Privacy Policy

1. Information We Collect

Information you provide directly

• Name, email address, and billing information when you create an account or purchase a membership
• Shipping address collected at checkout for kit delivery
• Health intake questionnaire responses (symptoms, lifestyle, medical history, medications, supplements)
• Communications you send us via email or through the platform

Health and biometric data

• Epigenetic test results from TruDiagnostic (biological age, aging clock scores)
• Laboratory test results ordered through our Rupa Health LabShop
• Wearable device data you choose to connect (sleep, heart rate, activity, HRV from Oura, WHOOP, Apple Watch, or Garmin)
• Self-reported health metrics entered through our intake forms

Information collected automatically

• IP address, browser type, device information, and pages visited
• Cookies and similar tracking technologies for session management and analytics
• Payment transaction data processed securely through Stripe (we do not store full card numbers)

2. How We Use Your Information

We use your information only for purposes that are necessary to provide and improve our services:

• To deliver your personalized biological age assessment and longevity action plan
• To process payments and manage your membership subscription
• To order and fulfill TrueAge epigenetic testing kits to your address
• To generate AI-assisted personalized health protocols based on your data
• To send transactional emails (welcome, kit instructions, results notifications, re-test reminders)
• To send our newsletter, "The Younger You," if you opt in — you may unsubscribe at any time
• To improve our platform, protocols, and member experience
• To comply with legal obligations and protect the safety of our members

We do not sell your personal or health data to third parties. We do not use your health data for advertising purposes.

3. Health Data and HIPAA

YoungerYouClub is a clinician-led longevity membership platform. The health data you share with us is handled with the highest level of care and confidentiality in accordance with applicable privacy laws and professional standards.

Certain health information you provide may be considered Protected Health Information (PHI) under HIPAA. We handle this data in accordance with HIPAA requirements, including maintaining appropriate administrative, physical, and technical safeguards.

Your health data is used solely to provide your personalized longevity plan and is never sold, shared with advertisers, or disclosed to third parties except as necessary to provide your care (such as sharing your shipping address with TruDiagnostic to fulfill your kit order, or sharing lab orders with Rupa Health/Quest Diagnostics).

4. Third-Party Services

We work with trusted third-party service providers to deliver our platform. Each provider handles data only as necessary to perform their function:

• Stripe — payment processing. Your card data is encrypted and stored by Stripe, not by us. Stripe is PCI-DSS compliant.
• TruDiagnostic — epigenetic testing. Your name and shipping address are shared to fulfill kit orders. Test results are returned to YoungerYouClub to build your plan.
• Rupa Health / Quest Diagnostics — laboratory testing. Your information is shared as necessary to process and fulfill lab orders.
• Resend — transactional email delivery (welcome emails, kit instructions, reminders).
• Beehiiv — newsletter platform for "The Younger You." Subscription is opt-in only.
• Supabase — secure database hosting for member data. Data is stored in the US.
• Fullscript — supplement dispensary. If you create a Fullscript account through our link, Fullscript's own privacy policy applies to that account.
• Anthropic Claude API — AI-assisted plan generation. Health data used to generate your personalized plan is processed through Anthropic's API. We do not permit Anthropic to use your health data to train its models.

5. Data Storage and Security

Your data is stored on secure, encrypted servers hosted in the United States. We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• Encrypted storage for sensitive health and personal data
• Access controls limiting who can view member health information
• Regular security reviews and updates

Despite our best efforts, no system is completely secure. If you believe your account has been compromised, contact us immediately at hello@youngeryouclub.com.

6. Cookies

We use cookies to keep you logged in, remember your preferences, and understand how members use our platform. We do not use third-party advertising cookies.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of our platform.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data (subject to legal retention requirements)
• Portability — request your data in a machine-readable format
• Opt-out — unsubscribe from marketing communications at any time
• Restriction — request that we limit how we process your data in certain circumstances

To exercise any of these rights, email us at hello@youngeryouclub.com. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected from you
• The right to opt out of the sale of your personal information
• The right to non-discrimination for exercising your CCPA rights

We do not sell personal information. To submit a CCPA request, email us at hello@youngeryouclub.com.

9. Children's Privacy

YoungerYouClub is intended for adults 18 years of age and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify active members by email of any material changes. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.