ReverseAgeCode Inc. ("ReverseAgeCode," "we," "us," or "our") is a Canadian federal corporation, operating together with its wholly-owned Indian subsidiary, Reverse Age Code Private Limited. Together, we provide longevity science content, biological age scoring tools, and related wellness resources through reverseagecode.com and connected apps (the "Services").
For the purposes of the GDPR, ReverseAgeCode Inc. is the data controller for personal data collected through the Services, unless stated otherwise.
We collect information in three broad categories:
If you use our biological age scoring tools, you may voluntarily submit health-related inputs, such as biomarkers, lab values, sleep or wearable data, lifestyle habits, or medical history. This is sensitive personal data under the GDPR and "sensitive personal data" under India's rules, and we treat it accordingly (see Section 4 and Section 13).
We do not use your health information to make solely automated decisions that produce legal or similarly significant effects about you without the opportunity for human review.
Where the GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Delivering a requested guide or account service | Performance of a contract, or steps taken at your request prior to entering one |
| Health/biometric inputs used to generate a score | Your explicit consent (Art. 9(2)(a)) |
| Marketing communications | Your consent, which you can withdraw at any time |
| Basic analytics, fraud prevention, and site security | Our legitimate interests, balanced against your rights |
| Regulatory record-keeping | Compliance with a legal obligation |
Under India's DPDPA and most US/Canadian frameworks, our processing is likewise grounded in your consent or in the "certain legitimate uses" recognized by the applicable law (for example, fulfilling a request you initiated).
We do not sell your personal information, and we do not share your health or biometric data with advertisers. We may share personal data with:
ReverseAgeCode operates across Canada, India, and other regions, so your data may be transferred to, stored, and processed in a country other than your own — including Canada and India, which may not be considered to offer an "adequate" level of protection under the laws of your home country.
Where we transfer personal data out of the EEA or UK, we use recognized safeguards such as the European Commission's Standard Contractual Clauses (or the UK equivalent), and we take reasonable steps to ensure recipients handle your data with a comparable level of protection.
We use cookies and similar technologies to run the site, remember preferences, and understand aggregate usage. Where required by law (including in the EEA/UK and under evolving Indian rules), we will ask for your consent to non-essential cookies before they are set, and give you a way to change your preferences at any time.
We keep personal data only as long as necessary for the purposes described in this policy, to comply with legal, tax, or accounting obligations, or to resolve disputes. Health and biometric inputs are retained only as long as needed to provide your score/insight and any related history you've asked us to keep, and are deleted or anonymized on request, subject to Section 10.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and/or the relevant regulator as required by applicable law.
Depending on where you live, you may have some or all of the following rights.
To reachout ReverseAgeCode please refer to section 15. Contact Us.
We only send marketing or promotional messages (email, and SMS/WhatsApp where applicable) to people who have separately opted in via our marketing consent checkbox — agreeing to our Marketing Consent Terms is not required to receive the free guide or use core Services. You can withdraw this consent at any time by using the unsubscribe link in any marketing message or ubsubscribe link in footer of the website.
Our Services are not directed to children and are intended for users who are at least 18 years old, or who have reached the age of majority in their home jurisdiction. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data and wants to delete, please reachout to us via information provided in the section 15. Contact Us.
(Note: definitions of "child" differ by law — under 13 in the US (COPPA), under 16 by default in the EEA (GDPR, subject to member-state variation), and under 18 in India (DPDPA). Our 18+ policy is intended to satisfy all three.)
We act as a "Data Fiduciary" under the DPDPA for personal data of individuals in India. We process your data on the basis of your consent, given via clear notice at the point of collection, and you may withdraw that consent as easily as you gave it. You have the right to access, correct, update, and erase your personal data, and to file a complaint with our Grievance Officer (see Section 15) or, if unresolved, with the Data Protection Board of India.
If you are in the EEA or UK, you have the rights listed in Section 10 and the right to lodge a complaint with your local data protection supervisory authority. Where we process special category data (e.g., health information) under Article 9, we rely on your explicit consent.
If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, to opt out of "sale" or "sharing" of personal information (we do not sell or share personal information for cross-context behavioral advertising), and to limit use of sensitive personal information. We will not discriminate against you for exercising these rights. Similar rights may apply if you live in other US states with comprehensive privacy laws.
We process personal data of Canadian residents consistent with PIPEDA's consent-based principles, and we only send commercial electronic messages with your express or implied consent as defined under Canada's Anti-Spam Legislation (CASL), with a working unsubscribe mechanism in every message.
We may update this Privacy Policy from time to time. We will post the revised version here with an updated "Last updated" date, and where changes are material, we will provide additional notice (such as an email) before they take effect.
Privacy questions: info@reverseagecode.com. Please put [Privacy] + your fullname in subject line.
Postal address:
Canada: ReverseAgeCode Inc., Unit 124 - 1597 Rose Way, Milton, ON, L9E 1N4, Canada
India: Reverse Age Code Private Limited, D1004, Godrej Aqua, Hosahalli, Bengaluru, KA 562157, India