This policy explains what Reverse Age Lab (Global Advisory Group, LLC, "we", "us") collects when you visit www.reverseagelab.net or use your membership and our AI assistant, Rala, what we do with it, who else sees it, and the choices you have. Effective 2 November 2026.
Reverse Age Lab is an educational wellness service. It is not a medical provider, and it is not covered by HIPAA, the US law for doctors, hospitals and health insurers. We still treat everything you tell us about your health as sensitive: it is encrypted, it is used only to run your membership, and it is never sold.
1What we collect
What you give us
- Your name, email address and, if you give it, your phone number.
- If you become a free member: your email address, your name if you give one, the kind of page you joined on, which product, goal, ingredient and brand pages you open in full, the one-time discount code we make for you, whether you ticked the box for the emails, and the date and version of the Free Member Terms you accepted. A free membership collects none of the health information below.
- Your health profile: age, sex, height, weight and build, whether you are pregnant or breastfeeding, your goals, sleep, diet and meal log, exercise, the supplements and medications you list, allergies, and any health notes you add.
- Lab results you choose to upload, such as blood work.
- Readings from a wearable device, such as steps, weight, sleep and heart rate, only if you connect one.
- Photos of product labels and barcodes you scan.
- What you type or say to Rala. When you talk to her, your voice is sent live to our AI provider to be understood; we do not keep a recording and we do not create a voiceprint.
- Your email address if you sign up for the newsletter, and anything you send through the contact form.
- Payment details, which go straight to Stripe. We receive only a reference and the last digits of the card.
What we collect automatically
- Your device and browser type, IP address and the approximate location it suggests (city level, never your precise location).
- The pages you visit, when, and how you use the site and the dashboard.
- Cookies and similar tools, described in section 6.
2How we use it
- To build your daily protocol and keep it current as your supplements, medications, goals and lab results change.
- To provide AI-powered research and answers about supplements, diet and exercise, including Rala and the nutrition panel.
- To run your account: sign-in, billing, support and service emails.
- To send the newsletter, and to send free members the label database’s updates and our longevity and product news and articles, only if you asked for them. Every email has a one-click unsubscribe link.
- To run a free membership: email you a sign-in link (a free membership has no password), remember which pages you opened in full, and give you a one-time discount code for the annual Protocol plan.
- To keep the service secure and to prevent fraud.
- To improve the service using totals and trends rather than individual records.
- To pay the affiliate partner who referred you, unless you opt out (section 3).
We never use your health profile, lab results, supplement list or conversations with Rala for advertising, and we never sell them.
3Who else sees it
Services that work for us
These companies process data only on our instructions and only to provide their service to us. They may not use it for their own purposes.
- AI service providers run the AI models behind Rala, the protocol builder and our product research; your profile, product labels and messages are sent to them to be processed and answered.
- Google Analytics counts visits and how the site is used, as described in section 6 of the privacy policy.
- Vercel hosts the website and stores uploaded files such as lab reports and product photos.
- Neon hosts our database.
- Upstash runs background jobs such as product research.
- Stripe takes payments, and holds the one-time discount code we make for a free member; we never see or store your full card number.
- Resend sends account and service emails, including a free member’s sign-in link.
- Klaviyo sends the newsletter and the free members’ emails, only if you sign up for them; it receives your email address, your name if you gave one, the kind of page you joined on, the date you joined, a label that you are a free member and your discount code.
- Junction connects a wearable device, only if you connect one.
- CookieYes shows the cookie window to visitors from the European Union and the United Kingdom, and records the choices people make.
Google's own privacy policy is at policies.google.com/privacy.
Affiliate partners
How stores and partners pay us, and how we rank prices, is on our Affiliate Disclosure page.
Our affiliate partners (Impact (affiliate network), Affiliate Health Network) are paid when someone they referred joins. Their tools load on our site at two moments only: when you arrive from a partner's link, and when you start a trial or pay. They learn that you came from their link, a device or cookie identifier, and, when you start a trial or pay, that event and its value. Impact also receives your customer number and a scrambled (hashed) form of your email address, so the affiliate who referred you can be paid. They never receive the other pages you read, your health profile, lab results, supplement list or conversations with Rala.
In the United States this happens unless you opt out with the "Do Not Sell or Share My Personal Information" link at the bottom of every page, or your browser sends a Global Privacy Control signal. In the European Union and the United Kingdom, and for visitors from Washington, Nevada, Connecticut and Maryland, your trial or payment is reported to a partner only if you accept advertising cookies.
