Legal Documentation

Privacy Policy

Last Updated & Effective: September 30, 2026

Your Health Data Belongs to You: Thrive collects health and wellness metrics solely to compute your personal Daily Wellness Score and deliver AI coaching protocols. We never sell, monetize, or disclose your private biometric telemetry to third-party data brokers or advertisers under any circumstance.

1. Introduction

Thrive ("we", "our", or "us") is dedicated to protecting your personal privacy and safeguarding your health and wellness data. This Privacy Policy outlines our standards and practices regarding the collection, processing, and protection of information gathered through the Thrive mobile application (iOS and Android) and associated web services.

2. Health & Biometric Data Principles

Thrive operates on principles of privacy-by-design and transparent user consent. All sensitive health computations are protected by strict access controls and client-side encryption safeguards.

3. Information We Collect

A. Account & Profile Information

  • Name, age, gender, email address, and subscription tier selection provided during account registration.
  • Authentication credentials and device security tokens managed via Supabase Cloud Auth.

B. Biometric & Wellness Telemetry

  • Daily logs across sleep duration and quality, HRV (Heart Rate Variability), step counts, active calories, fluid ounces, nutrition tags, focus ratings, and cycle phase information.
  • Wearable sync records from Apple Health, Google Fit, Garmin, or Fitbit when explicitly connected by you.

C. Conversational AI Guidance & Interactions

  • Conversations, prompts, and meal photo scans shared with AI Coach and Haven companion to receive personalized nutritional, emotional, and lifestyle protocols.

D. Location & GPS Data

  • Precise GPS location data is collected during active workout sessions (running, walking, cycling) to map your route, calculate distance, pace, and elevation in real-time.
  • Background Location Access: When you start a workout session and grant location permissions, Thrive continues to collect your GPS location data even when the app is closed, running in the background, or your screen is locked. This is necessary to accurately record your complete workout route without interruption. Background location tracking automatically stops when you end your workout session or when the app is terminated. You can revoke background location access at any time in your device settings or within the app under Settings → Privacy & Security.
  • GPS coordinates are stored securely in your account and are never shared with third parties or used for advertising.

4. Third-Party Service Providers & AI Processing Partners

In compliance with Apple App Store Review Guidelines 5.1.1(i) and 5.1.2(i), we disclose all third-party services that process user information:

Infrastructure & Authentication Partners

  • Supabase Inc.: Scalable cloud database hosting, Row-Level Security (RLS), encrypted authentication, and secure avatar media storage.
  • Firebase / FCM: Push notifications for daily check-in reminders and streak alerts.
  • Sentry: Application crash tracking and diagnostic error reporting (strictly non-identifying telemetry).
  • RevenueCat: In-app purchase validation and subscription receipt verification.

Artificial Intelligence Processing Partners

To provide personalized health insights, nutritional plate analysis, and 24/7 conversational coaching, Thrive utilizes trusted third-party artificial intelligence engines under strict non-training, zero-data-retention APIs:

  • Google Gemini (Alphabet Inc.): Primary health coach conversational engine and food image nutritional analysis. (Terms & Data Privacy)
  • Groq Cloud (Groq Inc.): Ultra low-latency LPU processing for instant wellness advice and habit recommendations. (Privacy Policy)
  • OpenAI LLC: Multi-model fallback reasoning and structured daily wellness briefing generation. (Enterprise Privacy)

What is shared with AI partners: Only your active coaching prompts, meal photos (when analyzing food plates), and summarized wellness metrics (sleep hours, stress level, water cups, activity summaries) required to answer your query.

What is NEVER shared with AI partners: Your real name, email address, password, billing credentials, or GPS route coordinates.

In-App Consent & Revocation: You must explicitly grant consent before any data is sent to AI partners. You can revoke or re-grant your AI data processing consent at any time within the app under Settings → Privacy & Security.

5. How We Use Your Information

  • To compute your daily composite health score and identify recovery opportunities.
  • To deliver adaptive, science-backed guidance through the AI Coach and Haven.
  • To support structured 21-day wellness programs and habit consistency tracking.
  • To sync biometric inputs from connected smartwatches and fitness wearables.
  • To provide real-time GPS route tracking, distance, pace, and elevation data during active workout sessions.
  • To protect your account against unauthorized access and maintain app security.

6. User Rights & Data Deletion

In accordance with global privacy regulations (GDPR, CCPA, and App Store / Google Play requirements), you have the right to:

  • Access, download, or export a copy of your stored biometric records and profile data.
  • Modify or update inaccurate account information directly from your profile settings.
  • Permanently Delete Your Account & All Associated Data: You may trigger account deletion immediately within the Thrive mobile app under Profile → Settings → Danger Zone → Delete Account, or submit a request directly through our web Support Portal. Upon confirmation, all your stored biometric records and account identifiers will be permanently expunged.

8. Contact & Privacy Officer

For questions, privacy requests, or concerns regarding your personal data, please contact our Privacy Team at:

Thrive Wellness Privacy Office
Email: support@thrivewellness.io