This Privacy Policy explains how REWIND Life ("REWIND," "we," "us") collects, uses and shares information when you visit rewindlife.co, use the REWIND app, or become a member. Your health information is personal. We treat it that way: we use it to run your program, we protect it, and we never sell it.
1. Information we collect
Information you give us
- Account details: your name, email address and password. Passwords are stored as one-way hashes, never in plain text.
- Health and wellness information: answers to your baseline assessment and retests across the eight REWIND dimensions (biomarkers, toxins, mindset, community, nutrition, supplementation, exercise and longevity routines), lab results you choose to add, daily logs, goals, protocols you track, and the scores we calculate from them.
- Messages: what you send us by email or through the app, including questions you ask REWIND Coach.
- Organization details: if you contact us about REWIND for teams, your name, work email, organization and message.
Information from others
- Sign in with Google or Apple: if you choose it, we receive your name, email address and an account identifier from that provider. We do not receive your Google or Apple password.
- Payments: Stripe processes membership payments. We receive your plan, billing status, trial dates, and limited card details (such as brand, last four digits and expiration). Your full card number goes to Stripe, never to us.
Information collected automatically
- Device and log data: IP address, browser and device type, pages viewed, and the date and time of requests, as recorded by our servers.
- Local storage and cookies: used to keep you signed in and to let the app keep working between visits. See Cookies.
2. How we use information
- To create and secure your account, and to sign you in.
- To calculate your Longevity Score, build your twelve-week program, personalize your daily plan and REWIND Coach guidance, and compare your retests.
- To run your membership: start your free trial, bill your plan, and send receipts and account emails.
- To answer questions and provide support.
- To keep REWIND safe, prevent fraud and abuse, and fix problems.
- To understand, in aggregate, how REWIND is used so we can improve it.
- To send product updates. You can opt out of non-essential emails at any time.
- To meet legal obligations and enforce our Terms of Service.
We do not use your health information for advertising, and we do not build advertising profiles about you.
3. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these cases:
- Service providers that help us operate REWIND, under contracts that limit their use of your information to providing their services to us. These include website and database hosting, email delivery, payment processing (Stripe), sign-in (Google and Apple, if you use them), and technology providers that power app features.
- Organizations: if your employer or another organization sponsors your membership, we share only enrollment status and aggregated, de-identified participation or score trends. We do not share your individual health information with your organization without your explicit consent.
- Brand Partners: if you joined through a Brand Partner's link, that partner may see that you signed up so they can be credited. They cannot see your health information. The Brand Partner program runs on Trybe, which has its own terms and privacy policy.
- With your direction: when you choose to share results, for example with your doctor.
- Legal and safety: when required by law or legal process, or to protect the rights, safety and property of REWIND, our members or others.
- Business transfers: in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.
4. Consumer health data
Much of what you share with REWIND is consumer health data under laws such as Washington's My Health My Data Act and Nevada's consumer health data law. In addition to the rest of this policy:
- We collect it only to provide the REWIND program you signed up for, or with your consent.
- We share it only with the service providers described above, as needed to run REWIND, or with your consent.
- We never sell it.
- You can access it, delete it, and withdraw your consent at any time. See Your choices and rights.
REWIND is a wellness program, not a healthcare provider or health plan, so HIPAA generally does not apply to the information you give us. We protect it with the safeguards described in Security.
5. Your choices and rights
- Access and correction: see and update most of your information in the app. Email us for a copy of everything we hold about you.
- Deletion: ask us to delete your account and data at any time.
- Withdraw consent: stop using a feature, or ask us to stop processing your health information. Some features will not work without it.
- Email: unsubscribe from marketing emails with the link in any email. We will still send essential account and billing messages.
- State privacy rights: depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Washington and other states), you may have rights to know, access, correct, delete and port your information, and to opt out of sale, targeted advertising and profiling. We do not sell or target ads, and we honor these requests for all members.
To make a request, email ash@rewindlife.co from the address on your account. We will verify your request and respond within 45 days. You can use an authorized agent, and you can appeal a decision by replying to our response. We will not discriminate against you for exercising your rights.
6. Retention and deletion
We keep your information while your account is active. If you delete your account, we delete or de-identify your personal and health information within 30 days, except for what we must keep for legal, tax, accounting or fraud-prevention reasons (such as billing records), which we keep only as long as required.
7. Security
All connections to REWIND are encrypted in transit with HTTPS. Access to member data is limited to people who need it to run the service, passwords are hashed, and card details are handled by Stripe. No system is perfectly secure, so please use a strong, unique password. If we learn of a breach that affects you, we will notify you as the law requires.
8. Cookies and local storage
We use cookies and browser storage that are necessary to sign you in, keep your session secure, remember your in-app progress and process payments. We do not use advertising cookies or third-party ad trackers. Our pages load fonts from Google Fonts, which receives your IP address to deliver them. You can clear cookies in your browser at any time, but you will be signed out.
9. Children
REWIND is for adults 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
10. Where we process information
REWIND is operated from the United States, and your information is stored and processed in the United States.
11. Changes to this policy
We will update this page when our practices change and revise the date at the top. If a change is material, we will tell you by email or in the app before it takes effect.
12. Contact
Questions or requests: ash@rewindlife.co
REWIND Life, Utah, United States