PRIVACY POLICY
LONGAEVITAS HEALTH (PTY) LTD Last Updated: 28 July 2026 Entity: Longaevitas Health (Pty) Ltd CIPC Number: 2025/413084/07 Registered Address: 18 Kent Road, Dunkeld West, Randburg, 2196
1. INTRODUCTION
This Privacy Policy explains how Longaevitas Health ("Longaevitas", "we", "us") collects, processes and protects personal information in connection with the Longaevitas Health platform, a wellness and screening platform for doctor-led longevity planning and preventative care, including the Health Assessment, the Personalised Preventative Care service, the Doctor-led VitaPrint Analysis service and the longevity programmes and courses (collectively, the "Services"). It should be read together with the Longaevitas Member Consent.
2. INFORMATION WE COLLECT
- Identification and contact details (name, ID number, email, phone, address).
- Demographic information (age, gender, date of birth).
- Account and preference information.
- Health information you choose to share: assessment answers, biomarker results, uploaded lab reports, lifestyle inputs.
- VitaPrint Cycle, longevity programme and course purchase information.
- Payment metadata processed by our payment provider (we do not store full card numbers).
- Technical and usage data (IP address, device, browser, access logs).
We do not collect genetic or epigenetic data unless explicitly required for a specific authorised test and with your express written consent.
2A. WHATSAPP MEDIA AND LOGGED WELLNESS DATA
Where you use Vita on WhatsApp, we also process the content you choose to send and the wellness records built from it:
- Text messages, voice notes, videos, photographs and documents you send, including meal and packaged food photographs, medicine and supplement labels, prescriptions and laboratory reports.
- Text extracted from those images and documents, such as medicine names, strengths, dosing instructions on a label, and biomarker values on a report.
- Wellness records you log or confirm: meals and estimated nutrition, supplements taken, hydration, movement, sleep, weekly check-in answers, your medicine list, your supplement list and appointments you tell us about.
- Documents you ask Vita to hold between cycles until they can be attached to your next VitaPrint analysis.
- Your WhatsApp number, message metadata and delivery status for the messages exchanged with Vita.
3. HOW WE COLLECT INFORMATION
We collect information directly from you when you create an account, complete the Health Assessment, purchase a Doctor-led VitaPrint Analysis, join a longevity programme or contact support. We also receive information from trusted partners that you have authorised to share with us, including laboratories, sample-collection partners and payment processors.
4. PURPOSES OF PROCESSING
We process personal information to:
- Provide, operate and improve the Services, including the Personalised Preventative Care service.
- Carry out wellness screening and risk stratification: comparing your assessment answers, body metrics and biomarker results against longevity reference ranges to show where your risk sits and to flag results that warrant attention by your own GP or specialist. This is screening, not diagnosis.
- Generate your personalised VitaPrint and recommendations.
- Enable an HPCSA-registered doctor to lead your personalised plan from your assessment answers and biomarker results.
- Manage VitaPrint Cycle, longevity programme and course purchases.
- Communicate service messages, results notifications and (with consent) marketing.
- Maintain billing, administration and account records.
- Conduct analytics and quality assurance in anonymised or aggregated form.
- Analyse de-identified member trends to keep Vita's educational content and doctor-led protocols relevant (see section 4A below).
- Comply with legal, regulatory and professional obligations.
4A. HOW VITA LEARNS FROM MEMBER TRENDS
Vita is our platform assistant. To keep educational guidance current, we analyse de-identified trends across the member community, including changes in assessment answers, body metrics, biomarker values, and outcomes following supplement or plan recommendations. This analysis produces cohort-level insights that inform Vita's educational content and the protocols doctor-led practitioners may consider. It does not diagnose, prescribe or replace clinical judgement.
Before your information is used for cohort learning, direct identifiers (such as your name, contact details and account identifiers) are removed and only aggregated results are used. Cohort insights are only surfaced where the underlying group is large enough that an individual member is not reasonably identifiable. We do not sell your information and we do not use it to train third-party artificial intelligence models.
Cohort learning is on by default when you join. You may opt out at any time from Account > Privacy. Your future data will no longer be included in cohort learning once you opt out. Insights already generated from historic de-identified data cannot be reversed once aggregated. Opting out has no effect on the doctor-led clinical care you receive.
