Privacy Policy

Notice: Longevity Germany and the international chapters (Longevity Cities) are community brands of Valteris GmbH. This privacy policy applies uniformly to all services offered by Valteris GmbH under these brands.

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

2. Hosting

We host the content of our website with the following provider:

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Data Protection Officer

We have not appointed a Data Protection Officer. As a micro-enterprise we do not meet the threshold of § 38 BDSG (at least 20 persons continuously engaged in the automated processing of personal data). Our assessment under Art. 37(1)(b) and (c) GDPR is that our core activities do not consist of large-scale, regular and systematic monitoring of data subjects or large-scale processing of special categories of data: biometric analyses run transiently at your request and are not stored, and health entries are stored only for individual members with their explicit consent. We review this assessment regularly, in particular as our health and biometric features and our membership grow, and will appoint a Data Protection Officer as soon as a statutory threshold is met.

For all data protection enquiries, please contact us at:

Email: info-nospam@longevity-germany.com

We are committed to protecting your personal data and ensuring compliance with all applicable data protection regulations.

Competent Supervisory Authority

The competent data protection supervisory authority for our company is:

You have the right to lodge a complaint with this supervisory authority if you believe that the processing of your personal data violates the GDPR.

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay. We will inform you about:

• The nature of the personal data breach
• The likely consequences of the breach
• The measures taken or proposed to be taken to address the breach and mitigate its possible adverse effects
• Contact point for more information and support

We will notify the competent supervisory authority within 72 hours of becoming aware of a breach, as required by Article 33 GDPR. If the notification is not made within 72 hours, we will provide reasons for the delay.

We have implemented appropriate technical and organisational measures (Art. 32 GDPR) to reduce the risk of data breaches, including access and authentication controls, TLS encryption in transit, data minimisation (e.g. IP-address truncation), and the security monitoring provided by our infrastructure providers (Cloudflare WAF, our hosting provider and MongoDB Atlas). Should we become aware of a breach, we will respond and notify as described above.

Minimum Age for Use of Our Service

Records of Processing Activities (Article 30 GDPR)

We maintain detailed records of all processing activities under our control, as required by Article 30 GDPR. These records document:

• Name and contact details of the controller and, where applicable, the joint controller and data protection officer
• Purposes of the processing
• Categories of data subjects and categories of personal data
• Categories of recipients to whom personal data have been or will be disclosed
• Where applicable, transfers of personal data to third countries or international organizations
• Envisaged time limits for erasure of different categories of data
• General description of technical and organizational security measures

These records are available for review by the supervisory authority upon request.

We regularly review and update our processing records to ensure they accurately reflect our current data processing activities.

Data Minimization Principle

We adhere strictly to the principle of data minimization as required by Article 5(1)(c) GDPR. This means:

• We only collect personal data that is adequate, relevant, and limited to what is necessary for the specific purpose for which it is processed
• We do not collect excessive or irrelevant data
• We regularly review the data we hold to ensure it remains necessary for the intended purpose
• Once data is no longer needed for its original purpose, it is either deleted or anonymized

Our commitment to data minimization helps protect your privacy and reduces the risk of data breaches.

Automated Decision-Making and Profiling

We do not employ automated decision-making with legal or similarly significant effects within the meaning of Art. 22 GDPR.

The Photo Age Test, rPPG heart-rate scanner and all other tests serve purely as informative self-assessments. The results have no effect on your access to platform features, membership tiers, visibility to other members or any other material aspect of our service. Should we introduce features in the future that could fall under Art. 22 GDPR (e.g. gating certain premium features by biomarker outcomes), we will inform you in advance, ensure human review, and obtain the legal basis required under Art. 22(2) GDPR.

We use analytics tools (such as Google Analytics) for aggregate statistical analysis, service improvement, product development and feature-usage analytics. They do not result in automated decisions that significantly affect individual users.

Any decisions that may affect you (such as responding to contact form inquiries, moderation actions, or certification decisions) involve human review and are not made automatically by algorithms.

4. Data Collection on this Website

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place for all international transfers:

For transfers to countries that have been granted an adequacy decision by the European Commission, no additional safeguards are required.

You have the right to obtain information about the safeguards we have implemented for international transfers and to receive a copy of the Standard Contractual Clauses where applicable. Please contact us if you would like to exercise this right.

Affiliate Programs, Barter and Related-Party Content

We do not currently operate any affiliate program. Discount codes and product links shown on the /products page are not monetised: Valteris receives no commission, click-through fee, or per-redemption payment from the partners listed there.

Where products or services are provided to us free of charge for events, testing or coverage (barter), and where content concerns products or services of companies in which members of our management or team hold a commercial interest, the related content is labeled "Werbung" even where no payment flows.

Should we ever introduce commercial affiliate links, they will be clearly marked "Werbung", "Anzeige", or "Ad" in line with § 6 DDG, § 5a UWG, and § 22 Abs. 1 MStV; this Privacy Policy will be updated accordingly, and any cookies or comparable technologies for affiliate purposes will only be deployed on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

5. Social Media Profiles

6. Plugins and Tools

Detailed Cookie Information

Below is specific information about the cookies used on our website, including their purpose, type, and lifespan:

localStorage: In addition to cookies, we use browser localStorage for entries that stay on your device and are not transmitted to our servers (except the consent record itself): (i) your cookie consent choice (cookie_consent) and granular cookie category preferences (cookie_preferences); (ii) test progress and draft entries for the Pace of Aging and Longevity Check flows; (iii) interface language and comparable interface preferences; (iv) location preferences (IP-detected location, manually selected city, precise GPS coordinates if granted) and notification dismissal status. These entries persist until you clear browser data or revoke consent.

You can manage cookie preferences through our cookie consent banner (cookie settings link in the footer) or through your browser settings. On withdrawal of analytics consent, the Google script is removed and _ga cookies are expired across domain variants. Note that disabling necessary cookies may affect website functionality. For the complete, always-current list, see our Cookie Policy.

Data Processors (Article 28 GDPR)

We engage the following data processors who process personal data on our behalf. All processors are bound by written data processing agreements compliant with Article 28 GDPR:

You have the right to request information about our data processing agreements and the safeguards we have implemented. Contact us at info [at] longevity-germany.com.

Our processors may engage sub-processors. We ensure that all sub-processors are bound by equivalent data protection obligations.

Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specific retention periods are:

After expiry of the applicable retention period, personal data will be deleted automatically unless deletion is prevented by mandatory legal retention obligations. You can request earlier deletion where permissible by law.

How to Exercise Your Data Protection Rights

To exercise any of your rights under the GDPR (access, rectification, deletion, restriction, portability, objection), please follow this procedure:

Exercising your rights is free of charge. Under Art. 12(5) GDPR we reserve the right, in cases of manifestly unfounded or excessive requests (in particular repeated bulk-export requests within short intervals), to charge a reasonable fee or refuse to act; we will explain our reasoning when invoking this provision.

For complex requests, particularly data portability requests or requests involving large volumes of data, we may contact you to clarify the exact scope of information you require and the preferred format for delivery.

7. Analysis Tools

Transactional & Notification Emails

We send a small number of operational emails to support the community features of the platform. You can granularly opt out of non-essential notifications in your account settings (emailPreferences).

Legal Basis: Transactional emails directly tied to a feature you actively use (partner requests, challenge lifecycle) are processed on the basis of Art. 6(1)(b) GDPR (contract). Notifications and reminders are processed on the basis of Art. 6(1)(f) GDPR (legitimate interest) and can be opted out of at any time via the 'Email preferences' card in Settings.

Processor: Emails are delivered by Brevo (Sendinblue SAS, Paris, France) under a DPA: see Data Processors section above.

You can manage these preferences at any time at /settings under 'Email preferences'.

Push Notifications (Browser & Mobile Apps)

If you enable push notifications in Settings (in your browser or in our mobile apps), we store a device-specific push subscription (push endpoint or device token, browser/device user agent, interface language) so we can deliver short notifications about matches, challenges and coffee chats to that device. Enabling push is always an explicit opt-in via your browser or operating system permission prompt. You can disable it at any time via the same toggle in Settings or in your device settings; the subscription is then deleted.

Legal Basis: Art. 6(1)(a) GDPR (consent), given via the browser/operating-system permission prompt together with the push toggle in Settings. You can withdraw consent at any time via the same toggle with effect for the future.

Processor: Delivery is technically routed through the push service of your browser or device vendor: Google Firebase Cloud Messaging (Google Ireland Ltd.) for Chrome, Android and our iOS app, and the Apple Push Notification service (Apple Distribution International Ltd.) for Apple devices. These services receive the delivery token and the message envelope; message content is limited to short notification texts (no health data). Transfers outside the EU are safeguarded by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

Retention: A push subscription is deleted when you disable push for the device, when the push service reports the device token as no longer valid, automatically after 12 months without re-confirmation, and in any case when your account is deleted.

You can manage push notifications at any time at /settings under 'Push Notifications'.

