Privacy Policy
Last Updated: November 6, 2026
1. Introduction
Longevity Medicine Certification (“we,” “our,” or “us”) is operated by Jay Park MD LLC, 2292 Faraday Ave #100, Carlsbad, CA 92008, United States. We operate the website at longevitymedicinecertification.com and the web application at app.longevitymedicinecertification.com (together, the “Services”). We respect your privacy and are committed to protecting the personal information you share when accessing or using our Services.
This Privacy Policy explains what information we collect, how we use it, how we store and protect it, when we share it with third parties, and the choices available to you regarding your personal information.
Our Services include professional education and certification resources, clinical reference materials, the Drug Monograph Library, Patient Roadmap Generator, Patient Monitoring App, and other related healthcare education and management tools.
This policy applies to users who access our Services, including healthcare professionals, students, practitioners, administrators, and other authorized users.
By accessing or using our Services, you acknowledge that you have read this Privacy Policy.
2. Information We Collect
We collect information that you provide directly, information generated through your use of our Services, and information received from third-party authentication providers.
2.1 Personal and Account Information
When you register for or use our Services, we may collect:
- Full name
- Email address
- Username and account credentials
- Profile photograph
- Contact information
- Professional information, such as occupation, qualifications, certifications, and healthcare credentials
- Account preferences and settings
- Organization, clinic, or practice information, where applicable
We use this information to create and maintain user accounts, authenticate users, provide access to our Services, and communicate with users.
2.2 Google Sign-In Information
Our application allows users to register or sign in using their Google Account through Supabase Auth.
When you choose Google Sign-In, we request basic Google account information using only the standard OpenID Connect scopes (openid, userinfo.email, and userinfo.profile).
Depending on the information available in your Google Account, we may access the following:
- Google account identifier: A unique identifier used to associate your Google Account with your application account.
- Email address: Used to identify your account, authenticate you, and communicate with you about your account.
- Name: Used to identify you within our application.
- Profile picture: Used to display your profile image within our application, when available.
We use this information only to authenticate users, create or associate application accounts, maintain user profiles, and provide account-related functionality.
We do not request access to Gmail messages, Google Drive files, Google Calendar, Google Contacts, or other Google services as part of our Google Sign-In functionality.
We do not collect or store your Google Account password.
2.3 How We Store and Process Google User Data
We use Supabase Auth as our authentication provider to manage Google Sign-In, user identities, and authentication sessions.
When you sign in using Google, the relevant account information received through the authentication process is processed by Supabase Auth.
We also store relevant account information in our application database to associate your Google Account with your application profile and provide our Services.
This information may include your name, email address, profile image, and unique Google account identifier.
We retain this information for as long as your application account remains active or as otherwise necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements.
Authentication information and session credentials are processed as necessary to authenticate users and maintain secure access to the application.
We do not use Google user data for advertising, sell it, or use it to train generalized artificial intelligence or machine learning models.
2.4 Professional and Educational Information
When you participate in our educational, training, or certification programs, we may collect:
- Professional background and qualifications
- Course enrollment information
- Training progress
- Assessment and examination results
- Certification status
- Course completion records
- Educational preferences
- Communications related to training and certification
We use this information to administer educational programs, track learning progress, issue certifications where applicable, and provide educational support.
2.5 Patient and Healthcare Information
Certain features of our Services may allow authorized healthcare professionals or other authorized users to enter, manage, or access patient-related information.
Depending on the features used, this information may include:
- Patient names and contact information
- Demographic information
- Medical and health histories
- Medications and treatment information
- Clinical observations and monitoring records
- Laboratory results and diagnostic information
- Treatment plans and patient roadmaps
- Clinical notes and documentation
- Patient progress and follow-up information
- Medical photographs or other uploaded clinical files
- Other healthcare-related information entered by authorized users
We process this information to provide the requested patient management, clinical reference, monitoring, and healthcare-related functionality.
Users who submit patient information are responsible for ensuring that they have the appropriate legal authority, permissions, consent, and other required authorizations to provide that information through our Services.
We do not use patient information submitted through healthcare-related features for advertising.
2.6 Payment and Transaction Information
If you purchase subscriptions, certifications, training programs, or other paid Services, we may collect:
- Billing name
- Billing email address
- Billing address
- Transaction identifiers
- Subscription details
- Purchase history
- Payment status
- Other information necessary to process and administer transactions
Payment card information may be collected and processed directly by our payment service providers.
We do not intentionally store complete payment card numbers or card security codes on our application servers.
Payment providers process payment information according to their own privacy policies and security practices.
2.7 Automatically Collected Information
When you access our website or application, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type and operating system
- Access dates and times
- Pages and features accessed
- Referring URLs
- Application activity and interaction information
- Error logs and diagnostic information
- Security and authentication events
We use this information to maintain the functionality, security, performance, and reliability of our Services.
2.8 Cookies and Similar Technologies
Our website and application may use cookies, local storage, session identifiers, and similar technologies to:
- Maintain authenticated sessions
- Remember user preferences
- Support essential application functionality
- Improve website and application performance
- Detect suspicious activity
- Analyze usage and diagnose technical problems
You can manage cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services.
