Privacy Policy

Thriva ("we," "our," or "us") is committed to protecting your health and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

As a platform designed for women navigating menopause, we understand the sensitive nature of the data you share with us. We have built Thriva with privacy-first principles at its core.

We collect information that you provide directly to us:

• Account Information: Name, email address, and authentication credentials.
• Health & Symptom Data: Information about hot flashes, sleep patterns, mood, HRT (Hormone Replacement Therapy) entries, physical triggers, and personal health notes.
• Usage Data: Information about how you interact with our features, pages visited, and time spent on the platform.
• Payment Information: Processed securely via Stripe. We do not store your credit card numbers on our servers.
• Device Information: IP address, browser type, and operating system for security and optimization purposes.

We use the collected data to:

• Provide, maintain, and improve the Thriva platform.
• Generate AI-powered insights from your symptom patterns to help you understand your hormonal journey.
• Process your subscription payments securely.
• Send essential service communications, such as payment receipts and account security alerts.
• Analyze anonymized, aggregate trends to improve our product and better serve our community.

Your health data is among the most sensitive information we handle. We take extraordinary measures to protect it:

• We encrypt all health data at rest using AES-256 encryption and in transit using TLS.
• We do not sell your health data to third parties or data brokers.
• We do not share identifiable health data with advertisers.

We only share your data with trusted service providers essential to our operations:

• Stripe: For secure payment processing.
• AI Infrastructure: For generating your personal health insights. Your data is processed for analysis but is not used to train global AI models.
• Hosting Providers: Secure infrastructure used to store and serve the application.

We retain your account data as long as your account is active. If you choose to delete your account, your data is permanently removed from our active systems within 90 days. You may request immediate deletion at any time by contacting us.

You have the right to:

• Access and export your personal and health data.
• Correct any inaccurate information.
• Request the permanent deletion of your data.
• Object to or restrict the processing of your data.

To exercise these rights, please email us at privacy@thriva.space.

We implement industry-leading security protocols, including regular security audits, strict access controls, and multi-layered encryption to ensure your data remains safe.

If you have any questions about this Privacy Policy, please reach out to our privacy team at privacy@thriva.space.