4B. AUTOMATED PROCESSING AND ARTIFICIAL INTELLIGENCE
We use automated processing, including rule-based scoring and artificial intelligence, to organise your information, calculate system scores, disease-risk estimates and your Longaevitas Age, to draft educational content, and to prepare a structured briefing for the reviewing doctor. These outputs are preparatory and educational.
No decision that affects you clinically is taken solely by automated means. For the purposes of section 71 of POPIA, every clinical recommendation released to you is reviewed, amended where necessary, and approved by an HPCSA-registered doctor exercising independent clinical judgement. You may ask how an automated output was arrived at, make representations about it, and request human reconsideration by escalating a question to a doctor in Ask Vita in your member portal. Each VitaPrint cycle includes a free doctor escalation, so this costs you nothing.
4C. WHATSAPP, AUTOMATED ESTIMATION AND HUMAN OVERSIGHT
WhatsApp is operated by Meta Platforms. Messages you exchange with Vita, including any media you send, are transmitted and processed on Meta infrastructure outside South Africa under the safeguards described in section 7A. Using the channel is your choice, and you can stop it at any time by asking Vita to stop or by removing your number in your account settings. Vita may send you service messages on the channel, such as weekly plan check-ins and reminders you asked for; these are not marketing and can be paused or stopped on request.
Some processing on the channel is automated: nutrition estimation from meal photographs and descriptions, reading medicine labels, prescriptions and laboratory reports so their values can be confirmed with you, and matching what you logged against doctor-developed interaction rules. These outputs are estimates and educational context. They are confirmed with you before anything is saved to your records.
No decision affecting you clinically is taken solely by automated means. Every clinical recommendation released to you is generated from protocols set by HPCSA-registered doctors and released under a doctor's professional responsibility, and you may ask for individual review by a Longaevitas doctor at any time, as set out in our Medicolegal Terms.
5. LEGAL BASIS UNDER POPIA
We process personal information on the lawful grounds of consent, performance of contract (the Member Consent), legal obligation, and legitimate interest in operating the Services securely. Health information is Special Personal Information under POPIA and is processed on the basis of your express written consent and, where applicable, section 32 of POPIA (processing by or under the responsibility of a health care professional, subject to a duty of confidentiality).
6. MARKETING COMMUNICATIONS
Marketing messages are sent only with your opt-in consent. You may unsubscribe at any time via the link in any email or by contacting support@longaevitashealth.com. We do not sell or rent personal information for marketing purposes.
7. DATA SHARING
We share personal information only with:
- The assigned HPCSA-registered doctor and clinical team reviewing your Doctor-led VitaPrint Analysis.
- Laboratories and sample-collection partners involved in your tests.
- Healthcare professionals to whom you are referred, on your instruction.
- Operators acting on our behalf under written operator agreements as required by sections 20 and 21 of POPIA (cloud hosting and database services, payment processing, email and messaging delivery, analytics, and artificial intelligence processing services).
- Regulators, professional bodies or law-enforcement agencies where required by law.
We do not sell personal information, and we do not share your identifiable health information with wellness partners, retailers or advertisers.
7A. CROSS-BORDER TRANSFERS
Some of our operators process personal information outside the Republic of South Africa. We transfer personal information across borders only where section 72 of POPIA is satisfied, which means the recipient is subject to a binding agreement, a law, or binding corporate rules providing an adequate level of protection substantially similar to POPIA and imposing onward-transfer restrictions on the same terms.
The categories of operator involved, and the regions in which they process data, are:
- Cloud application hosting and edge delivery: European Union and United States.
- Managed database, authentication, file storage and backup services: European Union, with support access from the United States.
- Artificial intelligence processing used for document extraction and drafting support: United States and European Union.
- Transactional and authentication email delivery: United States and European Union.
- Payment processing: South Africa, with card-scheme processing that may involve the United States.
- Product analytics and error monitoring: European Union and United States.
Where a recipient is in a jurisdiction without an equivalent data protection law, we rely on written contractual safeguards incorporating POPIA-equivalent obligations, including confidentiality, security, breach notification, audit and deletion terms. A current list of operators and their locations is available on request from the Information Officer.
Laboratory testing, biomarker analysis and all clinical review by Longaevitas doctors take place in South Africa.
8. SECURITY
We implement technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access control and audit logging, role-based permissions, staff confidentiality undertakings and regular vulnerability testing. While we take all reasonable precautions, no system is completely secure.
8A. SECURITY COMPROMISE NOTIFICATION
If there are reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and you as soon as reasonably possible after discovering the compromise and establishing its scope, in accordance with section 22 of POPIA. The notification will describe the possible consequences, the measures taken or intended, and steps you can take to reduce any adverse effects.