3. How We Use Information
We use personal information for legitimate operational, administrative, educational, and service-related purposes, including:
- Creating and managing user accounts.
- Authenticating users and maintaining secure application sessions.
- Providing access to educational materials, certification programs, and clinical resources.
- Operating the Drug Monograph Library and related reference tools.
- Providing Patient Roadmap Generator and Patient Monitoring App functionality.
- Managing training progress, assessments, and certification records.
- Processing payments, subscriptions, and purchases.
- Communicating account notifications, service announcements, and support responses.
- Maintaining application security and preventing fraud or unauthorized access.
- Troubleshooting errors and improving the reliability of our Services.
- Complying with applicable legal and regulatory requirements.
- Enforcing our terms, agreements, and policies.
We only use information for purposes that are consistent with this Privacy Policy and applicable law.
4. Google API Services User Data Policy
Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
4.1 Limited Use of Google User Data
We use Google user data only to provide or improve user-facing features that are visible and relevant to users of our application.
Specifically, Google user data is used for:
- Authenticating users through Google Sign-In.
- Creating or associating application accounts.
- Identifying users within our application.
- Maintaining account profiles.
- Supporting secure account access and authentication.
We do not use Google user data for targeted advertising, personalized advertising, retargeting, selling data, determining creditworthiness, or unrelated commercial purposes.
We do not sell Google user data to data brokers or information resellers.
We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.
4.2 Sharing Google User Data
We do not sell Google user data or disclose it to third parties for advertising or unrelated purposes.
We may transfer or disclose Google user data to service providers that support the operation of our application, such as our authentication, database, hosting, and infrastructure providers.
These providers may process the information only as necessary to provide services on our behalf, subject to applicable contractual, privacy, and security obligations.
We do not authorize these providers to use Google user data for independent advertising, data brokerage, or unrelated purposes.
4.3 Human Access to Google User Data
We do not permit routine human access to Google user data.
Authorized personnel may access relevant information when reasonably necessary for technical support, security investigations, troubleshooting, legal compliance, or other legitimate operational purposes.
Such access is restricted to authorized personnel and is subject to appropriate confidentiality and security controls.
4.4 Revoking Google Access
You may revoke our application's access to your Google Account at any time through your Google Account security settings.
Revoking access may prevent you from using Google Sign-In until you authorize access again.
Revoking Google access does not automatically delete your application account. To delete your application account and associated personal information, please follow the account deletion procedure described in Section 8.
5. How We Share Information
We do not sell personal information to third parties.
We may share or disclose personal information in the following circumstances:
5.1 Service Providers
We work with third-party service providers that help us operate and maintain our Services.
These providers may include:
- Supabase: Authentication, user identity management, and database infrastructure.
- Hosting and infrastructure providers: Hosting application systems, databases, and related infrastructure.
- Payment providers: Processing payments, subscriptions, and transactions.
- Email and communication providers: Sending account notifications, verification messages, and service-related communications.
- Analytics and monitoring providers: Helping us understand application performance, diagnose errors, and maintain service reliability.
- Security providers: Helping detect, investigate, and prevent unauthorized access or security incidents.
These providers receive only the information reasonably necessary to perform their services.
They are expected to protect personal information and use it only for authorized service-related purposes.
5.2 Legal Requirements
We may disclose personal information when reasonably necessary to:
- Comply with applicable laws, regulations, or legal processes.
- Respond to valid requests from governmental or regulatory authorities.
- Protect the rights, property, or safety of our organization, users, or other individuals.
- Investigate suspected fraud, security incidents, or unlawful activity.
- Enforce our agreements and policies.
5.3 Business Transfers
If our organization is involved in a merger, acquisition, restructuring, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable privacy requirements.
5.4 With Your Consent
We may share information with third parties when you specifically request or authorize us to do so.
5.5 Patient Information
Patient information submitted through healthcare-related features is processed to provide the requested functionality.
We do not sell patient information or disclose it for advertising purposes.
Where applicable, disclosures involving patient information are subject to relevant healthcare privacy laws, contractual requirements, and authorized access controls.
6. Data Security and Protection
We take reasonable administrative, technical, and organizational measures to protect personal information against unauthorized access, alteration, disclosure, loss, and destruction.
Our security practices may include:
- Encrypted connections using HTTPS/TLS.
- Authentication and access controls.
- Role-based access restrictions, where supported.
- Secure authentication and session management.
- Database access restrictions.
- Security monitoring and logging.
- Regular maintenance and security updates.
- Backup and recovery procedures.
- Restrictions on access to sensitive information.
- Appropriate safeguards when working with third-party service providers.
Access to personal information is limited to authorized personnel and service providers who require access to perform their responsibilities.
Although we take reasonable steps to protect personal information, no internet transmission, electronic storage system, or security measure can guarantee absolute security.
Users are responsible for maintaining the confidentiality of their account credentials and notifying us if they suspect unauthorized access to their accounts.
7. Data Retention
We retain personal information only for as long as reasonably necessary to provide our Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Different categories of information may have different retention periods.