Health and Biometric Data: Full Inventory

For transparency, this is the complete list of health-related data categories the Service can process. All entries are health data under Art. 9 GDPR and are processed only with your explicit consent (Art. 9(2)(a) GDPR). Camera-derived values are processed at your request per scan; device-synced metrics only after you connect Apple Health / Health Connect; the remainder are values you enter or save yourself. Where you explicitly choose to save a test or measurement to your profile, it is stored as a typed entry in the bioMetrics collection.

Legal Basis: Explicit consent (Art. 9(2)(a) GDPR). You can delete any individual biomarker entry, or all of them at once, from your profile at any time.

Retention: Stored for the lifetime of your account and deleted immediately when your account is deleted, unless you delete entries earlier.

In-Person Longevity Checks (LongevityCheckResult)

At in-person events, chapter leads may offer voluntary Longevity Check sessions (simple functional measurements such as grip strength or balance). Participation is limited to persons aged 18 or over. Aggregated, pseudonymised event statistics may be created where you have consented; they do not identify you.

Legal Basis: Processing requires your explicit consent (Art. 9(2)(a) GDPR), captured in the digital test flow before any data is stored: anonymous participants confirm a consent notice on the details form before results are saved; participants who save results to an account confirm the health-data consent at the save or sign-up step.

Retention: For anonymous event participants (no linked account), raw identifiable results are retained for 12 months after the event date and then deleted or irreversibly anonymised. For participants linked to an account, results become part of their bioMetrics, follow the account-lifetime retention rule and can be deleted at any time.

Matching & 'Heart' Affinity

The platform offers a mutual-match feature ('Hearts') that lets members express interest in another member. A match is only revealed when both sides have expressed interest.

Legal Basis: Contract (Art. 6(1)(b) GDPR): providing the social feature you opted into.

Retention: Hearts persist until you remove them or delete your account.

Activity Lobbies (ActivityRequest)

You can post short-lived activity lobbies (e.g. morning run, yoga session, sauna, cold-plunge) that other members can join.

Legal Basis: Contract (Art. 6(1)(b) GDPR).

Retention: Lobbies are automatically deleted 7 days after their expiresAt timestamp via a MongoDB TTL index.

Moderation State (isGhosted / isBanned)

To keep the community safe and welcoming, moderators may mark an account as 'ghosted' (reduced visibility in feeds) or 'banned' (access revoked). We are transparent that these flags exist.

You have a right under Art. 15 GDPR to know whether any moderation flag has been applied to your account and on what basis. To exercise this right, contact info [at] longevity-germany.com and reference 'Moderation state request'.

Legal Basis: Legitimate interest in community safety and Terms-of-Service enforcement (Art. 6(1)(f) GDPR).

Retention: Moderation flags persist for the lifetime of the account and are removed when the account is deleted.

Onboarding & Engagement Telemetry

We record a small amount of onboarding state so the product does not repeat tutorials or show dismissed introduction cards again.

Legal Basis: Legitimate interest in improving onboarding and not repeatedly showing dismissed content (Art. 6(1)(f) GDPR).

Opt-out: You can reset all of these values, or opt out of onboarding telemetry entirely, from your account settings.

Protection Against Fake Registrations

When you register, we store a small set of technical metadata alongside your account: a truncated IP address (the last IPv4 octet or the last 80 IPv6 bits are set to zero), a browser identifier (User-Agent) capped at 256 characters, and a timing value in milliseconds until your first interaction with the registration form. This data is used solely to detect and prevent abusive or automated account creation (bots, fake registrations). It is not used for advertising, profiling or automated decision-making, and it is not shared with third parties.

Legal Basis: Our legitimate interest in preventing abusive account creation and securing the Service (Art. 6(1)(f) GDPR).

Retention: Stored as part of your account record and deleted when your account is deleted.

Anonymous Likes & Flags (IP handling)

Some interactions are available without an account: liking an article (ArticleLike) and flagging a map spot for moderation (SpotFlag).

To prevent abuse (ballot-stuffing, vandalism) while still protecting you, we only store a truncated form of the IP address: the last octet is discarded (/24 truncation) at the moment of writing. We do not log the full IP for these actions.

• ArticleLike: truncated IP retained for 12 months, then the full record is deleted.
• SpotFlag reporter IP: truncated IP retained for 24 months, then the full record is deleted.

Legal Basis: Legitimate interest in moderation and abuse prevention (Art. 6(1)(f) GDPR).

Certification Program

If you apply for certification as a longevity provider, speaker, or partner, we collect and process company information, application answers, and qualification data.

Legal Basis: Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures for application processing) and Art. 6(1)(f) GDPR (legitimate interest in community-driven quality assurance for voting).

Retention: Application data is retained for audit purposes. You may request deletion after your application has been processed.

