Privacy Policy
Last updated October 23, 2026
This policy explains what information Thrive Coach collects, how we use it, who helps us process it, and the choices you have. Thrive Coach is a wellness app, not a medical service or a healthcare provider.
1. What we collect
We collect only what you give us while using Thrive Coach, plus the basic technical information any website receives.
- Your account: your email address and password (stored securely by our database provider; we never see your password).
- Your answers during setup: your confirmations, whether you're under a provider's care, your medication, how you take it, your dose and start date, pregnancy status, whether you have type 1 diabetes, your answer to the eating-disorder screening question, symptoms, perimenopause status, weight, food preferences and intolerances, your goal and your first name.
- What you log: weekly check-ins (weight, symptoms, mood, energy, notes and any dose change), protein, fiber, water, strength days and your daily stomach answer.
- Your conversations with the coach: your messages and the coach's replies.
- Meal photos: when you use the camera in Coach, the photo is analysed and then discarded. We keep only a count, so we can limit photos to 10 a day.
- Settings: your time zone, so "today" ends at your midnight, and a record of when you agreed to our policies.
- Technical information: your IP address and basic request details, kept in our hosting provider's logs.
Much of this is health information. The Consumer Health Data Privacy Policy explains how we handle it in more detail.
2. How we use it
- To run Thrive Coach: your Today screen, Nutrition, Journey, check-ins, the coach and your appointment summary.
- To personalize the coach's replies and suggestions to your stage, symptoms and logs.
- To keep the service secure and working, and to answer you when you contact us.
We do not sell your information, use it for advertising, or share it with data brokers. We don't use your health information to build profiles for anyone else.
3. Services that process it for us
We use a small number of service providers to run Thrive Coach. They process information only to provide their service to us.
- Supabase stores your account and everything you enter.
- Vercel hosts the app and keeps request logs.
- OpenAI generates the coach's replies, your welcome summary during setup and meal-photo estimates. We send it your message along with the profile, check-in and log details the coach needs to answer you. Under OpenAI's API terms, this information is not used to train its models; OpenAI may keep it for up to 30 days to detect abuse.
- Resend delivers sign-in, confirmation and password emails.
- PostHog counts visits to our public pages (the home page, these policies and the sign-in pages). It never runs on the screens you use after signing in, records no clicks or sessions, and sets no cookies.
Voice input. When you tap the microphone in Coach, speech recognition is handled by your browser, which sends the audio to its maker (Google for Chrome, Apple for Safari) under that company's privacy policy. Thrive Coach receives only the words that appear in your message box.
We may also disclose information if the law requires it, or to protect someone's safety.
4. How long we keep it
We keep your information while your account is open. You can clear your coach conversation at any time from Coach. When you delete your account from Profile, everything you entered is deleted. Copies in our providers' backups and logs expire on their own schedules, usually within weeks.
5. Your choices and rights
- See or get a copy of your information: email contact@thrive-coach.app.
- Correct it: edit your details in Profile, or email us.
- Delete it: delete your account in Profile, which also withdraws your consent. You can also email us.
We answer requests within 45 days and won't treat you differently for making one. If we turn down a request, you can appeal by replying to our answer. More detail is in the Consumer Health Data Privacy Policy.
6. Security
Information travels encrypted between your device and our services, and our database lets each account read only its own records. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.
7. Who Thrive Coach is for
Thrive Coach is for adults 18 and older in the United States. We don't knowingly collect information from anyone under 18.
8. Changes to this policy
If we change this policy, we'll update the date at the top. If the change affects how we use your health information, we'll ask for your agreement again before you continue using the app.
9. Contact us
Thrive Coach is run by Lyonheart AI LLC, a California company. Questions or requests: contact@thrive-coach.app.