Prime LongevityPrime Longevity
Privacy notice
Last updated: 31 October 2026
This notice explains what the Prime Longevity app does with personal data, why, on what legal basis, who helps us, how long data is kept and what your rights are. It covers the app for iPhone and Android. Our web shop has its own privacy policy.
1. Who is responsible
The controller is Evolvee ApS, CVR 44432277, Jagtvej 120, 3. 353, 2200 København N, Denmark.
Contact for anything about your data: support@primelongevity.app.
2. The short version
- You can use the app without an account, an email or a name. Until you switch on a feature that needs our servers, everything stays in the app on your phone and we receive nothing.
- Each feature that sends data off your phone has its own switch. Every switch starts off. You can turn each one off again at any time in Settings > Privacy.
- Your face photos are saved in the app on your phone. They are sent away only for an AI comparison you asked for, and then only for that one request. Our servers do not save them. Our AI provider, Anthropic, may keep a request for up to 30 days to check for misuse (section 7).
- We use no advertising, no analytics and no tracking, and we never sell data.
- Prime Longevity follows how your skin looks. It does not check moles, marks or skin health, and it is not a medical device.
- You can delete everything at any time in the app: Settings > Privacy > Delete everything (section 9).
3. What stays on your phone
Your quiz answers (age range, skin type, sensitivity, goals, experience, the pregnancy or breastfeeding answer, sun habits, motivation), your first name if you typed one, your routines, check-ins, streak, achievements, products, reminders and your photos are kept in the app's storage on your phone. We cannot see them unless you switch on a feature below.
Backups made by your phone: the folder with your face photos is excluded from iCloud and iTunes backups on iPhone, and the app takes part in no Google backup or device-to-device transfer on Android. On iPhone, the rest of the app's data (your quiz answers and scan numbers included, but no photos) is part of your phone's own device backup, which Apple encrypts and which you control in the phone's settings.
Reminders are scheduled on your phone; nothing about them is sent to us.
4. What we process, why, and on what legal basis
"Health data" below means data about your skin and the pregnancy answer, which can count as data concerning health under Article 9 GDPR. Where we process it, we ask for your explicit consent (Article 9(2)(a) GDPR, together with Article 6(1)(a)), separately for each feature, before anything is sent.
| Feature (switch) | What is sent or kept | Why | Legal basis |
|---|---|---|---|
| AI face analysis (Face analysis) | Your baseline photo and your newest photo (resized to 1536 px) with their capture times; your goals, skin type and sensitivity; weeks since your baseline; a summary of your routine (step kinds, active ingredient families and schedules, never a brand or product name); the app language; the scan's id | To compare your newest photo with your own baseline and estimate visible change per skin parameter, and to check that the photos can be compared (light, angle, the same person: section 5) | Explicit consent, Art. 9(2)(a) and Art. 6(1)(a) |
| AI ingredient reading (Ingredient reading) | One or two photos of an ingredient list; your goals, skin type, sensitivity, pregnancy or breastfeeding answer, experience levels and sunscreen habit; your shelf (product names and key actives) and routine step names; the app language; a request id | To read the ingredient list and explain it for you, including cautions while pregnant or breastfeeding | Explicit consent, Art. 9(2)(a) and Art. 6(1)(a) |
| Weekly note (Weekly note) | Your goals, skin type and sunscreen habit; your check-in streak and rates over 28 days; your progress numbers; weeks since your baseline; routine step kinds and active families; the app language; a request id. No photos | To write a short weekly note from your own numbers | Explicit consent, Art. 9(2)(a) and Art. 6(1)(a) |
| Cloud backup (Cloud backup) | Your profile with your quiz answers (the pregnancy answer included), first name, settings, streak, routines, check-ins, products with their ingredient readings, weekly notes and scan numbers (including whether a scan was refused because the photos showed different people). Never photos, and never the AI's sentences about your face | To keep your data in your account so it moves with you to a new phone | Explicit consent, Art. 9(2)(a) and Art. 6(1)(a) |
| Account (created the first time you use any of the features above or buy membership) | A random account id; the time of sign-ins and token refreshes; for each signed-in session your IP address and the app's user agent | To run your account and keep it secure | Performance of the contract with you, Art. 6(1)(b) |
| Email (Settings > Account, optional) | Your email address and the app language, and the one-time 6-digit codes we email you through our email provider (section 7) | To let you sign in on another phone, restore your backup and claim Vector ONE months, and to confirm your address | Performance of the contract, Art. 6(1)(b) |