9. RETENTION
We retain personal information only as long as necessary for the purpose collected or as required by law. Health-related data and clinical records are retained for the longer of (i) six years after your last interaction with the Services and (ii) any longer period required by the National Health Act, HPCSA record-keeping guidance or other applicable law. Longer periods apply to the records of minors, of persons under legal disability, and to records relevant to a claim, complaint or investigation of which we are aware. Once the retention period lapses, identifiers are removed unless ongoing retention is required by law. Account and billing records are retained for the periods required by the Companies Act and tax legislation.
9A. CLINICAL PHOTOGRAPHS AND MESSAGING CHANNELS
Photographs you send with a doctor question, and the messages exchanged in that question, form part of your clinical record. We keep them for at least six (6) years from the date of the last entry, in line with the National Health Act and HPCSA record-keeping requirements, even if you later close your account. Food photographs you send to Vita are wellness data rather than clinical records, and are kept only for as long as we need them for your food history, then deleted.
Where you choose to use Vita on WhatsApp, WhatsApp Ireland Limited and Meta Platforms act as messaging operators for the delivery of those messages, and message content passes through and is stored on their infrastructure under their own terms and privacy policy. We cannot control their retention of message content, or the copy kept on your own device. If you would rather your clinical messages did not pass through WhatsApp, use the member portal instead, which does not route through Meta.
Our messaging, hosting and artificial intelligence providers process information outside South Africa. Those transfers are made under section 72 of POPIA, on the basis of contractual safeguards requiring a comparable level of protection, and are described in section 7A above.
We use an automated classifier to produce aggregate insight from Ask Vita usage, for example which topics members ask about most often and which meal patterns are common. It records only topic and category labels and counts. The text of your messages is not stored in that analytics record and is not used to identify you.
9B. MESSAGING RECORDS AND CLINICAL RECORD RETENTION
Where a WhatsApp message, a logged record, an extracted result or a held document forms part of your clinical record, for example a laboratory result attached to a VitaPrint analysis, a medicine list a doctor relied on, or a question escalated to a doctor, it is retained for the clinical record retention period stated in section 9 rather than the shorter operational retention we apply to ordinary chat messages. Where a deletion request covers information we are legally required to keep as a health record, we retain that information for the required period, restrict its processing to that purpose, and confirm this to you when we respond to your request.
10. YOUR RIGHTS UNDER POPIA
You have the right to access, correct, delete, restrict or object to processing of your personal information, and to data portability where applicable. Requests should be made in writing to support@longaevitashealth.com. We respond within one month, subject to verification. Deletion of clinical records is subject to the statutory retention periods described in section 9.
11. COOKIES AND SIMILAR TECHNOLOGIES
We use cookies, local storage and similar technologies on the website and in the member platform. We use them in the following categories only:
- Strictly necessary. Sign-in and session tokens, security and fraud prevention, load balancing, and remembering that you have accepted required terms. These are essential, and the platform cannot function without them.
- Preference. Your display, theme and language choices, and dismissal of one-time notices.
- Performance and diagnostics. First-party measurement of page performance and error reports, used to keep the platform working. This data is not used to build advertising profiles.
- Campaign attribution. Where you arrive through one of our own marketing links, a first-party identifier records which campaign brought you, so we can measure it.
We do not use advertising cookies, cross-site tracking pixels, or third-party behavioural advertising networks, and we never place your health information in a cookie.
Strictly necessary technologies are used on the basis of the legitimate interest of operating a service you have asked for. Non-essential categories are used only where you have not objected, and you may object at any time by emailing the Information Officer. You can also block or delete cookies in your browser settings, but strictly necessary cookies cannot be blocked without preventing you from signing in.
12. CHILDREN AND PERSONS UNDER 18
The Services are intended for adults aged 18 and over. You must be 18 or older to create an account, purchase a VitaPrint Cycle, or submit health information to us.
Personal information about a child is special personal information under section 34 of POPIA and may not be processed except on the grounds set out in section 35. We do not knowingly collect personal information from anyone under 18 and we do not offer paediatric assessment, testing or clinical review.
If we discover that an account has been created by, or that health information has been submitted about, a person under 18 without a lawful basis, we will suspend the account, stop processing, and delete the information unless we are required by law to retain it. If you believe a person under 18 has given us personal information, email support@longaevitashealth.com and we will act on it promptly.
