Privacy statement.

Athlete Life Ltd is the data controller for the personal data described in this statement. Our registered address is 104 West End Avenue, Harrogate.

You can contact us about your data using the contact form on our website.

You give us:

• Identity and contact details (name, email, date of birth, address)
• Account and policy information
• Health, lifestyle and fitness information relevant to longevity and underwriting

We collect automatically:

• Device, browser, and usage data when you use our website and app
• Analytics and interaction data

From connected fitness services (Garmin and Strava):

• With your explicit consent, we connect to your Garmin and/or Strava account and collect fitness and activity data such as workouts, heart rate, VO2 max, resting heart rate, and related metrics.
• You can disconnect these integrations at any time, which stops further data collection.

Some of this data — particularly health and fitness data — is special category data under data protection law. We process it only with your explicit consent and/or where necessary for the insurance services you have requested.

We use your data to:

• Provide quotes, set up and administer your insurance
• Calculate your Longevity Score and other derived metrics from your fitness and health data
• Operate, secure, and improve our website, app, and services
• Communicate with you about your account and policy
• Meet our legal, regulatory, and FCA obligations

Legal bases: performance of a contract; your consent (especially for fitness integrations and health data); our legitimate interests in operating and improving our services; and compliance with legal obligations. For special category data we rely on explicit consent and/or the processing-necessary-for-insurance condition.

We do not share your raw Garmin or Strava data with third parties.

Instead, we use that data to generate derived outputs — such as your Longevity Score and other derived metrics — which we share with our insurance and underwriting partners as part of the underwriting process. These partners currently include Best Insurance and Great American. These partners act as independent data controllers for the data they receive and process it under their own privacy policies.

We also share data with service providers who process data on our behalf (see section 05).

We may disclose data where required by law, regulation, or a regulator such as the FCA.

We use trusted third-party providers to store and process data:

• Firebase (Google) — application data storage
• Google Analytics and PostHog — website and product analytics
• Google Drive / Google Cloud services — storage of operational and work data

These providers process data under our instructions as processors. Some may process data outside the UK; where they do, we rely on appropriate safeguards (such as UK adequacy regulations or Standard Contractual Clauses / the UK Addendum).

We reserve the right to use data for research and analytical purposes. Where we do, the data is anonymised so it can no longer identify you. Anonymised data is not personal data and may be used and retained without the restrictions in this statement.

We keep personal data only as long as necessary for the purposes above and to meet our legal and regulatory obligations. We retain your personal data for 10 years after the end of your relationship with us, in line with our regulatory and insurance obligations.

Under UK data protection law you have the right to:

• Access your data
• Correct inaccurate data
• Request erasure
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (without affecting prior processing). Where processing relies on consent — including fitness integrations — you can withdraw it at any time.

To exercise these rights, please use the contact form on our website. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

We may update this statement from time to time. We will post the updated version here and update the “Last updated” date.