Privacy Policy

Privacy Policy Project Sage An AI-Powered Wellness Coaching Platform Prepared by Privacy Team, Project Sage Organization: Project Sage Date: March 2026 1. INTRODUCTION Project Sage (“we,” “us,” “our”) operates Project Sage, an AI-powered wellness coaching platform designed to help users optimize their health, cognitive performance, and longevity through personalized coaching delivered via SMS. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use Project Sage and our related services. Important: Project Sage is a wellness and lifestyle coaching service. It is not a medical service. Sage does not diagnose medical conditions, prescribe medications, or provide medical treatment. 2. INFORMATION WE COLLECT We collect several categories of information: a. Account Information: Full name, email address, phone number (for SMS), date of birth, and timezone. b. Wearable Device Data: With your consent, we collect health and biometric data (sleep, heart rate, HRV, activity) via the Terra API from devices like Oura Ring, Apple Watch, and WHOOP. c. Conversational Data: All SMS messages exchanged, including health disclosures (meals, supplements, stress) and structured records derived from conversations. d. Biomarker Data (Optional): Fasting glucose, HbA1c, lipid panels, and biological age estimates (e.g., from Function Health). e. Scoring and Analytics: Proprietary scores like BAOS (Biological Age Optimization Score) and CRI (Cognitive Resilience Index). f. SMS Communications Consent: By enrolling, you consent to recurring automated SMS messages (typically 3-8 per day). 3. HOW WE USE YOUR INFORMATION We use data for personalized coaching, computing wellness scores, progress reporting, and service improvement. We do NOT sell your personal information or use health data for advertising. 4. THIRD-PARTY SERVICE PROVIDERS Providers include OpenAI (GPT-4o), Twilio (SMS delivery), Terra API (wearable data), and Bubble.io (hosting). 5. DATA RETENTION Data is retained while your account is active. Conversations are kept for coaching continuity. Personal data is deleted within 30 days of an account deletion request. 6. DATA SECURITY We implement encryption in transit (TLS/SSL) and at rest, along with access controls and regular security assessments. 7. YOUR RIGHTS AND CHOICES You have rights to access, correct, delete, and port your data. You can opt-out of SMS by texting STOP. 8. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA) California residents have rights to know, delete, and opt-out of the sale of personal information (which we do not sell). 9. HEALTH DATA DISCLAIMER Project Sage is NOT a medical service or a HIPAA-covered entity. It is a wellness coaching service intended for general wellness optimization. 10. CONTACT US Email: privacy@projectsage.com for privacy requests.