| AI usage limits (with every AI request) | Per account and day: how many AI requests of each kind you made; the request id of each request for one day | To apply the daily limits (3 comparisons, 20 readings, 2 notes a day), count a retried request once, and protect the service from abuse and runaway cost | Performance of the contract, Art. 6(1)(b), and our legitimate interest in preventing abuse, Art. 6(1)(f) |
| Membership (when you open the membership page, buy, or restore a purchase) | Your account id; the store's purchase data (receipt or purchase token, product ids, transaction ids, purchase, renewal and expiry dates, prices and currency, storefront country, sandbox or production, refund and billing-issue events); technical data of the request (device type and operating system version, app and SDK version, language and currency code, IP address); from our server, the end date of any Vector ONE months; on our servers: your plan, its dates, billing state, store and whether your first free AI comparison was used | To sell, check and keep your membership, restore it on a new phone, and apply the one free AI comparison | Performance of the contract, Art. 6(1)(b) |
| Vector ONE months (only if you ask for them in the app) | From our web shop, for each paid order that contains Vector ONE: a keyed hash of the order email (never the email itself), the order id, the number of Vector ONE jars, order and payment times and the order's status. From the app, once you ask: a keyed hash of your account email | To give 6 months of membership per Vector ONE bottle (two bottles give a year) to the account that signs in with the order's email, and to add later orders with the same email by themselves (section 6) | Performance of the contract, Art. 6(1)(b), or our legitimate interest, Art. 6(1)(f) |
| Support (when you write to us) | Your email address, what you write, and the account code you include | To answer you | Performance of the contract, Art. 6(1)(b), or our legitimate interest in answering, Art. 6(1)(f) |
| Server logs | Technical logs of each request (time, function, outcome, error codes, token counts), never a photo, profile or text from you; our hosting provider's platform logs, which include IP addresses | To run, secure and fix the service | Our legitimate interest in a secure, working service, Art. 6(1)(f) |
No request we send carries your age or your name. We collect no location, contacts, advertising id or device id, and no crash or analytics data.
Withdrawing consent. Turn the feature's switch off in Settings > Privacy. Nothing more is sent from then on. Turning off cloud backup also deletes the copy in your account. Withdrawing does not affect what was done before.
Not automated decisions. The AI's results are cosmetic estimates shown to you. No decision with legal or similarly significant effects is made about you (Art. 22 GDPR).
Special category data: the pregnancy answer. The quiz asks whether you are pregnant or breastfeeding (Yes, No or Prefer not to say). It changes which ingredients the app flags, retinoids above all, and whether the app offers Vector ONE. This answer is data concerning health (Art. 9 GDPR). Where it goes:
- It is saved in the app on your phone.
- It is sent to Anthropic only with an ingredient reading, and only while Ingredient reading is on. The face analysis and the weekly note never carry it.
- It is kept in your account only while Cloud backup is on.
- The legal basis is your explicit consent to that feature (Art. 9(2)(a)). You can answer Prefer not to say, change the answer in Settings, or turn either feature off at any time.
Skin observations (the comparison numbers, the skin answers of the quiz and the ingredient readings) are treated the same way: explicit consent per feature, off until you turn it on.
5. The same-person check
Every AI comparison asks the model whether both photos plausibly show the same face, so only your own skin is compared. It never identifies, recognises or names anyone and builds no face template or profile. If the photos look like different people, you get no numbers and are asked to take a new photo; with cloud backup on, that outcome is kept with the scan's numbers as a "different person" note. This check is part of the face analysis and covered by the same explicit consent.
6. Vector ONE months: how the matching works
Vector ONE is a night cream sold in our web shop (run on Shopify). When an order with Vector ONE is paid, the shop sends us the order. We keep only a keyed hash of the order email, the order id, the number of Vector ONE jars, the order and payment times and the order's status, and drop everything else at once (name, address, phone, price, payment details are never stored). The hash is keyed so a copy of the table does not reveal email addresses, but it is still personal data.
If you ask for your Vector ONE months in the app, you confirm your email with a 6-digit code (or use the email of the account you are signed in to). We then compare the hash of that email with the stored order hashes and give the months to your account: 6 months for each Vector ONE bottle in the order, so two bottles give a year. From then on we keep a hash of your account email, so later orders with the same email are added by themselves. This links your app account with your shop orders; we use the account email for this only after you ask for your months.