Gift codes may not be purchased for, or redeemed by, a person under 18.
13. BUSINESS TRANSFERS
If Longaevitas undergoes a merger, acquisition or reorganisation, personal information may be transferred as part of that transaction, subject to continued protection under this Policy.
14. CONTACT & COMPLAINTS
Responsible Party: Longaevitas Health (Pty) Ltd Email: support@longaevitashealth.com Registered Address: 18 Kent Road, Dunkeld West, Randburg, 2196
Privacy complaints. Raise any privacy concern with the Information Officer first, at support@longaevitashealth.com. We acknowledge within 5 business days and respond substantively within 30 days.
Escalation to the regulator. If you believe your privacy rights have been infringed, you may lodge a complaint with the Information Regulator (South Africa), JD House, 27 Stiemens Street, Braamfontein, Johannesburg, complaints.IR@justice.gov.za, https://www.justice.gov.za/inforeg/.
Clinical complaints. Complaints about the conduct or clinical judgement of a Longaevitas doctor are handled under the complaints procedure in our Medicolegal Terms, and may be escalated to the Health Professions Council of South Africa.
15. GOVERNING LAW
This Privacy Policy is governed by the laws of the Republic of South Africa.
© 2026 Longaevitas Health (Pty) Ltd. All rights reserved.
The platform, your doctor and your fees
Longaevitas Health is a technology and administration platform. It is not a medical practice, it does not employ doctors, and it never provides clinical services itself.
Every doctor on the platform is an independent practitioner registered with the HPCSA, practising under their own registration, practice number and professional indemnity, and carrying clinical responsibility for their own work.
Longaevitas Health collects the practitioner's professional fee as a disclosed payment agent and pays it over in full. Longaevitas Health charges only its own administration and technology fee.
A practitioner may not invoice you separately, ask you for a top-up, or take payment outside the platform.
Longaevitas Health does not claim from any medical scheme on your behalf, and does not submit any account to a scheme.
Care on the platform is delivered in writing. There is no call and no video. Your doctor answers, prescribes where appropriate, and refers you for in-person care whenever they judge that it is needed.
Your treating practitioner is the responsible party for your clinical record. Longaevitas Health processes that record as their operator, on their instruction only, under a written operator agreement, with confidentiality, security safeguards and breach notification obligations.
Your health record, how long it is kept and who may look
Your treating practitioner is the responsible party for your clinical record. Longaevitas Health holds and processes that record as their operator, on their instruction only.
What the record contains
- Who you are, the consents you signed, your medical scheme details and the cycles you hold.
- Everything you submitted for an analysis: your assessment answers, your body metrics and your biomarker results, exactly as they were submitted.
- Your analyses, your published VitaPrint, your plan, your targets and the approval record showing which doctor signed off and how.
- Any referral letter written for you, and the reason it was written.
- Your Ask a doctor threads, in full, with every message and anything you attached.
- Your programme care: your enrolment and consent, each episode, each review with its decision, each script, the symptoms you reported and your check in activity.
- Any prescription issued to you, and any document held for you.
- The closure note your doctor wrote at the end of each episode, safety records, and the log of who viewed your health information.
How long it is kept
- A clinical record is kept for at least six years from the last clinical entry, whether that entry was an analysis, an Ask a doctor thread or programme care.
- If the care was given while you were under 18, the record is kept until at least your twenty first birthday plus six years.
- Where a mental health record applies, the record is kept indefinitely.
- You may ask us to delete your health information at any time. We will delete everything we are allowed to delete, and we will tell you plainly what the law requires your treating practitioner to keep, and until when.
Who may look, and how that is recorded
- Only your treating practitioner and the staff whose work requires it may open your health information, and only for a recorded reason.
- Every time a clinician or a staff member opens your health information it is written to an access log with their name, the time and the reason. Reading your own record is not logged, because the log exists to show who else looked.
- You may ask for a full copy of your record at any time. The request, and the copy we produce, are both recorded.
A copy of your record is produced as one complete document. If any part of it cannot be read at the time it is produced, that is stated on the front of the document rather than left out quietly.
At the end of every Ask a doctor thread and every programme review, your doctor writes a closure note: the concern, their clinical impression and reasoning, the advice given, the red flags to watch for, anything prescribed, the safety netting and the outcome. That note is part of your clinical record. It is written for clinicians, so it is not shown to you in the app, and you may request it as part of a copy of your record.