Executive BiologyBack
Legal

Privacy Policy

Draft for legal review. Not yet in effect.

Effective November 5, 2026

This Privacy Policy explains what [COMPANY LEGAL NAME] (“Executive Biology”, “we”, “us”) collects when you use Executive Biology and Living Diet: our website and web app at livingdiet.app, and the Visceral Fat Score™ (together, the “Service”). It also explains how we use that information, who sees it, and the choices you have.

The Service is offered only in the United States, and only to adults. If you live in Washington or Nevada, our Consumer Health Data Privacy Policy also applies to you.

The short version

  • Your photos and measurements are information about your health. We treat all of it as sensitive.
  • We use it to run the Service for you. We don’t sell it, we don’t use it for advertising, and there are no advertising trackers on our website.
  • Until you save a result to an account, your photo and readings are kept only in your browser tab. We don’t store them unless you choose to share them.
  • Summaries and previews are made by AI services run by other companies. We send them what they need to do that, and we don’t add your name or email address.
  • Dr. O’Mara and his team can see your check-ins.
  • Nothing is public unless you choose to share it.
  • Your photos and measurements are used for research only if you give a separate permission.
  • You can delete your account, and what’s in it, at any time.
  • We aren’t your health care provider, so the US health privacy law known as HIPAA generally doesn’t cover what you put into the Service. This policy, and state privacy laws, do.

1. What we collect

If you try the Service without an account

Your photo, readings and score are kept only in your browser tab, so a reload doesn’t lose them. They’re gone when you close the tab, start over, or after 24 hours.

To write your AI summary, your readings and photo pass through our servers to an AI model. If you choose to see your potential progress, your photo also passes through our servers to be checked and to make the previews, which come back to your tab (sections 2 and 4). We don’t store any of this unless you save your result to an account, or share it (section 6).

Your account and profile

  • Your email address.
  • Your name: the display name you set, or the name Apple or Google gives us when you sign in with them. If you sign in with Google, we also receive the web address of your Google profile picture.
  • How you sign in, and the identifier Apple or Google uses for you. We don’t use passwords.
  • Your sex, year of birth and height, if you choose to add them. They aren’t used in your score yet.
  • Your time zone, taken from your device, so reminders follow your local time.
  • Your email and reminder preferences.
  • A record that you agreed to our Terms and this policy, and of any research permission, with the version and the date.

Your check-ins

  • Your face photo.
  • Your abdominal depth readings, and the date.
  • Your Visceral Fat Score™ class and the version of the method that produced it.
  • The AI summary of the check-in, and which model wrote it.
  • Any note Dr. O’Mara adds.

Potential progress previews

If you save previews, we also store the preview images, the instructions sent to the image model, which model was used, and a checksum of your photo. The instructions include an AI-written description of your photo, covering things like apparent age range and sex, hair, skin, the shape and features of your face, clothing and build.

Messages and applications

  • Contact form: your name, email address, company if you give it, the topic and your message.
  • Alpha application: your name, email address, role and company, where you’re based, your health goals and how you heard about Alpha.

Both are emailed to our team and aren’t stored in our database. If you’re signed in when you send either, the email includes your account’s email address and a link to your account.

Device and technical information

  • Your IP address and browser or device type, recorded with each sign-in session. Your IP address is also used briefly to limit repeated requests.
  • Cookies and similar storage (section 8).
  • Technical logs, which can include account and check-in identifiers and error details.

What we don’t collect

We don’t collect your precise location, your contacts, an advertising identifier, audio, or data from Apple Health or Health Connect. Your photo is re-saved in your browser before it’s uploaded, which removes location and camera details.

2. Your face photo

What happens in your browser. Before a photo is uploaded, software in your browser looks for a face in it, to check the framing and the light and to crop the photo. It works out only where the face is in the picture. That information stays on your device.

What happens on our servers. Your score is calculated from your abdominal measurements only; the photo isn’t used in it. In addition:

  • For your AI summary, the photo is sent to Anthropic’s Claude, which describes what’s visible in your face.
  • If you ask for previews, the photo is first checked automatically by an AI model run by Cloudflare. It’s asked whether the image is a real photo of a person’s face, whether it contains sexual content, violence, hate symbols or advertising, and whether the person appears to be under 18. A photo that doesn’t pass can’t be used for previews. Our technical logs keep the result of the check, not the photo. A photo that passes is sent to Anthropic’s Claude, which writes the description in section 1, and then to OpenAI’s image model with that description, which makes the preview images.
  • If you have an account, we store the photo when you save your result.

What we don’t do. We don’t use face recognition. We don’t identify you, or anyone, from a photo, and we don’t create or store a faceprint, a face template or measurements of the geometry of your face.

How long we keep it. We keep your saved photos, the descriptions and the previews until you delete your account. When they’re deleted, they’re permanently removed from our storage, apart from backups for the period in section 10. If you don’t use your account for three years, we delete it and everything in it. We email you 30 days before. Photos in a share follow section 6.

3. How we use your information

We use what we collect to:

  • calculate your score, write your summary, and show your progress over time;
  • make previews;
  • let Dr. O’Mara and his team write notes on your check-ins;
  • create and secure your account, and sign you in;
  • send sign-in codes, account notices, reminders and the other messages in section 9;
  • answer your questions and requests;
  • check photos before previews, and prevent abuse;
  • fix problems and keep the Service running; and
  • meet our legal obligations and enforce our Terms.

We use your photos and measurements for research, or to develop or train algorithms and AI models, only with the separate permission described in section 7.

We don’t use your information for advertising, and we don’t make decisions about you by automated means that have legal or similarly significant effects.

4. How AI is used

Summaries and previews are produced by AI models run by other companies. We send each one only what the feature needs. We don’t add your name, your email address or your account identifier to anything we send.

  • Check-in summary (Anthropic’s Claude): that check-in’s photo, readings and score. On later check-ins, also the photo from your first check-in, and the dates and numbers from your first and previous check-ins.
  • Photo check (a model run by Cloudflare): your photo, as section 2 describes.
  • Previews (Anthropic’s Claude and OpenAI’s image model): your photo and the description of it.

Requests to Anthropic and OpenAI pass through Cloudflare’s AI Gateway, which we’ve set not to log or store them. The model that checks your photo doesn’t keep it once the check is done. Anthropic and OpenAI may keep a request for up to 30 days to check for misuse, and for longer if it’s flagged for misuse or the law requires it.

5. Who can see your information

Dr. O’Mara and his team. Authorized members of the team can see your check-ins (photos, readings, scores, summaries and previews), your profile, your preferences and permissions, and anything you’ve shared. They use this to write notes on your check-ins, to answer you, and to keep the Service safe. A small number of engineers who run our systems can access stored information when that’s needed to maintain or fix the Service.

Companies that work for us. These companies process information to help us run the Service. Apple and Google also handle your sign-in details under their own privacy policies.

  • Cloudflare: hosts our website and web app, runs the database, stores photos and other images, sends our emails, routes AI requests, runs the automated photo check, and protects our forms from bots.
  • Anthropic: its Claude models write summaries and photo descriptions.
  • OpenAI: its image model makes previews.
  • Apple and Google: sign-in, if you choose it.
  • The software company that builds and operates the Service for us.

People you share with. When you share a check-in or a preview, anyone with the link can see it (section 6).

The law and safety. We may disclose information if the law requires it (for example, in response to a valid court order), or if we believe in good faith that it’s needed to protect someone’s safety, to protect our rights, or to investigate fraud or abuse.

A change of ownership. If the Service or our business is sold or merged, your information may pass to the new owner, which must keep to this policy. We’ll tell you before that happens.

We don’t sell your information. We don’t sell or rent your information to anyone, and we don’t share it with anyone for advertising.

6. Sharing a check-in or a preview

Sharing is your choice, and nothing is public until you post. When you post a check-in or a preview to X, we make an image and put it, with the two photos it’s made from, on a public page with a long, random link, so X can show it in your post. Anyone who has the link can see:

  • the two photos and the image;
  • the first name on your account, if there is one;
  • the day number and the dates of the check-ins shown, or which stage of a preview; and
  • for a check-in, your abdominal measurement and score class, unless you switch off “Show my measurements on the image” first.

We ask search engines not to list these pages. A shared page is deleted after 30 days, or when you delete your account if that’s sooner. A share you made without an account stays up for its 30 days. To have a share taken down sooner, email privacy@livingdiet.app.

Once a link or an image has been posted on social media or sent to someone, copies there are outside our control.

7. Research

Your photos and measurements are used for research only if you give us a separate research permission. It’s off unless you turn it on.

With that permission, and with your name and email address removed, we may use your photos and measurements to:

  • check and improve the Visceral Fat Score™, for example by comparing it with MRI results;
  • develop and train algorithms and AI models for the Service; and
  • publish findings as statistics that don’t identify anyone.

We don’t give this data to outside researchers.

You can withdraw the permission at any time in your account, or by emailing privacy@livingdiet.app. From then on, your data isn’t used for new research or training. We can’t remove it from results already produced or from models already trained.

8. Cookies and similar storage

We use only the cookies the Service needs to work:

  • a sign-in cookie, which keeps you signed in for up to 90 days from your last visit;
  • a short-lived copy of your session details, kept for five minutes; and
  • a cookie that lasts five minutes while you sign in with Apple or Google.

Your browser also keeps an unsaved result in that tab’s own storage, as section 1 describes.

We don’t use advertising cookies or trackers that follow you across other websites, so there’s nothing for a “Do Not Track” or Global Privacy Control signal to switch off.

The contact and Alpha forms load Cloudflare’s bot check, which receives your IP address and browser details and may set its own cookies.

9. Your choices and rights

In your account, you can:

  • change your name, email address and profile details;
  • turn the research permission on or off;
  • choose which emails and reminders you get; and
  • delete your account, which deletes what’s in it (section 10).

By emailing privacy@livingdiet.app, you can ask us to:

  • confirm whether we hold information about you, and give you a copy of it;
  • correct information that’s wrong;
  • delete information, including a single check-in or share;
  • withdraw a permission you’ve given, such as the research permission; and
  • tell you which companies we’ve shared your information with.

We offer these rights to everyone who uses the Service, wherever in the US you live. We’ll confirm the request using the email address on your account, and we’ll answer within 45 days. Someone you’ve authorized can make a request for you if they show us your written permission. If we turn a request down, you can appeal by replying to our answer; we’ll reply to an appeal within 45 days, and if we still say no, we’ll tell you how to contact your state’s attorney general. We won’t treat you differently for using any of these rights.

Emails. We send:

  • sign-in codes, links to confirm a change of email address or to delete your account, and other notices about your account. These can’t be switched off.
  • check-in reminders, only if you turn them on.
  • product updates, which are on when you create an account and which you can switch off.
  • research invitations, and news and offers, only if you switch them on.

Change any of these in My account. Reminder emails also carry a link to change or stop them.

10. How long we keep your information

  • Unsaved results: only in your browser tab, until you close it, start over, or 24 hours pass.
  • Your account and what’s in it (check-ins, photos, previews, notes): until you delete it or delete your account. If you don’t use your account for three years, we delete it and everything in it. We email you 30 days before.
  • Shared pages: 30 days.
  • Sign-in sessions: they expire 90 days after you last used them. The record of an expired session, with its IP address and device type, may stay until you delete your account. Sign-in codes last 10 minutes.
  • Contact messages and Alpha applications: they stay in our team’s mailbox for as long as we need them to deal with your request.
  • Database backups: up to [BACKUP RETENTION PERIOD].
  • Technical logs: up to [LOG RETENTION PERIOD].

When you delete your account, we delete your profile, your check-ins and their photos, notes, previews, shared pages and preferences straight away. These things aren’t removed by deleting your account:

  • a share you made before you had an account, until its 30 days are up;
  • emails you’ve already sent to our team;
  • copies in backups and logs, until those expire; and
  • anything an AI service is still holding for the time described in section 4.

11. Security

We protect your information with measures that include encrypted connections between your device and the Service, private storage for photos with links that expire within two hours, sign-in without passwords, sign-in codes that are stored only in encrypted form, staff tools that only authorized team accounts can open, and limits on repeated requests.

No system is completely secure. If a security incident affects your information, we’ll tell you as the law requires.

12. Children

The Service is for adults. We don’t knowingly collect information from anyone under 18. If you believe someone under 18 has used the Service, email privacy@livingdiet.app and we’ll delete their information.

13. Where your information is kept

We’re based in the United States and keep your information there. Some of the companies in section 5 may process it in other countries where they operate.

14. Notices for particular states

Washington and Nevada. See our Consumer Health Data Privacy Policy.

Illinois, Texas and Washington (biometric information). Section 2 explains how we handle face photos: what we do with them, that we don’t create face templates or use face recognition, how long we keep them, and when they’re destroyed.

California. In the last 12 months we’ve collected these categories of personal information, for the purposes in section 3 and from the sources in section 1: identifiers (such as your name, email address and IP address); sensitive personal information (information about your health, and your account sign-in details); photos; internet activity (how you use the Service); and inferences (your score class and AI summaries). We disclose them only to the service providers in section 5 and as you direct. We don’t sell personal information or share it for cross-context behavioral advertising, and we use sensitive personal information only to provide the Service. We don’t disclose personal information to others for their own direct marketing.

15. Changes to this policy

We may update this policy. If a change is significant, we’ll tell you by email or in the app before it takes effect, and where the law requires your consent, we’ll ask for it. The date at the top shows when the policy last changed.

16. Contact us

[COMPANY LEGAL NAME], [MAILING ADDRESS]. Email privacy@livingdiet.app.