Privacy Policy
This Privacy Policy explains what information THRIVE collects, how we use it, who can see it, and the choices and rights you have. Please read it. By using the THRIVE app or portal you agree to the practices described here.
In plain terms
- We collect what the service needs: your account, the health profile you choose to give, your voice check-ins, heart-rhythm readings from a band you pair, WHOOP data if you link it, and what you listen to.
- Only you, and the people you have authorised, can see your data. We never sell it and never use it for advertising.
- We use de-identified data — with your name, email and other identifiers removed and replaced with random codes — to study and improve how the service works. It cannot be traced back to you.
- You can see, correct, export and delete your data. Contact details are at the end.
- THRIVE is a wellness service, not a medical device.
Contents
- Who we are
- Information we collect
- How we use information
- De-identified and aggregated data
- Who can see your information
- Service providers
- No sale, no advertising, no tracking
- Retention and deletion
- How we protect information
- Your rights and choices
- Phone permissions
- Not a medical device; HIPAA
- Children
- Where data is stored
- Cookies and the website
- Changes to this policy
- Contact us
1. Who we are
THRIVE is operated by You Only Younger LTD, 7002 Riverbrook Drive, Suite 600, Sugar Land, Texas 77479 ("THRIVE", "we", "us"). THRIVE is a wellness service: you listen to sound programs, and optionally record short voice check-ins and run heart-rhythm sessions, so that you can follow your own wellness over time. The THRIVE member app and the THRIVE provider portal are two parts of one service, and this policy covers both, together with the information pages at yoythriveradio.com.
2. Information we collect
We collect only what the service needs to work. You choose whether to provide the optional items.
| What | Details | Required? |
|---|---|---|
| Account identity | Your name, email address and sign-in credentials, managed by our authentication provider. Accounts are created by invitation; there is no public self sign-up. | Required |
| Health profile | Year of birth, biological sex, smoking status, respiratory conditions, vocal conditions and reading language. These are used to compare your voice with people like you. | Needed for voice analysis |
| Voice recordings | Short audio samples recorded during a voice check-in: a sustained vowel, a read-aloud passage, and a rapid syllable repetition. From these we derive voice measurements ("biomarkers") and a vitality score. Recordings that fail the on-phone quality check are kept briefly to improve the checks, are never analysed, and are then deleted. | Optional |
| Heart-rhythm readings | If you pair a Bluetooth heart-rate band (such as a WHOOP strap), the app reads beat-to-beat intervals during a coherence session and derives a coherence reading and session summary (peak, time in high, duration). The raw intervals are stored so the reading can be recomputed. | Optional |
| WHOOP account data | Only if you link your WHOOP account: recovery, sleep, strain and workouts, body measurements, and basic WHOOP profile details, retrieved from WHOOP once a day with your permission. You can unlink at any time. | Optional |
| Listening and usage | Which stations and playlists you play, when, and for how long; which screens you use; and errors the app reports. Listening history is what lets the service show your progress and recommend what to play. | Collected automatically |
| Device details | Device model, operating system version and app version, attached to voice submissions and error reports for quality and troubleshooting. | Collected automatically |
| Support communications | What you send us when you contact support. | If you contact us |
We do not collect your precise location, your contacts, your photos, or payment details. The app has no advertising or analytics trackers.
3. How we use information
- To run the service: sign you in, play your programs, run your voice check-ins and coherence sessions, and show you your results.
- To let the people you have authorised in the provider portal review your check-ins, heart-rhythm sessions, WHOOP trends and listening, and adjust your program.
- To compute your scores and trends, which compare your results with your own history and with reference ranges for people with a similar profile.
- To recommend what to play, based on how you have responded to different programs.
- To keep the service secure, fix problems, and support you when you ask.
- To improve the service, using de-identified data as described in section 4.
- To meet legal obligations and enforce our terms.
Legal bases (for people in the EEA, UK or similar jurisdictions). We process your information to perform our contract with you; on the basis of your explicit consent for health data, voice recordings and WHOOP data (which you can withdraw); and for our legitimate interests in operating, securing and improving the service, where those interests are not outweighed by your rights.
4. De-identified and aggregated data
What we do with de-identified data
We use information from which your identity has been removed to understand and improve how THRIVE works: for example, to test whether a listening program is associated with better voice or coherence results across many members, to tune the analysis, and to report overall results to partners.
Before any data is used this way we remove or replace every direct identifier: your name, email address, account identifiers, device identifiers, exact dates of birth, and free-text you have written. Records are keyed by a random code that is not derived from your identity and is not stored alongside it. Results are reported only in the aggregate or with such codes, and we apply minimum group sizes so that no individual can be singled out.
We will not attempt to re-identify de-identified data, and we contractually require anyone we share it with not to attempt it either. Voice recordings themselves are treated as identifying and are not included in de-identified data sets; only derived measurements are.
De-identified data may be retained after you delete your account, because it can no longer be linked to you. It is never sold.
5. Who can see your information
- You. Your results, history and profile are shown to you in the app.
- People you have authorised. Those you have agreed may review your progress through the provider portal can see your data. No one else can; the system enforces this at the database level, so each account can only reach the rows it is entitled to.
- THRIVE operators. A small number of THRIVE staff can access data when needed to provide support, keep the service running, or investigate a problem. Access is logged.
- Service providers listed in section 6, only to provide their service to us.
- Law and safety. We may disclose information if required by law, to respond to lawful requests, or to protect the rights, safety or property of members, THRIVE or others.
