AfterBody Health Privacy Policy

Last Updated: April 2, 2026

1. Introduction

AfterBody Health LLC ("AfterBody," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the AfterBody Health mobile application and related services (collectively, the "App" or "Services"). By using the App, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Services.

This policy applies to all users of the AfterBody Health App, including participants in our Founders Circle beta program.

2. Who We Are

AfterBody Health LLC is a general wellness company operating the AfterBody Health App. We are not a healthcare provider, medical device manufacturer, or covered entity under HIPAA. Our Services are designed for general wellness and habit-tracking purposes only.

Contact: privacy@afterbodyhealth.com

3. Information We Collect

3.1 Information You Provide Directly

• Full name and email address (account registration)
• Biological data: sex, age, height, current and target weight
• GLP-1 medication context: compound type, phase of use, appetite baseline
• Symptom data: self-reported scores for fatigue, bloating, brain fog, gut health, mood, and sleep quality
• Lifestyle data: kitchen time, meal prep preferences, equipment access, movement preferences
• Goals: primary fitness and performance objectives
• Meal photos and nutrition logs
• Workout session data including timer activity
• Daily habit check-in responses (supplement, nutrition, movement, survey completion)

3.2 Information Collected Automatically

• App usage and interaction data (screens visited, features used, session duration)
• Habit compliance and streak data
• Protocol progression and league tier data
• Device identifiers and operating system information
• Crash reports and diagnostic data
• Push notification engagement data

3.3 Information from Third-Party Services

• Firebase Authentication (login credentials and session tokens)
• Sentry (crash and error diagnostics)

We do not currently integrate with third-party advertising networks or data brokers.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Protocol Generation: To generate your personalized 90-day nutrition, fitness, and supplementation protocol using AI-assisted analysis of your intake data.
• App Personalization: To customize your Tree of Life dashboard, league standing, habit reminders, and daily surveys based on your profile.
• Analytics: To understand how users interact with the App, measure protocol adherence, and improve our services.
• Communications: To send you protocol-related emails, progress updates, habit reminders, and important service notifications via push notification and email.
• Developer Marketing: To send you AfterBody-related communications about products, protocol updates, or new offerings, where you have not opted out.
• Research: To produce anonymized, aggregated cohort data about GLP-1 user behaviors and protocol adherence. This data does not identify individual users.
• Safety and Compliance: To detect and prevent fraud, abuse, and violations of our Terms of Service.
• Legal Obligations: To comply with applicable laws and respond to lawful requests.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share data with trusted third-party vendors who assist in operating our Services:

• Google Cloud (Firebase, Cloud Run) — infrastructure and authentication
• MongoDB Atlas — database storage
• Upstash — task queue infrastructure
• Resend — transactional email delivery
• Anthropic — AI protocol generation
• Sentry — error monitoring and crash diagnostics
• Expo / Apple — app distribution

All service providers are contractually required to protect your data and use it only for the purposes we specify.

5.2 Aggregated Research Data

As part of our Founders Circle program, we may publish anonymized, aggregated behavioral data (e.g., average habit adherence rates, protocol completion percentages). No individual user is identifiable in any published dataset.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights and safety of AfterBody, our users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Health and Sensitive Data

The App collects health-related information including symptom scores, fitness data, medication context, and meal logs. This data is:

• Used exclusively to personalize your protocol and track your progress
• Stored securely using industry-standard encryption
• Linked to your account and never sold to third parties
• Never used for third-party advertising targeting
• Shared in aggregated, anonymized form only for research and product improvement

We do not collect data through Apple HealthKit or Google Health Connect at this time.

7. Data Retention

We retain your personal information for as long as your account remains active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or necessary to resolve disputes.

Aggregated, anonymized research data derived from your usage may be retained indefinitely as it cannot be used to identify you.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal information ("Right to be Forgotten").
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a portable format.
• Right to Withdraw Consent: Withdraw consent for data processing at any time, which will not affect the lawfulness of prior processing.
• Right to Opt Out of Marketing: Unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting privacy@afterbodyhealth.com.

California Residents (CCPA): You have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your rights.

Washington Residents: If you are a Washington state resident, you may have additional rights under the Washington My Health My Data Act regarding consumer health data. Please contact us at privacy@afterbodyhealth.com for more information.

To exercise any of these rights, contact us at privacy@afterbodyhealth.com. We will respond within 30 days.

9. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• Firebase Authentication for secure login
• Role-based access controls limiting employee access to user data
• Regular security monitoring via Sentry

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

The App is intended for users 18 years of age and older. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us at privacy@afterbodyhealth.com and we will promptly delete it.

11. Medical Disclaimer

AfterBody Health is a general wellness platform and does not provide medical advice, diagnosis, or treatment. The App is not a substitute for professional medical care. All AI-generated recommendations are for informational and wellness purposes only. Users should always consult their physician or qualified healthcare provider before beginning any nutrition, fitness, or supplementation protocol.

AfterBody Health LLC is not responsible for side effects or complications associated with any medication, including GLP-1 therapies, prescribed by independent physicians.

12. Third-Party Links and Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any information.

13. International Users

AfterBody Health is based in the United States. If you access the App from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the App, you consent to this transfer.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and sending an email notification. The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: