar network activity (usage data); Health information (with consent); and Geolocation data (with consent). We disclose this information to service providers as described in Section 7.
B. Sale or Sharing of Personal Information
In the past 12 months, the Company has not "sold" any categories of personal information, as defined by the CCPA, and we will never sell your personal information. We do not share personal information for cross-context behavioral advertising purposes. The Company does not have actual knowledge of any sales or sharing of personal information regarding minors under 16 years of age.
C. Rights Available Under the CCPA
The CCPA provides California residents with the following rights: the right to request information about our collection and use of your personal information; the right to data portability; the right to request deletion of your personal information; the right to correct inaccurate information; and the right to opt-out of the sale or sharing of personal information (note: we do not sell or share your information). You also have the right to limit use of sensitive personal information and the right to non-discrimination for exercising your privacy rights.
D. How to Exercise Your Rights
To exercise the rights described above, you—or someone authorized to act on your behalf—must submit a verifiable consumer request to us by sending an e-mail to privacy@outlive.com with the subject line: "CCPA Request" or calling us at the number provided below. We will respond within 45 days as required by law.
E. Our Commitment Not to Discriminate
Consistent with the CCPA, we will not discriminate against you for exercising any of your CCPA rights.
11. Rights Afforded to Virginia Residents
This section is included pursuant to the Virginia Consumer Data Protection Act (the "VCDPA"). Virginia consumers have the right to: confirm whether we are processing their personal data and access such data; correct inaccuracies; delete personal data; obtain a copy of their data in a portable format; and opt out of targeted advertising, sale of personal data, or profiling. To exercise these rights, contact privacy@outlive.com with the subject line: "VCDPA Request". You may appeal any decision by emailing privacy@outlive.com with the subject line "VCDPA Appeal."
12. Rights Afforded Nevada Residents
Pursuant to Nevada law, Nevada residents who have purchased services from us may opt out of the "sale" of "covered information" for monetary consideration. We do not engage in any activities that would qualify as a sale under Nevada law.
13. Rights Afforded Canadian Residents
If you reside in Canada, various Canadian laws, including Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA"), may provide you certain rights with respect to your personal information, including the right to request information about the collection, use, or disclosure of your personal information, to request access to your personal information, and to challenge the accuracy and completeness of your personal information. If you are a Canadian resident and would like to make a request regarding your personal information, please send a request to privacy@outlive.com with the subject line, "Canada Resident Request."
14. Rights Afforded Individuals in the EU, UK, and Switzerland
A. Rights Available Pursuant to the GDPR
The European Union's General Data Protection Regulation and the United Kingdom and Switzerland's version of the same (collectively, the "GDPR") afford certain rights to individuals in the European Economic Area ("EEA"). If you are in the EEA, you have the following rights: right of access; right to rectify your personal information; right to be forgotten; right to restriction of processing; right to object to processing; and right to data portability. To exercise these rights, contact dpo@outlive.com. If you are located in the EEA and have a concern about our processing of your data, you may have the right to make a complaint to the appropriate data protection authority.
B. Transfers from the EEA, Switzerland, or UK
If we transfer personal information from the EEA, Switzerland, or UK to the United States or any other country, we will implement appropriate legal mechanisms to ensure an adequate level of personal data protection consistent with the GDPR's requirements, such as Standard Contractual Clauses (SCC) approved by the European Commission.
15. Children's Privacy
Our Site and App are not intended for children under the age of 13 years. We do not knowingly collect personal information from children under age 13. If you are under 13, please do not use our Services or provide any information to us.
If we learn that we have collected personal information from a child under 13, we will take immediate steps to delete that information. If you believe we may have information from or about a child under 13, please contact us immediately at privacy@outlive.com.
For users between 13 and 18 years of age, we recommend that a parent or guardian review this Privacy Policy and supervise the minor's use of our Services. Depending on your jurisdiction, parental consent may be required for users under 18.
16. Security of Personal Information
We use appropriate administrative, technical, and physical measures to protect your personal information from loss, theft, and unauthorized use, disclosure, or modification. These measures include:
AES-256 encryption for data at rest and TLS 1.3 for data in transit
Multi-factor authentication (MFA) for account access
Role-based access controls
Regular security audits and penetration testing
24/7 security monitoring and incident response
SOC 2 Type II certified data center facilities
Please be aware that no data transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot ensure or warranty the security of any information you transmit to us, and you do so at your own risk.
17. Data Storage and Retention
We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or other mandatory reporting requirements. Health information may be retained for minimum periods required by applicable law (typically 6-10 years depending on jurisdiction). To determine the appropriate retention period we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and the applicable legal requirements.
18. Changes to this Policy
Please note that we may change this Policy from time to time. When we make material changes, we will notify you through the App, by email, or by posting a prominent notice on our Website prior to the changes becoming effective. We will post changes here and update the "Last Updated" date at the top of this document. Continued use of our Site or App after any changes is deemed to be acceptance of those changes. Accordingly, we encourage you to check the Policy periodically for updates.
19. How to Contact Us
For questions or more information about our privacy practices, please contact us:
Outlive, LLC
Attn: Privacy Officer
Email: privacy@outlive.com
HIPAA Inquiries: hipaa@outlive.com
Data Protection Officer (EEA/UK): dpo@outlive.com
Website: www.outlive.com/privacy
The information provided through our services, including texts, graphics, images, or other material, is for informational purposes only and may not be appropriate or applicable for your individual circumstances. Our services do not provide medical, professional, or licensed advice and are not a substitute for consultation with a health care professional. You should seek medical advice from a qualified health care professional for any questions. Do not use our services for medical diagnosis or treatment.
© 2025 Outlive, LLC. All rights reserved.
