Consumer Health Data Privacy Policy
Additional protections for residents of Washington, Nevada, and Connecticut, under Washington’s My Health My Data Act, Nevada SB 370, and the Connecticut Data Privacy Act. If your state adopts an equivalent law, this covers you too. This policy expands on our privacy practices and data processing activities as described in our general privacy policy, available here. Please review that document for additional information.
Last Updated: October 30, 2026.
Abacus collects health information from you generally through our website using our public calculators, such as the Social Security Calculator and the Lifespan Calculator, available here: https://abacuslifearc.com/calculators/social-security/.
In addition, Abacus also collects information from you when you seek financial services or products from us, which includes medical record data and other health data subject to the Health Insurance Portability and Accountability Act (“HIPAA”) and the Gramm-Leach-Bliley Act (“GLBA”). Please see our Financial Privacy Notice for more information about your rights with respect to the health data we process about you in that context.
This policy does not apply to any data collected subject to HIPAA or GLBA.
For purposes of this policy, “consumer health data” means personal information that is linked or reasonably linkable to an individual and that identifies the individual’s past, present, or future physical or mental health status. We may also de-identify or collect de-identified data for these purposes. When collecting de-identified data, we will only process such data in a de-identified fashion and will not make any attempts to re-identify such data. Below we describe how state-specific definitions apply to your rights requests.
1. What We Collect
We collect your gender, overall health, exercise data, smoking history, family health history, and other health data you share with us through our LifeARC™ calculators: https://abacuslifearc.com/calculators/social-security/.
2. How We Receive Your Consumer Health Data
From you when you share information with us on our website.
3. What We Use Your Consumer Health Data For
To provide our services to you and to talk to you about longevity-based financial planning.
We do not use your health data to sell to you. It does not decide which commercial offers, campaigns, or advertising you see, here or anywhere else.
4. Categories of Third Parties and Specific Affiliates Who See Your Consumer Health Data
De-identified datasets are not consumer health data and are covered by the separate Authorization for Use of Medical Information.
Processors we rely on for hosting, infrastructure, document and AI processing inside our own cloud, and security. All bound by contract to act only on our instructions.
Anyone you choose, when you export or share your information yourself.
Authorities, only where the law requires it.
Our affiliates, including ABL Technologies, LLC (d/b/a Abacus Intel, LLC).
5. We Do Not Sell Your Consumer Health Data
We never sell consumer health data that identifies you, and we do not disclose identifiable data for money or anything else of value. De-identified datasets are covered separately by the optional Authorization for Use of Medical Information. We will never ask you for the separate authorization that a sale would legally require, because we will never make one. No advertiser, ad-measurement provider or data broker ever receives it.
One exception: if Abacus is acquired or merges, your data may transfer to the successor, which stays bound by this policy.
6. Your Rights and How to Exercise Them
You can exercise any of these by writing to info@abacuslife.com. Any clear written request will be given effect. Remember, you may always withdraw your consent for our processing of your health information.
Exercising Your Privacy Rights Regarding Consumer Health Data
Connecticut residents, Nevada residents, Washington residents and individuals that have their consumer health data collected by us in Nevada or Washington may exercise the following rights with respect to their consumer health data we collect:
Right to Know: The right to confirm whether we are collecting, sharing or selling their consumer health data and to access such consumer health data.
Right to Access: The right to a portable and technically feasible copy of the consumer health data we have collected from them.
Right to Know Third Parties: The right to obtain a list of all third parties and/or affiliates with whom we have shared or sold their consumer health data and an online mechanism to contact these third parties.
Right to Opt-Out: The right to require that we stop collecting, sharing or selling their consumer health data, including for targeted advertising and profiling purposes.
Right to Delete: The right to request deletion of the consumer health data that we have collected about them.
Right to Correct: The right to ask that we correct inaccuracies in the consumer health data we have collected about them.
Please note that for purposes of this section of this policy, we consider “consumer health data” to mean:
For Connecticut residents: “consumer health data” as defined under the Connecticut Data Privacy Act, as amended.
For Nevada residents or individuals that have their consumer health data collected by us in Nevada: “consumer health data” as defined under the Nevada Consumer Health Data Privacy Law.
For Washington residents or individuals that have their consumer health data collected by us in Washington: “consumer health data” as defined under the Washington My Health My Data Act.
Exercising Your Rights and How We Will Respond
If you have other questions, comments or concerns about our privacy practices, or if you wish to issue a request to exercise your rights where applicable by law, please contact us by email at info@abacuslife.com. Please provide your name and contact information along with the request. We will respond to such requests within 45 days from when we receive your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we will let you know.
We usually act on requests and provide information free of charge, but we may charge a reasonable fee to cover our administrative costs of providing the information in certain situations.
Verification of Identity – Request to Know, Request to Know Third Parties, Request a Copy, Delete, Correct
We will ask you for two pieces of personal information and attempt to match those to information that we maintain about you.
If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.
When We Do Not Act on a Request – Appeal Process
In some cases, we may not act on your requests (e.g., if we cannot do so under other laws that apply). When this is the case, we will explain our reasons for not providing you with the information or taking the action (e.g., correcting data) you requested.
Additionally, you have the right to appeal our decision by contacting us at info@abacuslife.com within 30 days after your receipt of our decision. We will respond to your appeal within 45 days of our receipt of the request. If your appeal is unsuccessful, Washington residents can raise a concern or lodge a complaint with the Washington State Attorney General at https://www.atg.wa.gov/file-complaint. You may also generally complain to your Attorney General if you have any concerns about our practices or our responses to your requests.
Third Party Collection of Consumer Health Data
When you use our website or other online services, third parties will not be allowed to collect your consumer health data over time and across different websites and other online services we offer.
How We Keep Your Consumer Health Data Secure
We implement and maintain reasonable security appropriate to the nature of the consumer health data that we collect, use, retain, transfer or otherwise process. However, there is no perfect security, and reasonable security is a process that involves risk management rather than risk elimination. While we are committed to maintaining a reasonable information security program, no such program can be perfect; in other words, all risk cannot reasonably be eliminated. Data security incidents and breaches can occur due to factors that cannot reasonably be prevented.
7. Changes to This Policy
We will review and update this policy from time to time. If changes are made, we will update this policy and reflect the date of such modification in the date above. If the changes are material, you will be notified via email.
Contact Us
If there are any questions regarding this policy or to request a copy of this Consumer Health Data Privacy Policy in another format you may contact us at info@abacuslife.com. You also have the right to a portable copy of the personal data you gave us, up to twice a year; to correct anything inaccurate; to opt out of targeted advertising and of the sale of personal data; and to give or withhold consent before we process sensitive data, health data included.