Legal
Privacy Policy
What we collect, why, who sees it, and how you stay in control.
Last updated: September 29, 2026
The short version
We collect what we need to make LifeLeaf work and to keep you informed. We do not sell your personal information, and we do not share your health data with advertisers. You can see what we hold, correct it, export it, or delete it — permanently — at any time. If you read one thing, read our Consumer Health Data Privacy Notice.
Who we are
LifePlus, Inc. (“LifePlus,” “we,” “us”) makes LifeLeaf. Our registered address is 1625 The Alameda, Suite 406, San Jose, CA 95126. For any privacy question, write to privacy@lifeplus.ai — a person reads it.
What we collect
When you visit this website. Pages viewed, approximate location from your IP address, the site or ad that referred you, device and browser type, and the campaign parameters in the link you clicked. We measure this with Google Analytics, described below.
When you join the list, reserve, or take a quiz. Your email address, your answer to “What brings you to LifeLeaf?”, any quiz or calculator answers, the campaign parameters that brought you, and a record of your consent and when you gave it.
When you pay us $2 to reserve, or buy a device. Your name, billing and shipping address, and order details. Your card number never touches our systems — Shopify processes payments and holds card data under its own terms. Checkout runs on Shopify and Shop Pay (shop.app), which apply their own privacy policies to what you enter there.
When you set up your account. Your age, sex, height, weight and skin type. LifeLeaf uses this profile, together with the signal from your wrist, to calculate every reading — the way a scale needs your height to work out BMI — so it is required to use LifeLeaf, not an optional setting. You can correct it at any time in your account.
When you use LifeLeaf and the app. Sensor readings, the scores and trends we calculate, the mode you chose and the setup answers you gave it, your interactions with coaching, and technical logs. Most of this is consumer health data and is governed by the Consumer Health Data Privacy Notice, which takes precedence for that data.
When you contact us. Whatever you tell us, plus the record of the exchange.
Google Analytics
We use Google Analytics, a service of Google LLC, to count visits and to see which pages, links and campaigns bring people to LifeLeaf, to the waitlist and to the $2 reservation.
- What it receives: the page you are on, the page or ad that sent you, the campaign parameters in the link, your approximate location, your device and browser type, and whether you joined the list or reserved.
- What it never receives: your name, your email address, your quiz answers, or anything the device or app measures about your body.
- Cookies: it sets two first-party cookies,
_gaand_ga_13WDMMPYPS, to recognise a returning browser. They last up to two years in your browser unless you delete them. - How long Google keeps it: 14 months, after which user-level data is deleted.
- What we have switched off: Google signals and advertising features, so this data is not used to build advertising profiles or to follow you across other sites.
- Your control: in the United States analytics cookies are on by default, and you can turn them off at any time in Cookie settings, with a Global Privacy Control signal, or with Google’s opt-out browser add-on. In the EEA and the UK they stay off until you say yes.
Google explains how it uses this data at policies.google.com/technologies/partner-sites.
Why we use it
To provide LifeLeaf and the app · to calculate your scores and coaching · to take and fulfil orders and manage your subscription · to honour your warranty · to answer you when you write · to send the emails you asked for, and stop when you say stop · to understand how the site performs · to keep everything secure and detect fraud · to meet our legal obligations.
We use marketing analytics and advertising tools on this website — but not on your health data. Advertising and measurement tools see website behaviour (which page, which ad, whether you joined the list). They do not receive your sensor readings, your scores, your mode, your coaching, or anything else the app generates about your body.
Who we share it with
Service providers, under contract. Hosting and infrastructure · email delivery · payments, commerce and subscription billing (Shopify) · order fulfilment and shipping · customer support tooling · website analytics (Google Analytics). Each is bound to use your data only to provide that service to us.
Research and product improvement, de-identified. We may use aggregated or de-identified data to improve our algorithms, develop the product, and in scientific research and publications. Data is first stripped of information that identifies you, and we commit not to attempt to re-identify it and to require the same of anyone we share it with.
Your clinician or care team — only when you ask. If you use Reports to share a summary, it goes where you send it, when you send it. We never send it on your behalf.
Legal. If required by law, or to protect someone’s safety or our rights. We will tell you unless we are legally prevented.
In a business transaction. If we are acquired or merged, data may transfer. Your rights under this policy travel with it, and we will notify you.
We have never sold personal information, and we do not share it for cross-context behavioural advertising. If that ever changes we will tell you first and give you a way to say no.
How long we keep it
Account and health data for as long as your account is active, and for 24 months after you close it, unless you ask us to delete it sooner — in which case we delete it. Order and warranty records for as long as tax, consumer and warranty law require. Marketing contacts until you unsubscribe, plus a suppression record so we do not email you again by mistake. Website analytics for 14 months. De-identified data indefinitely.
A lapsed subscription is not a closed account. If your subscription ends, your data is preserved and remains exportable. Retention is measured from account closure, not from lapse.
Your choices and rights
Wherever you live, you can ask us to show you what we hold, correct it, export it in a portable format, delete it, or stop emailing you. Write to privacy@lifeplus.ai or use the controls in your account. We respond within 45 days and will not treat you differently for asking.
If you are in California, you additionally have the rights described in the CCPA/CPRA, including to know the categories collected and disclosed, to opt out of sale or sharing (we do neither), and to limit the use of sensitive personal information. You may designate an authorised agent. We honour Global Privacy Control signals, and a Global Privacy Control signal also turns off analytics cookies on this site.
If you are in Washington, Nevada or Connecticut, your health data rights are in the Consumer Health Data Privacy Notice.
If you are in the EEA or the UK, see the addendum below.
If you are in Canada, you have access and correction rights under PIPEDA, and if you are in Quebec, the additional rights under Law 25.
EEA and UK addendum
We process your data on these bases: to perform our contract with you; with your consent (marketing, analytics cookies, and health-data processing, withdrawable at any time); and for our legitimate interests in securing the service and preventing fraud, where those interests do not override your rights.
Health data is special category data under Article 9 and we process it only on your explicit consent. Withdraw it and we stop, and delete on request.
You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your supervisory authority. Data is processed in the United States under appropriate safeguards, including Standard Contractual Clauses where required. Google Analytics data is processed by Google in the United States and elsewhere under Google’s data processing terms.
Security
Encryption in transit and at rest, access limited to staff who need it, and regular review. No system is perfectly secure and we will not claim otherwise. If a breach affects your data we will notify you as required by law, including under the FTC’s Health Breach Notification Rule where it applies.
Children
LifeLeaf is for adults. You must be 18 or older to buy a device or create an account. We do not knowingly collect data from anyone under 18, and if we learn we have, we delete it.
Changes
For a material change we will email you and post notice before it takes effect. Previous versions remain available.
Contact
privacy@lifeplus.ai · LifePlus, Inc., 1625 The Alameda, Suite 406, San Jose, CA 95126