Gamification & Social Features

To enhance community engagement, we track activity points (XP), achievement badges, login streaks, and levels.

Legal Basis: Art. 6(1)(b) GDPR (service provision) and Art. 6(1)(f) GDPR (legitimate interest in community engagement)

Visibility: Your XP, level, and activity can be hidden via privacy settings in your profile.

Referral Program

If you participate in our referral program, we track your referral code, who referred you, and your registration type (open, referral, or beta).

Legal Basis: Processing is based on Art. 6(1)(b) GDPR (service provision) and Art. 6(1)(f) GDPR (legitimate interest in community growth).

Data Export (Right to Data Portability)

You can export all your personal data at any time through your account settings. The export includes your profile information, health stack data, activity history, achievements, and all other personal data we store about you.

Data is provided in JSON format, which is machine-readable and can be imported into other services.

This feature implements your right to data portability under Article 20 GDPR.

Account Deletion and Data Export

You can delete your account at any time via your profile settings. Deletion is performed immediately and includes:

• Full deletion: account data, Health Stack, activities, achievements, notifications, Heart connections, Longevity Check results, challenge participations, partnership requests.
• Anonymisation instead of deletion: contributions to community articles and suggested spots are anonymised (your name is replaced with a placeholder) to preserve the integrity of public community content.
• Brevo contact: your newsletter data is deleted at Brevo.

Retention of consent records (ConsentLog): Due to our accountability obligation under Art. 7(1) GDPR, we retain a reduced audit record of consents you have granted and revoked after account deletion. This contains only hashed/pseudonymised technical metadata (hashed IP, hashed user agent, timestamp, consent type, version); direct personal identifiers are removed. It is kept for the applicable statutory limitation periods (as a rule three years from the end of the year of account deletion, §§ 195, 199 BGB) and then deleted. Legal basis: Art. 6(1)(c) GDPR.

Data Export: You can request an export of your personal data in machine-readable JSON format at any time via your profile settings (Art. 20 GDPR). Deletions are re-applied after any restore from backup, so that data deleted at your request does not reappear (see "Encrypted Backups and Deletion Latency").

Health Information Disclaimer

Content on the Service is educational and is not medical advice; see our Medical Disclaimer for details. In case of a medical emergency, contact your local emergency services immediately.

For all contractual matters (liability, warranties, user responsibilities, data accuracy, governing law and jurisdiction), our Terms of Service apply; this Privacy Policy governs data protection only.

Changes to This Privacy Policy

We review and update this privacy policy as our services and legal obligations evolve. The current version always reflects our actual processing practices.

Material changes will be announced with at least 30 days' prior notice via email (if we have your address) or an in-product banner. If consent-based processing is affected, we will request fresh consent rather than relying on continued use. The 'Last updated' date at the top of this page indicates when the current version took effect.

Where new or expanded processing materially widens the scope of what you previously consented to under Art. 6(1)(a) or Art. 9(2)(a) GDPR, we will obtain fresh consent. For other changes (including additions of processors, minor feature adjustments, legal-basis clarifications, and editorial rewording), we will update this policy and, where required by law, notify you; your continued use of the Service after the effective date of the change constitutes acknowledgement of non-consent-based changes, without prejudice to your right to object under Art. 21 GDPR or to withdraw any existing consent.

Previous versions of this privacy policy are available on request via info [at] longevity-germany.com.

Regional Privacy Notes

We operate a multi-region platform. The GDPR/BDSG framework above applies to all users because the controller is established in the EU. In addition, the following region-specific notes apply.

Possible Future Use of Public Profile Content

Should we wish to use publicly visible profile content (avatar, bio excerpts, public achievements) for marketing purposes (e.g. newsletters, social media), we will do so only in a factual, non-endorsing manner and within the scope of your public profile visibility. For use in investor presentations, editorial pieces quoting health-related claims, or commercials, we will obtain your separate, dedicated consent in advance. You may object at any time by emailing info [at] longevity-germany.com.

Aggregated and Anonymised Statistics

We may create, publish and use aggregated and fully anonymised statistics derived from Service data (for example: 'X% of Munich members reported a vascular age under 40', or 'average grip strength by chapter'). Such outputs do not permit re-identification of individual users and are not considered personal data within the meaning of the GDPR. Aggregated outputs may be used indefinitely for editorial, research, marketing, and partnership purposes. Legal basis for the production of such outputs: Art. 6(1)(f) GDPR (legitimate interest in statistical and editorial reporting) and Art. 89 GDPR.