- Business transfers. If THRIVE is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
6. Service providers (subprocessors)
We rely on third-party companies to run the service: for example, to host our systems and databases, store files, authenticate sign-ins, send account emails, and stream audio. These companies process your information only on our instructions, only to provide their service to us, and under contracts that require them to protect it. We do not allow them to use your information for their own purposes.
If you choose to link a third-party service such as WHOOP, that company also processes your data under its own privacy policy, which we recommend you read. The Apple App Store and Google Play distribute the app and may collect crash and installation statistics under their own policies.
7. No sale, no advertising, no tracking
We do not sell your personal information and have not done so. We do not "share" it for cross-context behavioural advertising (as those terms are defined in California law). We do not use it for advertising of any kind, and the app contains no advertising, marketing or analytics trackers. Because we do not sell or share personal information, there is no need for a "Do Not Sell or Share" opt-out; if that ever changes we will update this policy and provide one.
8. How long we keep information; deleting your account
We keep your information for as long as your account is active, and then for the periods below unless you ask us to delete it sooner.
| Information | Kept for |
|---|---|
| Account identity | Until you delete your account; then 30 days to complete removal. |
| Voice recordings (audio files) | 24 months from recording, or until account deletion, whichever is first. Derived measurements and scores are kept with your history. |
| Rejected voice takes | Up to 30 days, never analysed, then deleted. |
| Heart-rhythm sessions, WHOOP data, listening history, scores and trends | Until you delete your account. |
| Support communications | 24 months. |
| De-identified data | Indefinitely (see section 4). |
Deleting your account. Contact us at the address in section 17. Deletion removes your sign-in immediately and your personal information within the periods above. We may keep limited information where the law requires it, or to resolve disputes and enforce our terms.
9. How we protect information
- Data is encrypted in transit (TLS) and at rest by our hosting providers.
- Access is restricted with row-level access rules, so each account can only reach the data it is entitled to, and you can only reach your own.
- Sign-in tokens on your phone are held in the phone's secure storage. Tokens for linked services such as WHOOP are held only on our servers and never sent to the app.
- Staff access is limited to people who need it and is logged.
No system is perfectly secure. If we learn of a breach affecting your information we will notify you and any regulator as the law requires.
10. Your rights and choices
Wherever you live, you can ask us to:
- Access the personal information we hold about you and receive a copy in a portable format.
- Correct information that is inaccurate. Profile details can be changed in the app under Account → Profile.
- Delete your information (see section 8).
- Withdraw consent for optional data: stop recording voice check-ins, unpair your band, or unlink WHOOP (Account → WHOOP → Disconnect) at any time. Data already collected stays in your history until you delete it.
- Object to or restrict certain processing, where the law gives you that right.
We will not discriminate against you for exercising any of these rights. To make a request, contact us (section 17). We will verify your identity, usually by confirming the email address on your account, and respond within the time the law allows (45 days in California; one month in the EEA/UK), extending it only where permitted. You may authorise an agent to act for you; we will ask for proof of that authority.
California residents
Under the CCPA/CPRA you have the rights listed above, including the right to know the categories of personal information we collect (identifiers, health and biometric-type information from your voice and heart rhythm, usage information, and inferences such as scores), the sources (you, your band, and WHOOP), the purposes (section 3), and the categories of recipients (sections 5 and 6). We do not sell or share personal information and we do not use or disclose sensitive personal information for purposes other than providing the service, so no "Limit the use of my sensitive personal information" option is required. We have not sold or shared personal information in the preceding 12 months.
EEA, UK and Switzerland
You also have the right to lodge a complaint with your local data-protection authority. Where we rely on consent you may withdraw it at any time; where we rely on legitimate interests you may object.
11. Phone permissions
- Microphone — only for voice check-ins. Nothing else in the app uses it, and recording never happens in the background.
- Bluetooth — only to read heart rate from a band you choose to pair, during a session you start.
- Background audio — so a program keeps playing when the screen locks.
You can change any of these in your phone's Settings at any time; the app will tell you what stops working.
12. Not a medical device; HIPAA
THRIVE is intended to support general wellness and to give you and your care team insights over time. It is not a medical device; it does not diagnose, treat, cure or prevent any disease and is not a substitute for professional medical advice. Always consult a qualified healthcare provider with questions about your health, and never delay seeking care because of something shown in the app.
THRIVE is a wellness service and does not itself provide healthcare or bill for it, so THRIVE is not a "covered entity" under HIPAA. Information you give to your own healthcare providers is governed by their privacy notices, not this policy.
13. Children
THRIVE is not directed to children under 16 and we do not knowingly collect information from anyone under 16. If you believe a child has provided information to us, contact us and we will delete it.
14. Where data is stored
Our servers are in the United States. If you use THRIVE from outside the United States, your information will be transferred to and processed there, where privacy laws may differ from those of your country. Where required, we rely on standard contractual clauses or other approved safeguards for those transfers.
15. Cookies and the website
yoythriveradio.com and the member guide use no cookies and no analytics. The provider portal uses only the cookies needed to keep a provider signed in; it sets no advertising or tracking cookies. The member app does not use cookies.
16. Changes to this policy
We may update this policy from time to time. When we do we will change the effective date above and, for material changes, notify you in the app or by email before they take effect. Continued use after the effective date means you accept the updated policy.
17. Contact us
Questions about this policy, or a request about your data:
You Only Younger LTD
7002 Riverbrook Drive, Suite 600
Sugar Land, Texas 77479
Email: info@youonlyyounger.com