Magellan Longevity LLC operates magellanlongevity.com and the Magellan Longevity app. This policy describes the information used by our account, community, research, shopping and health-education features. Contact gabriel@magellanlongevity.com or our contact page about privacy, access, corrections or deletion.
Accounts and saved activity
Supabase handles email/password authentication and the account records that support our service. We store your account identifier, name, email, profile information and saved activity such as favorites, bookmarks, follows and group relationships. If you choose Google or Apple sign-in, those providers authenticate you and supply the account information you authorize; we do not receive their passwords. Apple may supply a private relay email address. When Apple supplies a revocation credential, we store it encrypted so we can revoke the connection when you delete your account.
Community, public contributions and messages
Profiles can include a display name, biography, avatar or photo, selected country/region/city, profile preferences and music. Posts, forum topics and replies, profile messages, public chat, images, uploaded audio and public shelves support the community. Public contributions can be read and copied by others. The community map uses the location you select for your profile; it is separate from the optional device-location lookup.
New and edited public contributions wait for moderator review. Older contributions may remain available without an individual prepublication review. Moderators can inspect submitted text, images, audio and linked media. A removed upload is no longer available through our public media route; an already issued media link may continue to work briefly. We cannot retrieve copies someone has downloaded, exported or republished elsewhere.
Direct messages are stored for their participants and are not end-to-end encrypted. Local safety and spam filters check messages. We do not send private-message text to an AI provider for these filters or place unreported direct messages in the public review queue. If a participant reports a message, moderators can review that selected message, its relevant author/media information, the report reason and the details supplied by the reporter. Reports and block lists are not public. Blocking limits contact and signed-in visibility; it does not make previously public information private from someone browsing signed out.
Moderation supports a safe service: we may remove content or restrict abusive accounts. Owner alert emails contain queue counts and a link to the private moderator interface, rather than report text. See our community rules. Reports are not an emergency service.
My Cabinet and HSA/FSA records
My Cabinet saves supplement names, label photos/readings, ingredients, serving information, status and notes on your device. The HSA/FSA ledger saves purchase dates, item/vendor names, amounts, categories, eligibility indicators, notes and whether a receipt is attached. These records can reveal health or financial information.
In the native iOS app, cabinet sync and ledger sync are off until you separately enable each one for the signed-in account. The choice explains that it includes existing records on that device. Enabled sync sends the relevant records to Supabase for private account storage; cabinet photos are included. Turning sync off stops future syncing and does not erase copies already stored on your account. On the website, these tools currently sync their records when you are signed in.
HSA receipt images and medical-necessity letter answers, including a name or date of birth you enter, stay in device storage. Receipt reading runs on the device. Publishing a shelf is a separate choice that submits its selected names and photos for public display after review. Do not publish private medical records or another person's information.
AI requests
Our AI features send requests through Magellan's service on Netlify to Google Gemini:
- Ask the Evidence: the question you enter.
- Find Your Stack: your goal, selected health focus areas, experience, preferences and constraints.
- Label scanning: the entire captured or selected photo and any supplied hint, including unrelated details visible in the photo.
- Cabinet organization: supplement names, brands, ingredients, serving sizes and daily servings.
- Songwriter: the source, chosen/seen/rejected words, draft title, writing options and tone settings.
The native iOS app asks for permission and an adult confirmation before each of these requests. Cancel sends no request. This choice is separate from private cloud sync. Website controls may differ. Avoid names, contact details, confidential records and unrelated people in AI input. We use paid Gemini access; Google states that paid-service prompts and responses are not used to improve its products, while limited abuse-prevention processing may still occur. Optional request storage for these production requests is off. See the Gemini API terms. We do not promise zero provider retention.
AI output can be wrong. Magellan provides educational or creative material, not diagnosis, treatment or clinical care. Its AI services are intended for adults 18 and older.
Camera, location and local tools
Camera access is used when you choose to photograph a supplement label or use Movement Lab's camera. Movement Lab processes camera frames on the device and does not record or upload the video. It does not request microphone capture. Scanning a label photo sends the chosen photo to the AI service only after the native app's separate permission step. You can decline camera access and use manual tools or an existing photo where supported.
The Earth feature accepts a city or coordinates. If you choose “Locate me” and allow device access, the point can be precise. Magellan sends that point to its Netlify service to look up satellite-map information using data hosted on Google Cloud Storage. Current clients send the point in the request body, and our response is marked not to be cached. We do not add it to your account profile. Older website clients may have sent the point in a URL. You can choose a city instead and change device permissions in system settings.
Biomarker entries, medication-checker input, movement and nutrition calculations, scan-journal work, receipt images and letter answers are processed or saved locally unless you choose a separate sharing or cloud feature. Downloading the libraries/models that run a local tool still makes a network request to their hosting provider. Signing out does not erase local records on a shared device.