We do not use advertising trackers from Facebook, Reddit, Google Ads or anyone else. If we ever do, we will change this policy first. Because our site is about health, even a list of the pages you visited could say something about your health, which is why no partner sees the pages you read.
Other cases
- When the law requires it, such as a valid court order.
- To protect the safety, rights or property of our members, the public or the company.
- If the business is sold or merged, in which case this policy continues to apply to your data and we will tell you before anything changes.
4How we protect it
Your data is encrypted on its way to us and where it is stored, and access inside the company is limited to the people who need it to run the service. No system is perfectly secure, and if a breach ever affects your data we will tell you as the law requires.
5How long we keep it
We keep your account data, including lab results, while your account is open, so you can see your results over time. When you ask us to delete your account, we delete your data within 45 days, except records the law requires us to keep, such as payment records. A free membership is kept until you close it, and its details are deleted in the same way. Copies in our backups are overwritten on their normal schedule. Voice conversations with Rala are never recorded.
6Cookies and similar tools
Visitors from the European Union and the United Kingdom see a cookie window that asks for their choice first. Elsewhere there is no window. The tools fall into these groups:
- Necessary: sign-in (a free member's too), security, checkout, remembering your cookie choice and remembering that you hid the free-membership box (kept in your browser only, never sent to us). These are always on.
- Analytics: Google Analytics, which counts visits and how the site is used. In the European Union and the United Kingdom it sets its cookies only if you accept analytics; elsewhere it runs from your first visit, whatever you choose, because it only counts visits for us and is not used for advertising.
- Affiliate: the partners named in section 3, only at the two moments and on the terms described there.
You can make or change your choice at any time with the "Cookie settings" or "Do Not Sell or Share My Personal Information" link at the bottom of every page. Opting out there turns off the affiliate partners for your browser and deletes the cookies that remember a partner's link; Google Analytics keeps counting visits. If your browser sends a Global Privacy Control signal, we treat it as a no to the affiliate partners and to any advertising, even if you press Accept All. Videos on our pages show a still picture, and nothing loads from YouTube until you press play.
7Your choices and rights
Wherever you live, you can ask us to:
- Tell you what personal data we hold about you and give you a copy.
- Correct anything that is wrong. Most of your profile you can edit yourself in the dashboard.
- Delete your data and close your account.
- Tell you which companies we shared it with.
- Stop any use you agreed to or did not opt out of, such as the newsletter, the free member emails or the affiliate partners.
Email support@reverseagelab.net from the address on your account. We confirm it is you before we act, answer within 45 days, and tell you if we need up to 45 more. We will not charge you more or treat you differently for using these rights. If we turn a request down, you can appeal by replying to our answer with the word "Appeal", and a person who did not make the first decision will review it.
8Consumer health data: Washington, Nevada and other states
Washington's My Health My Data Act, Nevada's consumer health data law and similar laws give extra protection to information about your health. Our Consumer Health Data Privacy Policy explains, in one place, what health information we collect, why, where it comes from, who it is shared with and how to use your rights under those laws. We do not sell consumer health data, and we do not use location to target people near health care facilities.
9California residents
In the last 12 months we collected the following categories of personal information, from the sources and for the purposes described above: identifiers (name, email, phone, IP address, device identifiers); customer records; commercial information (your membership and payments); internet activity on our site; approximate location; and sensitive personal information, namely the health information in your profile, lab results and messages to Rala.
- We disclose personal information to the service providers in section 3 for business purposes only.
- We do not sell personal information for money. Our affiliate partners receive the arrival from their link and your trial or payment so they can be paid (section 3), which California may treat as a "sale" or "sharing". You can opt out at any time with the "Do Not Sell or Share My Personal Information" link at the bottom of every page, or with a Global Privacy Control signal from your browser.
- We use sensitive personal information only to provide the service you asked for, so there is nothing further to limit.
- You have the right to know, to delete, to correct and to opt out of sharing, as set out in section 7, and the right not to be treated differently for using them.
- An authorized agent can make a request for you with your written permission; we will still confirm your identity with you.
- We do not knowingly sell or share the personal information of anyone under 16.
10Nevada residents
We do not sell covered information as Nevada law defines it. You can still ask us not to, by emailing support@reverseagelab.net. Nevada's consumer health data rights are covered in our Consumer Health Data Privacy Policy.
11Children
Our service is for adults 18 and over. We do not knowingly collect data from anyone younger.
12Changes to this policy
When we change this policy we post the new version here with a new effective date. If a change is material, we also email members before it takes effect.
Contact us
Reverse Age Lab, Global Advisory Group, LLC, Henderson, Nevada. Email support@reverseagelab.net. Website www.reverseagelab.net.