For example:
- Account information: Retained while your account is active and as necessary for account administration.
- Google Sign-In information: Retained while necessary to maintain your application account and authentication records.
- Educational and certification records: Retained as necessary to administer training programs, verify certifications, and maintain relevant professional records.
- Patient and healthcare information: Retained according to applicable legal, contractual, and operational requirements.
- Payment and transaction records: Retained for accounting, tax, financial, and legal compliance purposes.
- Technical and security logs: Retained for the period necessary for security monitoring, troubleshooting, and incident investigation.
When information is no longer required, we will delete it, anonymize it, or otherwise securely dispose of it, subject to applicable legal retention requirements.
Some information may remain temporarily in encrypted backups or disaster recovery systems until those backups are rotated or deleted according to our retention procedures.
8. Account and Data Deletion
You may request deletion of your Longevity Medicine Certification account and associated personal information.
Where account deletion functionality is available within the application, you may initiate deletion through your account settings.
When an account is deleted, we will delete or arrange for deletion of associated account information stored in our authentication and application databases, including relevant Google Sign-In identity information and profile information.
We will also take reasonable steps to delete personal information associated with your account from systems under our control, subject to applicable legal, regulatory, contractual, and operational retention requirements.
Certain information may need to be retained where required by law or where necessary for legitimate purposes, such as:
- Financial and transaction records.
- Certification and educational records.
- Legal or regulatory compliance.
- Fraud prevention and security investigations.
- Resolving disputes and enforcing agreements.
Information retained in backups may remain until those backups are rotated or deleted according to our backup retention procedures.
If you cannot access the account deletion functionality, you may contact us using the contact information in Section 15.
Deleting your application account does not necessarily delete information that has been independently submitted or maintained by another organization, healthcare provider, or authorized user under their own legal responsibilities.
9. Healthcare Information and User Responsibilities
Our Services may provide tools and resources used by healthcare professionals to access educational materials, clinical references, patient monitoring features, and other healthcare-related functionality.
We recognize that healthcare information may be sensitive and requires appropriate protection.
Users who enter or manage patient information must:
- Have appropriate authorization to access and process that information.
- Obtain patient consent or other required legal authorization where applicable.
- Use the Services only for legitimate and authorized purposes.
- Avoid entering information that they are not authorized to disclose.
- Follow applicable healthcare privacy, security, and professional requirements.
Healthcare professionals and organizations remain responsible for determining their legal obligations regarding patient information, including obtaining required patient consent and maintaining appropriate clinical records.
Nothing in this Privacy Policy should be interpreted as creating a healthcare provider-patient relationship between us and individuals whose information is entered into our Services.
The availability of clinical references or educational materials does not replace professional medical judgment.
10. International Data Transfers
Our Services may use infrastructure and third-party service providers located in different countries.
As a result, personal information may be processed or stored in jurisdictions other than the country where you reside.
Where required by applicable law, we take reasonable steps to ensure that international transfers of personal information are subject to appropriate safeguards.
11. Your Privacy Rights and Choices
Depending on your location and applicable privacy laws, you may have certain rights regarding your personal information.
These rights may include:
- Requesting access to personal information we hold about you.
- Requesting correction of inaccurate or incomplete information.
- Requesting deletion of personal information.
- Requesting restrictions on certain processing activities.
- Objecting to certain processing activities.
- Requesting a copy of certain personal information.
- Withdrawing consent where processing is based on consent.
You may also manage your Google Account permissions through your Google Account security settings.
To exercise your privacy rights, please contact us using the information in Section 15.
We may need to verify your identity before fulfilling certain requests.
Some requests may be limited by applicable legal obligations or legitimate requirements to retain specific information.
12. Children's Privacy
Our Services are not specifically directed at children.
However, healthcare-related features may allow authorized healthcare professionals or other authorized users to enter and manage information relating to patients who are minors, where permitted by applicable law.
We do not knowingly collect personal information directly from children without the required consent or legal authorization where applicable.
Healthcare professionals, organizations, parents, or legal guardians are responsible for ensuring that they have the necessary authority and permissions to provide information about minors through our Services.
If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can review the situation and take appropriate action.
13. Third-Party Websites and Services
Our Services may contain links to third-party websites, applications, or services.
These third parties operate independently and have their own privacy policies and data handling practices.
We are not responsible for the privacy, security, or content practices of third-party websites or services that we do not operate.
We encourage users to review the privacy policies of third-party services before providing personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our Services, technology, data handling practices, or applicable legal requirements.
When we make material changes, we will update the "Last Updated" date at the beginning of this policy.
Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.
We encourage users to review this Privacy Policy periodically to remain informed about how we handle personal information.
15. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, including requests to access or delete your data, please contact us:
Application: Longevity Medicine
Operated by: Jay Park MD LLC
Address: 2292 Faraday Ave #100, Carlsbad, CA 92008, United States
Privacy contact email: email@longevitymedicinecertification.com
Website: https://longevitymedicinecertification.com/
We will review and respond to privacy-related inquiries in accordance with applicable legal requirements.