Privacy policy

Last updated: 3 November 2026

1. Who we are

Centenarians (the app and the website centenarians.app) is provided by World Corporation, 500 Westover Dr #16900, Sanford, NC 27330, USA (“we”, “us”). We are the controller responsible for your personal data.

You can contact us about privacy at any time at legal@worldcorp.co.

2. What we collect

Account details: your email address, a securely hashed password, language, time zone, unit preferences, reminder time and, if you choose to give them, your display name, birth year, sex and height.

Health and wellbeing data you enter or sync: sleep (bedtime, wake time, night wake-ups and sleep quality), energy, mood, stress and soreness, weight, waist, body fat, blood pressure and pulse, resting heart rate, heart rate variability, VO2max, blood oxygen, blood glucose, steps, active energy, workouts, alcohol, coffee, intimacy, eating times, supplements and medications you choose to track, blood test results and the lab documents or photos you upload, and any notes you write.

When the TruePortions meal scanner launches, it will also process the meal photos you take and the meals you log.

Subscription details: your plan, trial status and renewal date, which we receive from Apple or Google through RevenueCat. We never receive your card details.

Device details: an app-generated device ID, platform, app and operating system version, language and a push notification token.

Usage information: which pages and screens are used, app version, country (from your connection) and a one-way hashed version of your IP address. Usage information never contains health values.

3. Your health data and your consent

Information about your health is a special category of personal data under the EU and UK General Data Protection Regulation (GDPR). We process it only on the basis of your explicit consent (Article 9(2)(a) GDPR), and only to provide Centenarians to you.

We ask for three separate consents, and record when you gave each one:

• Health data processing — required, because the app cannot work without it.
• AI processing — optional. Without it, the app works fully, but AI features such as the daily brief and lab report reading are switched off.
• Marketing emails — optional.

You can withdraw any consent at any time in the app under Settings, then Privacy. Withdrawing AI or marketing consent simply switches those features off. Because we cannot provide the app without processing health data, withdrawing health consent starts the deletion of your account. Withdrawing consent does not affect processing that happened before.

4. Other legal bases

We process your account and subscription details to provide the service you signed up for (Article 6(1)(b) GDPR); keep the service secure, prevent abuse and understand overall usage in a way that never includes health values (our legitimate interests, Article 6(1)(f) GDPR); and keep records required by tax and accounting law (Article 6(1)(c) GDPR).

5. Apple Health and Health Connect

If you connect Apple Health or Health Connect, we read only the types of data you allow, and use them only to show you your own data and insights inside Centenarians.

Data from Apple Health and Health Connect is never used for advertising or marketing, never sold, never shared with data brokers or advertising platforms, and never used to build profiles for anyone else.

With your permission, we write back only weight, blood pressure, waist and workouts you log by hand. We never write intimacy or medication data to Apple Health or Health Connect.

6. How we use AI

Our own code calculates every statistic. With your AI consent, we use Google Gemini through Google's paid API to turn those results into short written briefs and reports, to read the values in lab reports you upload, and (when available) to estimate the contents of meal photos. Under Google's paid API terms, your inputs are not used to train Google's models.

For briefs and reports, the AI receives only a small set of calculated numbers, your age range (for example 55–59), sex, language and unit preferences. It never receives your name, email, account ID, exact date of birth, notes, medication names or location.

To read a lab report, we send the document or photos you uploaded. Lab documents can contain details printed by the lab, such as your name, so only upload reports you are comfortable having processed this way. Images are re-encoded first to remove hidden location data.

AI is never used to make decisions about you that have legal or similarly significant effects.

7. Where your data is stored and how it is protected

Our servers and database are hosted by Hetzner in Germany. On your phone, the app keeps its copy of your data in an encrypted database, with an optional Face ID or fingerprint lock.

All data travels over encrypted connections. Free-text notes and the names of medications and supplements are additionally encrypted in our database. Uploaded files are kept in private storage that is never publicly accessible. Notifications on your lock screen never show health values.

8. Who helps us run Centenarians (sub-processors)

We share data with the following service providers only as far as needed for the purpose listed, under contracts that require them to protect it:

We do not sell your personal data, we do not show ads, and we do not share your data with anyone for advertising.

9. International transfers

Some of our providers are based in, or may access data from, the United States or other countries outside the European Economic Area. Where that happens, we rely on the European Commission's Standard Contractual Clauses (and, where applicable, the EU–US Data Privacy Framework) together with additional safeguards such as encryption.

10. How long we keep your data

• Account and health data: until you delete your account.
• When you delete your account, your health data and uploaded files are deleted immediately, and your remaining account record is removed after 7 days (time to cancel any store subscription).
• Data export and doctor report download links expire after 24 hours, and the files are deleted within 7 days.
• Database backups are kept for 30 days and then overwritten.
• Usage information is anonymised when you delete your account.
• Purchase records are kept for as long as tax law requires.

11. Your rights

You have the right to:

• access the personal data we hold about you;
• receive your data in a portable format (Article 20 GDPR) — do it yourself in the app under Settings, then Export data, which gives you JSON and CSV files plus your original lab documents;
• have your data deleted (Article 17 GDPR) — do it yourself in the app under Settings, then Delete account;
• correct inaccurate data, which you can do directly in the app;
• restrict or object to processing based on our legitimate interests;
• withdraw your consent at any time;
• complain to a data protection supervisory authority, in particular in the country where you live or work.

To use any of these rights, use the app or write to legal@worldcorp.co. We will reply within one month.

12. Adults only

Centenarians is only for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a minor has created an account, please contact us and we will delete it.

13. Cookies

Our website uses only strictly necessary cookies. The app uses no advertising identifiers or trackers. Cookie policy

14. Changes to this policy

If we make important changes, we will tell you in the app or by email before they take effect. The date at the top shows when this policy was last updated.

15. Contact

Questions or requests about your data? Write to legal@worldcorp.co or by post to World Corporation, 500 Westover Dr #16900, Sanford, NC 27330, USA.

---

World Corporation · 500 Westover Dr #16900, Sanford, NC 27330, USA · legal@worldcorp.co