Privacy Policy

Last updated: 2026-07-06

This Privacy Policy explains what information THRIVE collects, how we use it, and the choices you have. It applies to both the THRIVE member mobile app and the THRIVE provider portal, which together make up a single service.

Who we are

THRIVE provides a provider-prescribed wellness service. Members listen to prescribed audio programs and, optionally, record short voice samples and connect a heart-rate device so their care team can review wellness insights over time. The member app and the provider portal are two parts of the same service: your practice’s providers prescribe and review, and you use the app to participate.

THRIVE supports wellness and is not a medical device and does not provide medical diagnosis or treatment. See Not a medical device below.

Information we collect

We collect only what the service needs to function:

• Account identity. When you create or use an account, our authentication provider (Supabase Auth) collects your sign-in identity, such as your name and email address, and manages your credentials.
• Voice recordings and voice biomarkers. When you complete a voice check-in, the app records short WAV audio samples, which may include a sustained vowel, a read-aloud passage, and a diadochokinetic (rapid syllable repetition) task. From these recordings we derive voice biomarkers and scores used for wellness insights.
• Self-reported health profile. You may provide profile details that help interpret your results, such as birth year, sex, smoking status, and any respiratory or vocal conditions. You choose what to share.
• Live heart-rate and HRV data. If you pair a Bluetooth heart-rate device (for example, a WHOOP strap), the app captures live heart-rate and R-R interval data during listening sessions and derives heart-rate variability (HRV) metrics such as RMSSD.
• WHOOP cloud data (only if you link WHOOP).If you choose to link your WHOOP account, we access data from WHOOP’s API with your consent, which may include recovery, sleep, strain, workouts, and body measurements. You can decline this and still use the rest of the service.
• Listening and usage telemetry. We collect information about how you use the service, such as which programs you play and session activity, to operate and improve the service.
• Device information. Basic device details (such as model and operating system version) are attached to voice submissions to help with quality and troubleshooting.

How we use your information

We use the information above to:

• let your practice’s providers review your voice check-ins, heart-rate/HRV data, and wellness trends;
• generate wellness insights and scores for you and your care team;
• operate, secure, support, and improve the service.

We use your information for wellness review and insights only. We do not use it for medical diagnosis or treatment, we do not sell it, and we do not use it for advertising.

Who can see your information

• You. You can see your own data in the app.
• Your practice. The providers and administrators at the practice that prescribed your program can see your data so they can review your wellness. Providers at other practices cannot.
• THRIVE platform operators. A limited number of THRIVE operators may access data as needed to provide support, keep the service running, and investigate problems.

Service providers we share data with

We rely on trusted third parties (subprocessors) to run the service. They process data on our behalf and only for the purposes described here:

• Supabase: authentication and account management, database, file storage, and backend functions.
• WHOOP: only if you link WHOOP, to retrieve your WHOOP data through their API.
• Streaming and audio infrastructure: to deliver audio programs and handle voice submissions.
• Vercel: application hosting.

How long we keep your information; deletion

You can delete your account at any time from the mobile app (Settings → Delete account) or from the portal. Deleting your account deactivates it and removes sign-in access immediately, so you can no longer log in.

Health data collected while you used the service (such as voice recordings, biomarkers, heart-rate/HRV data, and profile details) is retained until our purge tooling completes its removal. If you would like your data removed sooner, contact us at support@thriveradio.com to request expedited removal. We may retain limited information where required to comply with legal obligations.

How we protect your information

• Data is encrypted in transit.
• Access is restricted with row-level access controls so a practice can only reach its own members’ data, and you can only reach your own.
• Access tokens for third-party links (such as WHOOP) are held server-side only and are not exposed to the app or other members.

No system is perfectly secure, but we work to protect your information using safeguards appropriate to its sensitivity.

Not a medical device

THRIVE is a wellness service intended to support general wellness and provide insights to you and your care team. It is not a medical device, it does not diagnose, treat, cure, or prevent any disease, and it is not a substitute for professional medical advice. Always consult a qualified healthcare provider with any questions about your health.

Children

THRIVE is not directed to children under 16, and we do not knowingly collect information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

Contact us

Questions about this policy or your data? Contact us at support@thriveradio.com.