Consumer health data privacy policy
Last updated 31 August 2026
This policy applies to consumer health data as defined by Washington's My Health My Data Act, Nevada SB 370, and comparable laws. It is separate from our general privacy policy on purpose, so it is easy to find and read on its own.
What counts as consumer health data here
- Blood test results from your day 0 and day 90 draws
- What you record in your daily log: food, training, sleep, light exposure, and adherence
- Bodily measurements you enter, such as height, weight, and resting heart rate
- Your intake questionnaire responses
- The Battery Score we calculate from the above
Why we collect it
To deliver the ninety-day program you enrolled in: to build your protocol, to coach you through it, and to compare your day 0 and day 90 readings. Separately, and only if you opt in, to support longevity research.
How we collect it
Directly from you, through your client portal, and from our partner laboratory when you authorise release of your results to us.
Who we share it with
- Our partner laboratory, to order and receive your draws
- Our hosting and database providers, who store it on our behalf
- Your coach, who reads your log and your results
We do not sell consumer health data. We will not share it with anyone else without asking you first, in a separate request that names who would receive it and why.
Research use is optional and separate
At enrolment we ask, in a separate checkbox, whether you consent to your de-identified data being used in longevity research. De-identified means your name, email, address, and date of birth are removed and replaced with a code. You can join the program and decline this. You can withdraw the consent later, which stops future research use of your data.
Your rights
- Access: get a copy of the consumer health data we hold about you, including a list of who we have shared it with
- Delete: have it deleted from our systems and from our service providers' systems
- Withdraw consent: to collection, to sharing, or to research use, at any time
Email [email protected]. We respond within forty-five days. If we deny a request you can appeal by replying to our response.
How long we keep it
For as long as you have an account with us, and for the period afterwards required for our records. If you ask us to delete it, we delete it, except where the law requires us to keep something.
This is not medical care
The Human Battery Project is not a healthcare provider and is not a HIPAA covered entity. Your information here is not a medical record and is not covered by HIPAA. It is protected by this policy and by the consumer privacy laws named above.