Privacy Policy

1. About this policy

This Privacy Policy describes how Defiant Ventures, Inc., doing business as Defiant Longevity ("Defiant," "we," "us") collects, uses and shares information when you use the Defiant Longevity website and platform (the "Platform"). It applies to Organizations that purchase the Platform and to Members who use it through an Organization's program.

If your Organization is a HIPAA covered entity and uses the Platform with protected health information, Defiant handles that information as the Organization's business associate under a Business Associate Agreement, and the Organization's own Notice of Privacy Practices describes your HIPAA rights. Where that notice and this policy conflict about protected health information, the Organization's notice controls.

2. Information we collect

Information you give us. Name, email address, phone number, date of birth, and account credentials. For Organizations: business contact, billing and order details.

Health and wellness information you enter. Weight, body composition, waist and other measurements, nutrition entries, activity and exercise, sleep, recovery, fitness metrics such as VO₂ max, goals, check-in answers, and lab values where your Organization's program supports them.

Connected device and app data. If you connect a device or app, we receive the data types you authorize from that service, such as activity, sleep, heart-rate and body-composition readings. You can disconnect at any time.

Information from your Organization. An Organization may provide your name, contact details, program enrollment and, where its program includes them, baseline measurements or results.

Payment information. Billing address and payment details, collected and processed by Stripe. We do not store full card numbers.

Automatic information. Device and browser type, operating system, IP address, approximate city-level location from IP, pages and screens viewed, features used and timestamps. We do not collect precise geolocation.

3. How we use information

• To provide the Platform: build and display your journey, goals, education and progress; run check-ins; show data to you and, as your program allows, to your Organization.
• To operate accounts, billing and support, and to send service messages such as check-in reminders, renewal notices and security alerts.
• To keep the Platform secure, prevent fraud and abuse, and comply with law.
• To improve the Platform, using de-identified or aggregated information wherever possible.
• To send Organizations product updates and offers, which they can opt out of. We do not send marketing to Members based on their health information without the separate consent that law requires.

4. How we share information

Your Organization. If you use the Platform through an Organization's program, that Organization can see your information to the extent its program configuration allows, including measurements, goals and progress. Contact your Organization to learn what it sees and how it uses it.

Service providers. Companies that host, store, process or support the Platform on our behalf: cloud hosting, databases, authentication, email delivery, analytics, customer support tools and payment processing (Stripe). They may use information only to provide services to us.

Connected services. When you connect a device or app, we exchange data with that service as you authorize.

Legal and safety. When required by law, legal process or a government request; to protect the rights, safety or property of Defiant, our users or others; or to enforce our Terms.

Business transfers. In a merger, acquisition, financing or sale of assets, information may be transferred to the successor, subject to this policy.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

5. Cookies and analytics

We use cookies and similar technologies that are necessary for the Platform to work, such as keeping you signed in, and analytics cookies that help us understand how the Platform is used. We do not use advertising or retargeting cookies. You can control cookies through your browser; disabling necessary cookies may stop parts of the Platform from working. We honor Global Privacy Control signals where state law requires.

6. Consumer health data (Washington, Nevada, Connecticut and similar laws)

Some states give additional rights over "consumer health data." Where those laws apply, we collect and share your health data only with your consent or as necessary to provide the Platform you requested. You have the right to confirm whether we collect, share or sell your consumer health data; to access it, including a list of the third parties with whom it was shared; to withdraw consent; and to request deletion. Submit requests using the contact below. We respond within 45 days, extendable once by 45 days with notice. If we deny a request, you may appeal by replying to our decision, and if the appeal is denied you may contact your state attorney general.

7. Your privacy rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a portable copy, and opt out of certain processing. Members can view and update most information directly in the Platform. For other requests, contact us at the address below. We verify requests by matching the information you provide against our records and, for sensitive requests, by confirming through your account email. You may use an authorized agent where law allows. We do not discriminate against you for exercising your rights.

California residents. We collect the categories of information described in Section 2 for the purposes in Section 3 and disclose them to the recipients in Section 4. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past twelve months. You have the rights to know, delete, correct, and limit use of sensitive personal information, and to non-discrimination. Submit requests using the contact below or through your account.

8. Data security

We use administrative, technical and physical safeguards designed to protect information, including encryption in transit and at rest, role-based access controls, logging, and regular review of our service providers. No method of transmission or storage is completely secure. If a breach affects your information, we will notify you and your Organization as the law requires.

9. Retention

We keep account and health information for as long as your account or your Organization's program is active, and afterward for the period needed to meet legal, accounting and security obligations. When an Organization's subscription ends, it may export its data for 30 days, after which we delete or de-identify it unless law requires us to keep it. Payment records are kept as required by tax and accounting law.

10. Children

The Platform is for adults 18 and older. We do not knowingly collect information from children. If you believe a child has provided information, contact us and we will delete it.

11. Where information is processed

The Platform is operated in the United States, and information is stored and processed there.

12. Third-party sites

The Platform may link to other websites and services. Their privacy practices are their own. This policy does not cover them.

13. Changes to this policy

We may update this policy. If a change is material, we will notify Organizations by email and post the updated policy with a new effective date before it takes effect.

14. Contact us

Defiant Ventures, Inc., doing business as Defiant Longevity

5100 Lincoln Ave., Lisle, IL 60532

info@defiantlongevity.com · 877-777-7647

Privacy requests: email the address above with "Privacy request" in the subject line.