Forms, research alerts and purchases
Newsletter, updates, research-interest, contact and article-submission forms store the information you choose to send so we can provide the requested communication or review. This can include name/email, preferences, text and links. The research-interest form accepts optional age, location and broad health conditions; it is an alert list, not study enrollment. Magellan does not run the listed studies or send your signup to their investigators on your behalf.
Affiliate product links identify Magellan as a referrer and may earn a commission. Retailers handle their own browsing and purchases. Where Magellan offers checkout, payment and fulfillment providers handle the order and relevant contact/shipping information; Stripe processes card payments, and we do not store your full card number. Purchases, retailer accounts and newsletter subscriptions are separate from your Magellan account.
Stronger for Longer program registry
Stronger for Longer (magellanlongevity.com/stronger/) is a free 12-week exercise education program. Its self-tests run in your browser and are stored only on your device unless you enroll. If you enroll, we store: your email address, an age band, an optional sex field, your chosen track, your five self-test results at weeks 0, 6 and 12, and six weekly check-in answers (walks, strength sessions, balance days, effort, pain yes/no, fall yes/no). We use this to send you one program email a week and to count, in de-identified aggregate, whether the program works (enrollments, completions, and how the test numbers changed). Your email is hashed for analysis; aggregate results may be published on the site and never identify anyone.
Records are held in our database with access limited to program functions; your record is reachable only with a private key that lives in your browser and in the links in your emails. No hospital, clinic, insurer or employer is involved; the program is education, not medical care, and this first cohort is not a research study. Nothing is sold or shared for marketing. You can stop the emails with the unsubscribe link in any program email, and you can withdraw from your progress page at any time, which deletes your test results and check-ins and stops all emails. Consent version 2026-09-28.v1.
Website analytics, advertising and external content
The website uses Google Analytics 4 for usage measurement and may load Google AdSense advertising. These services can receive device/browser information, identifiers, pages and interactions; Google and advertising partners may use activity across services for advertising. The website's consent choices affect the relevant Google settings. See Google's privacy policy and advertising settings.
Magellan's Google Analytics and AdSense loaders are disabled in the packaged native iOS pages. Embedded videos/music, linked retailers and identity providers have their own practices. Loading third-party content can send an IP address, device/browser details and the requested content to its provider. YouTube's privacy-enhanced player can still show non-personalized advertisements. External pages and services may use cookies or identifiers under their own policies.
Netlify, Supabase and other service hosts process network and operational data needed to deliver and secure requests, such as IP addresses, URLs, browser/device headers, timestamps and error/security events. These records are separate from the data shown in your account. We do not sell account credentials, private messages or saved health-tool records to data brokers. Website advertising practices are described above.
Providers and sharing
We use Netlify for hosting, server functions and forms; Supabase for authentication, account/community records and uploads; Google Gemini for the AI features above; and Google email services for communications. Payment/fulfillment providers and retailers handle the shopping experiences you choose. Public content is shared because it is submitted for publication. A share/export action gives information to the app or person you choose. We may also disclose information to address abuse, protect the service or respond to legal obligations.
Provider information is available from Netlify, Supabase, Google and Apple. Providers may process information in countries outside your own. Their policies do not replace our responsibility for Magellan's copies.
Retention, deletion and your choices
Account records and contributions remain until you remove them, delete the account, or we remove them through moderation. Local records remain until cleared. Closed report evidence is pruned after 30 days and content-free moderation action records after 180 days. Active reports, publication records, removal state and account restrictions remain while needed for the associated content/account. These records are removed with the associated account where applicable. Provider logs, backups and independent recipients' copies can follow different retention schedules.
In the native iOS app, use Settings → Delete account. After confirmation, this removes the account and its linked records/uploads and clears saved account and health-tool data on that device. Threads or groups you created, including replies within them, may also be removed. For Apple sign-in we revoke the saved provider credential when available; if it is unavailable, deletion still proceeds and the app explains how to disconnect Apple access manually. Contact us for help deleting website account data.
Account deletion does not unsubscribe separate mailing lists, cancel retailer orders or erase exported copies. Use the unsubscribe method in an email or contact us. Turning off sync, signing out, deleting a local item and deleting an account are different actions. To request access, correction or deletion, contact gabriel@magellanlongevity.com and identify the relevant account/feature. Do not send your password or unnecessary medical details. We may need to verify ownership. Depending on your location, you may have additional rights to restrict or object to processing, receive a copy of data, withdraw consent or complain to a privacy authority.
Audience, security and changes
Magellan is intended for adults and is not a confidential clinical-record or emergency service. Contact us if a child has submitted personal information. We use authenticated access and access rules for private records, but no service can guarantee absolute security. Keep credentials private and use care on shared devices. We update this policy as our practices change and revise its effective date. Material new uses require appropriate notice and choices before they take effect.