Service Improvement and Future Model Training

We may evaluate pseudonymised and aggregated usage data to improve the quality, accuracy and performance of our service. At present, we do not train our own models on pseudonymised user data. Should we introduce such processing in the future, we will update this privacy policy accordingly and, where a change in legal basis is required, obtain fresh consent. We do not share user content with external generative-AI providers for their own model training.

A/B Testing and Product Experiments

We may assign you to product experiments (A/B tests) to evaluate changes to the user interface, onboarding flows, copy variants, and recommendation heuristics. The assignment uses pseudonymous identifiers. To the extent that tracking data is collected, it is captured exclusively client-side via Google Analytics (after active consent). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in service improvement). You may object by disabling analytics consent in our cookie banner or by emailing info [at] longevity-germany.com.

Changes to Our Processors

We may engage, change, or remove processors and sub-processors at any time to operate, improve, secure, or scale the Service. Changes to our processor list will be reflected in this Privacy Policy. Where a change does not alter the category of processing or the legal basis, no fresh consent is required; your right to object under Art. 21 GDPR is unaffected. An up-to-date list of processors is always available in this Policy, and specific details of any individual processor can be requested at info [at] longevity-germany.com.

Anonymisation as an Alternative to Deletion

When you request deletion of your account (Art. 17 GDPR), you may choose between: (a) complete deletion of your personal data (subject to mandatory retention for legal and tax purposes), or (b) anonymisation, in which we replace your username and identifiers in our database with a non-identifying marker while preserving the pseudonymised record of your contributions to community outputs (for example: authored articles, chapter-lead role history, community voting records, leaderboard entries, and historical challenge participation). Anonymised records are retained indefinitely for community integrity, scientific research and statistical purposes under Art. 17(3)(d) and Art. 89 GDPR. The default in our deletion UI is complete deletion; anonymisation must be expressly chosen.

Transfer of Personal Data in Merger, Acquisition or Restructuring

In the event of a merger, acquisition, asset transfer, reorganisation, bankruptcy or similar transaction involving Valteris GmbH or the Service, personal data may be transferred to the successor entity as a business asset, provided that the successor accepts obligations no less protective of your rights than those set out in this Privacy Policy. We will notify you in advance via email or in-product banner where feasible. You will retain your Art. 17 erasure and Art. 20 portability rights against the successor.

Encrypted Backups and Deletion Latency

Encrypted backups of our database are created automatically and retained on a rotating basis for a maximum of ninety (90) days, on EU infrastructure. During that window, backups are logically inaccessible and would only be restored in disaster-recovery scenarios. Once the relevant snapshot expires, the data is irreversibly erased. If a backup is restored, deletions and consent withdrawals performed in the meantime are re-applied so that deleted data does not reappear.

Breached Password Check at Registration

When you create a new account, we check your chosen password against the free "Have I Been Pwned" service (haveibeenpwned.com) to prevent the use of passwords that are already known from public data breaches. The check uses a k-anonymity procedure: only the first 5 characters of a cryptographic hash (SHA-1) of the password are transmitted from our server. The password itself, your email address, and any other identifying information never leave our server, and the transmitted fragment can be neither linked to you nor used to reconstruct your password; no personal data is disclosed to the service. The legal basis is our legitimate interest in the security of user accounts pursuant to Art. 6(1)(f) GDPR (Recital 49). If the service is temporarily unavailable, registration proceeds without this check. Existing accounts are not checked.

Retention of Consent Records

We retain consent records (cookie consent receipts (ConsentLog), newsletter double-opt-in records, photo-upload consents, and biometric and health-data consent timestamps) for the duration of your account plus the applicable statutory limitation periods (as a rule three years from the end of the year of account deletion, §§ 195, 199 BGB), to demonstrate consent under Art. 5(2), Art. 7(1) and Art. 24 GDPR and to defend legal claims; they are then deleted. After account deletion the record is reduced to hashed/pseudonymised technical metadata, stored in a segregated collection, and not used for any other purpose.

Third-Party Personal Data in Your Submissions

You warrant that any content you submit to the Service (including bio text, goals, routines, activity descriptions, event photos, spot submissions) does not contain the personal data of identifiable individuals other than yourself unless you have their permission to publish. You act as an independent controller for any such third-party data under the GDPR. Our Terms of Service contain a corresponding indemnity provision.

Severability

If any provision of this privacy policy is found to be unenforceable or invalid under applicable law, such unenforceability or invalidity shall not render this privacy policy unenforceable or invalid as a whole. Such provisions shall be modified or deleted to the minimum extent necessary to make them enforceable, and the remaining provisions shall continue in full force and effect.

Contact

If you have questions about this privacy policy or the processing of your personal data, you can contact us at any time: