Privacy policy

Alpha Longevity is a business to business machine learning platform registered in Hong Kong. We provide biological age intelligence to hospitals, longevity clinics, insurers, pharmaceutical companies and research institutions through an API and SDK.

• Account information. Names, work email addresses, roles and organisation details supplied by institutional customers.
• Biomarker inputs. Blood biomarker panels submitted to the Alpha API by institutional customers for the purpose of generating Alpha Age and Alpha Pace outputs.
• Technical data. API keys, request metadata, IP addresses, log timestamps and error diagnostics required to operate and secure the platform.
• Website data. Basic analytics on public pages, form submissions, and information you provide when requesting a briefing.

We do not intentionally collect direct identifiers of end users through the Alpha API. Institutional customers are responsible for pseudonymising or de identifying inputs before transmission unless a separate data processing agreement provides otherwise.

• To deliver, secure and improve the Alpha API, SDK and associated services.
• To provide customer support and technical implementation assistance.
• To generate aggregate, non identifying analytics that improve model calibration and population coverage.
• To comply with legal, regulatory and contractual obligations.

Where GDPR, UK GDPR or comparable frameworks apply, our lawful bases include performance of a contract with the institutional customer, legitimate interests in operating and securing our platform, compliance with legal obligations, and consent where explicitly obtained.

We share information only with vetted subprocessors that support hosting, storage, authentication, error monitoring and customer communication. A current list of subprocessors is available to institutional customers on request under a data processing agreement. We do not sell personal information.

Alpha operates a region selectable deployment model. Data may be processed in the region agreed with the institutional customer. Where cross border transfers are necessary, we rely on the standard contractual clauses or equivalent safeguards.

Alpha applies encryption in transit and at rest, role based access controls, audit logging and least privilege principles. Production systems are separated from development environments. Access to institutional data is limited to authorised personnel with a documented business need.

API inputs and outputs are retained for the period agreed in the customer contract. Account information is retained for the duration of the contractual relationship and for a limited period afterwards to satisfy legal, audit and dispute resolution requirements.

End user rights, including access, correction, deletion, restriction and objection, are exercised primarily through the institutional customer that submitted the data. If you believe your data has been processed through the Alpha platform, please contact the institution that manages your relationship, or contact us and we will route the request appropriately.

Our public website uses a minimal set of cookies and similar technologies for essential functionality and privacy respecting analytics. The Alpha API and SDK do not rely on cookies.

The Alpha platform is not directed at children. Institutional customers must not submit data of individuals under the applicable age of consent without appropriate legal basis.

We may update this policy to reflect changes in our services, legal requirements or operational practices. Material changes will be communicated to institutional customers through their designated contact.

For privacy enquiries, contact privacy@alphalongevity.com.