Last updated: 20.05.2026.

This Privacy Policy explains how AgeSync d.o.o. (“AgeSync”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you visit agesync.com (the “Site”), create an account, or use the AgeSync dashboard, quiz, and related services (collectively, the “Services”).

By using the Services, you agree to the practices described here.

Information We Collect

We collect the following categories of personal information:

Account & Identity Information. When you register or take the AgeSync quiz, we collect your name, email address, password (stored hashed), date of birth or age, sex, and any profile details you provide.

Order & Billing Information. If you purchase a subscription or product, we collect billing name, billing/shipping address, phone number, and payment-card information. Card details are processed by our payment processor (Stripe) and are not stored on our servers; we retain only the last four digits, card brand, and a transaction reference.

Health & Wellness Data You Provide. The AgeSync dashboard lets you record information about your medications, nutrition, workouts, therapy sessions, lab results, appointments with clinicians, and progress over time. You choose what to enter; we store it in your account so the Services can function.

Connections With Clinicians. If you connect with a doctor or care provider through the Services, we record the connection status and any appointments you schedule together.

Google Calendar Data (Optional). If you connect your Google account, we request OAuth permission to read and write events on your primary calendar. We use this access to:

• display upcoming events from your Google Calendar inside the AgeSync dashboard at request time (these events are not stored in our database — they are fetched live each time you load the schedule);
• create, update, and delete events on your Google Calendar that correspond to appointments you schedule in AgeSync.

We store Google OAuth tokens (access token, refresh token, and expiry) in your user record so we can maintain the connection without re-prompting you. You can disconnect at any time from the Care page, which deletes the tokens from our systems. AgeSync’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Communications. When you contact support or respond to our emails, we retain the contents of those messages for service and quality purposes.

Site & Device Information. When you visit the Site, we automatically collect your IP address, browser type and version, device identifiers, referring URL, pages viewed, and timestamps. See the Cookies section below.

How We Use Your Information

We use personal information to:

• create and maintain your account and authenticate you;
• provide and operate the dashboard, quiz, appointments, calendar sync, and other Services;
• process payments and manage subscriptions through Stripe;
• send transactional emails (order confirmations, password resets, appointment reminders, account notices);
• send marketing emails where you have opted in, and let you unsubscribe at any time;
• respond to support requests and improve the Services;
• detect, prevent, and address fraud, abuse, and security incidents;
• comply with legal obligations.

We do not use the contents of your Google Calendar, health entries, or appointment data to train machine-learning models, to target advertising, or for any purpose other than providing the Services to you.

How We Share Your Information

We do not sell your personal information. We share it only as described below:

• Service Providers. With vendors who help us run the Services — including Siteground, Stripe (payments), Google (calendar sync, if you connect it), and our transactional email provider. These providers are contractually limited to using your information to perform services for us.
• Clinicians You Connect With. If you accept a connection with a doctor or schedule an appointment with them, that clinician sees the details necessary to provide care (your name, the appointment time, any notes you share).
• Legal & Safety. When required by law, subpoena, or court order, or where we believe disclosure is necessary to protect rights, safety, or property.
• Business Transfers. In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred to the successor entity, subject to this Policy.
• With Your Consent. In any other case, only with your explicit permission.

Data Retention

We retain your account and the data within it for as long as your account is active. If you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required by law (e.g., tax and transaction records) or necessary to resolve disputes and enforce our agreements. Google OAuth tokens are deleted immediately when you disconnect Google Calendar.

Security

We use industry-standard safeguards — encrypted transport (HTTPS), hashed passwords, access controls, and least-privilege database access — to protect your information. No system is perfectly secure; we cannot guarantee absolute security.

Cookies

We use first-party cookies for authentication, session management, and remembering preferences. We use limited third-party analytics cookies (e.g., Google Analytics) to understand Site usage. You can block or delete cookies in your browser settings; some features may not work without them. We do not respond to Do Not Track signals because there is no agreed standard.

Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct information that is inaccurate;
• Delete your personal information;
• Port your data to another provider;
• Object to or restrict certain processing;
• Withdraw consent at any time.

To exercise these rights, email contact@agesync.com. We will verify your identity using information already associated with your account before responding, and will respond within the timeframe required by applicable law (typically 30–45 days). You will not be discriminated against for exercising these rights.

California Residents (CCPA/CPRA). You have the rights above, plus the right to know the categories of personal information collected, the categories of sources, the business purposes for collection, and the categories of third parties with whom it has been shared in the past 12 months. We do not sell or share personal information for cross-context behavioral advertising.

EEA, UK, and Swiss Residents (GDPR). Our legal bases for processing are: performance of a contract (operating your account), legitimate interests (security, fraud prevention, product improvement), consent (marketing emails, optional integrations like Google Calendar), and legal obligation (tax, accounting). You may lodge a complaint with your local supervisory authority.

Children

The Services are intended for adults 18 and older and are not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us at contact@agesync.com and we will delete it.

International Transfers

We operate from Croatia, and your information may be processed in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

Third-Party Links

The Site and Services may link to third-party websites. We are not responsible for their content or privacy practices. Review their policies before providing personal information.

Changes to This Policy

We may update this Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated by email or a notice in the dashboard before they take effect.

Data Processing

AI processing. Agesync uses a third-party AI provider, Anthropic PBC, to power features that analyze your health data – reading uploaded lab reports and health documents, generating insights, and answering your questions in the AI coach. Only the data needed for the requested feature is sent (for example, the text of a document you upload, or the message you send the coach). This data is processed under a data-processing agreement that requires Anthropic to protect it to the same standard described in this policy; it is not used to train AI models and is not shared with any other party. We ask for your consent before using these AI features, and you can withdraw it any time in Privacy & data.

Data we collect: account details, health profile you enter, lab/biomarker values, uploaded documents, and (if you connect it) read-only Apple Health data. How we use it: to compute your wellness and biological-age estimates and to show insights. Sharing: with the AI processor above for extraction, and with your care team if you are connected to one.

Contact Us

Questions, requests, or complaints:

• Email: contact@agesync.com
• Mail: Prilaz Fausta Vrančića 8, 42000, Varaždin, Hrvatska