7. Who helps us (processors) and transfers outside the EU
| Recipient | Role | What it receives | Where | Safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Processor: our servers (database, accounts, server functions) | Your account (account id, email if you added one, sign-in sessions), your cloud backup while it is on, the AI usage counters and request ids, your membership status and the Vector ONE records of section 6. AI requests pass through its server functions on their way to Anthropic and are not written anywhere | EU: West EU (Ireland). Supabase, Inc. is based in the USA | Supabase's Data Processing Addendum |
| Anthropic PBC | Processor: the AI model behind the face analysis, ingredient reading and weekly note | Each AI request as listed in section 4, the photos included for the face analysis and the ingredient reading, and nothing else. Anthropic does not train on them and may keep a request for up to 30 days to check for misuse (below) | USA | Anthropic's Data Processing Addendum with the Standard Contractual Clauses |
| RevenueCat, Inc. | Processor: in-app purchase checking and membership status | Only for people who open the membership page, buy or restore, or on a phone that already bought: your account id (a random code); the store's transaction data (receipt or purchase token, product ids, transaction ids, purchase, renewal and expiry dates, prices and currency, storefront country, sandbox or production, refund and billing-issue events, also from the stores' server notifications); technical data of the app's requests (device type and operating system version, app and SDK version, language and currency code, IP address); from our server, the same account id and the end date of any Vector ONE months. Never your email, name, phone, address, age, skin data, photos, quiz answers, consents, routines or other app content, no advertising id or device identifiers, and no Shopify data | USA | RevenueCat's Data Processing Addendum |
| Sendinblue SAS (Brevo) | Processor: sends the 6-digit sign-in and email confirmation codes | Your email address, the code and the email's language, and its delivery log | EU (France) | Brevo's Data Processing Agreement |
| Apple and Google | Independent controllers under their own terms: they run the app stores and take the payment for membership | Your purchase, under your Apple Account or Google account; we never see card details | Their own | Their own privacy policies |
| Shopify | Our web shop's processor (the shop has its own privacy policy) | Sends our server paid, cancelled and refunded orders that contain Vector ONE. We keep only a keyed hash of the order email, never the email itself, and the order facts of section 6. Nothing flows from the app to Shopify | As set out in the shop's data processing agreement | As set out in the shop's data processing agreement |
Anthropic does not use API data to train its models. Until Zero Data Retention is confirmed to us in writing, Anthropic may keep an AI request, the photos included, for up to 30 days to check for misuse (longer if a request is flagged), and a request its safety systems decline may be sent once more to a second Anthropic model under the same terms.
Each processor is bound by a data processing agreement to protect your data to the same standard as this notice and to use it only on our instructions.
8. How long we keep data
| Data | Kept |
|---|---|
| Photos, quiz answers and everything else in the app on your phone | Until you delete it in the app, choose Delete everything, or delete the app |
| Photos and data in an AI request | Our servers: only in the memory of that request, never written or logged. Anthropic: up to 30 days for misuse checks (longer if flagged) |
| Request ids | 1 day |
| AI usage counters | 30 days |
| Cloud backup | Until you turn cloud backup off (which deletes it) or delete your account |
| Account without an email (anonymous) | Deleted with all its data after 6 months without any activity, unless it holds an active or recently ended membership or running Vector ONE months |
| Account with an email | Until you delete it |
| Sign-in sessions (IP address, user agent) | While the session exists, and deleted with the account |
| Sign-in code emails at our email provider | For the provider's delivery log period; a code stops working after 10 minutes |
| Membership status on our servers | While the account exists |
| Purchase data at RevenueCat | Deleted when you delete your account |
| Vector ONE orders not claimed | 12 months after payment (the claim window); cancelled or refunded: 30 days |
| Vector ONE orders claimed | Until 12 months after the months they gave ended; after an account deletion, 30 days without any link to the account |
| Hash of your account email for Vector ONE | While the account exists |
| Webhook delivery ids (no personal data) | 30 days |
| Server and platform logs | For our hosting plan's log retention period |
| Support emails | For a limited period after the case is closed |
9. Your rights and how to delete
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Write to us at the address in section 1. We answer within one month.
- Delete everything in the app: Settings > Privacy > Delete everything. It deletes your account and everything on our servers at once (cloud backup, membership status, AI counters, the Vector ONE link, and your customer at RevenueCat), then everything on your phone. Deleting your account does not cancel a membership bought in the App Store or Google Play: cancel it there first.
- Delete by email: if you no longer have the app, write to us from the email linked to your account. Details on our account deletion page: primelongevity.app/delete-account.
- Export: Settings > Privacy > Export my data gives you the app's data from your phone as a file (face photos are not in the file). Your account email and the AI counters on our servers are not in it yet; ask us for them.
- Withdraw consent: turn the feature's switch off in Settings > Privacy (section 4).
You can complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk, or to the authority where you live or work.
10. Age
Prime Longevity is made for people aged 16 and up. We do not knowingly process data of anyone younger.
11. Security
Data travels over encrypted connections (HTTPS). Our database is in the EU and every table is protected by row level security, so an account can reach only its own data. AI requests are checked before they leave our servers, and photos are never written to disk or logs on our side.
12. Changes
We will update this notice when the app changes what it does with data, and say so in the app before a change that needs your consent.