Privacy & Data Policy

Last updated: June 24, 2026

1. Who we are

The Manny AI Coach VIP Portal ("we," "us," "the Stack") is operated by Resilience Advantage / REBL Health, a health optimization service founded by Emmanuel Morales. The Stack consists of three integrated tools accessible at my.theresilienceadvantage.com: the Resilience Audit, the Resilience Twin, and the Manny AI Coach.

2. What data we collect

When you use the Stack, we collect and process:

• Account data: email address, password hash (we never see your password), biological sex (Male / Female / Intersex / Prefer not to say), session tokens, sign-in history, consent record
• Audit data: photographs of your face, body, skin, oral cavity, and other body regions you upload; intake form answers; AI synthesis outputs
• Twin data: genetic test results (raw data files or formatted reports) you upload; blood lab test results you upload; personal notes and observations you write; structured extractions from your uploads; versioned Resilience Profile Reports we generate from your data
• Coach data: conversation history with the Manny AI Coach
• Operational data: IP addresses, user agent strings, error logs, cost-per-event accounting (for our unit economics)

3. Why we collect it

Your data is used exclusively to:

• Generate personalized health insights, reports, and AI coaching responses for you
• Maintain longitudinal context (so reports can compare to your past data)
• Enforce safety patterns (e.g., flagging drug interactions based on your genetics)
• Operate the service (authentication, billing, support)
• Improve the service in aggregate, anonymized ways

We do not use your data for advertising, marketing other companies' products to you, training third-party AI models, or any purpose unrelated to providing you with the Stack's services.

4. Third-party processors

The Stack uses the following third-party services to process your data on our behalf. Each is bound by their own privacy commitments and processes data only as needed to deliver our service:

• Anthropic (Claude AI) — processes your audit synthesis, Twin Report generation, and Coach conversations. Anthropic's published commitment is that they do not train models on customer API data. Anthropic Privacy Policy
• OpenAI (text embeddings) — processes text for our clinical wisdom vector search. Same not-trained-on-API-data commitment. OpenAI Privacy Policy
• Amazon Web Services (AWS) — hosts our encrypted backups and Key Management Service (KMS). AWS Privacy
• Mailersend — delivers transactional email (magic links, password resets). Mailersend Privacy

5. How your data is protected

Your data is encrypted both in transit and at rest:

• In transit: all communication uses HTTPS with TLS 1.3
• At rest: per-client AES-256-GCM encryption with HKDF-derived keys; only the data you upload to your account can be decrypted with your unique key derivation
• Master encryption salt: stored in AWS KMS (Key Management Service); accessed only by the server runtime
• Backups: daily encrypted backups to AWS S3 with SSE-KMS encryption and 90-day retention
• Authentication: password hashes use Argon2id (industry standard); magic-link tokens expire in 24 hours, single-use; session tokens have 30-day TTL

6. Your rights

You have the right to:

• Access: request a copy of all data we hold about you (export available via admin support)
• Correct: update inaccurate information in your account
• Delete: request full deletion of your data at any time (this is irreversible)
• Withdraw consent: withdrawing consent triggers full data deletion. There is no soft-pause option for compliance reasons.
• Portability: receive your data in a structured machine-readable format (JSON)

To exercise any of these rights, email support@theresilienceadvantage.com.

7. Data retention

Your data is retained for as long as your account is active. Encrypted backups are retained for 90 days after deletion (legal protection window), then permanently destroyed. Audit logs (sign-ins, consents, admin actions) are retained for 7 years for legal and regulatory purposes.

8. Children

The Stack is for adults 18 years of age or older. We do not knowingly collect data from minors. Your consent confirms you are 18+.

9. Jurisdictional considerations

The Stack operates globally. We commit to handling your data in line with the strictest applicable standard, including:

• GDPR (European Union): lawful basis for processing is your explicit consent, which can be withdrawn
• CCPA (California): we do not sell your personal information
• PIPEDA (Canada): we process data in accordance with the ten privacy principles

You can request jurisdiction-specific privacy disclosures by emailing support.

10. Medical disclaimer

The Stack is a personal health optimization tool, not a medical service. We do not provide medical diagnoses, prescriptions, or treatment. AI-generated reports and recommendations are for educational purposes. Always consult a qualified medical practitioner for medical decisions, especially before starting, stopping, or modifying any medication or supplement.

11. Changes to this policy

If we materially change this policy, we will assign a new policy version (e.g., policy-v1.1) and prompt you to re-consent on your next login. Your previous consent records are preserved for legal trail.

12. Contact

Questions, requests, or concerns: support@theresilienceadvantage.com