Privacy Policy

1. Who We Are

ThriveOS is the data controller for personal data processed through our applications and website.

• Contact for privacy matters: [email protected]
• Registered location: Dubai, United Arab Emirates

1.1 Scope

This policy applies to every application we publish, including applications released after the date above. A list of our current applications is at thriveos.app/apps.

Our applications are independent of one another. Each has its own account, its own subscription, and its own stored data, and we do not link accounts between applications or combine your data across them.

2. Information We Collect

2.1 Information you provide

• Account information — email address, password (stored hashed, never in plain text), and any display name you set.
• User content — the habits, goals, routines, notes, and progress entries you create. This is the core data the Service exists to store on your behalf.
• Support correspondence — messages you send us, including any information you choose to include in them.
• Waitlist sign-ups — if you submit your email address on our website to be notified when an application opens, we store that address for that purpose only. We do not use it for any other marketing, and you can ask us to remove it at any time by emailing [email protected]. Waitlist addresses are deleted once the application has launched, or on request, whichever comes first.

2.2 Information collected automatically

• Device and technical data — device model, operating system version, app version, language, and time zone.

Crash and diagnostic data — collected by Apple and Google, not by us. Our applications contain no crash reporting or diagnostics software of our own, and transmit no crash data to us or to any third party.

If you have chosen to share analytics with Apple or Google in your device settings, your operating system may send crash reports about the application to those companies, under their own privacy policies and their own consent controls. Apple and Google then provide us with aggregated reports in which personal data has already been removed — typically the error, the point in the code where it occurred, the app version, and the device model. We cannot identify you from these reports and we use them only to fix faults.

You can turn this off at any time: on iOS in Settings › Privacy & Security › Analytics & Improvements, and on Android in Settings › Google › Usage & diagnostics.

• Push notification tokens — if you enable reminders, a device token used solely to deliver the notifications you have opted into. You can turn these off at any time in your device settings.

We do not use third-party analytics. We do not track which screens you open, which features you use, or how long you spend in the application, and we do not build usage profiles about you.

2.3 Subscription and payment information

We do not receive or store your full payment card details. Card data is handled entirely by our payment processors.

• Web purchases — processed by Paddle, which acts as Merchant of Record. Paddle collects your billing name, billing address, tax jurisdiction, and payment details directly. We receive confirmation of your subscription status and a transaction reference.
• App purchases — processed by Apple or Google. We receive an anonymised subscriber identifier and entitlement status via RevenueCat; we do not receive your payment details.

2.4 Sensitive data

ThriveOS does not collect special category data. Our applications store habits, goals, routines, and progress entries only. They do not provide fields for, and we do not ask you for, health or medical information — including sleep, weight, mood, diet, exercise, or medication data — and we do not collect data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or sexual orientation.

We do not integrate with Apple HealthKit, Google Fit, Health Connect, or any comparable health data platform, and the application does not request access to health data on your device.

If you choose to type such information into a free-text field, it is stored as ordinary user content under section 2.1. We ask that you do not.

3. How We Use Your Information

We do not sell your personal data. We do not sell or share your habit data with third parties for their own marketing purposes.

4. Who We Share Data With

We share personal data only with the service providers below, each of which processes it on our instructions or as an independent controller where indicated.

We do not use analytics or advertising providers, and no third party receives your habit or goal data for its own purposes.

We may also disclose personal data where required by law, to enforce our Terms and Conditions, or to protect the rights, safety, and property of ThriveOS or others.

Some of our applications are built with Expo, which provides the infrastructure used to build and deliver them and, where those services are enabled, to deliver over-the-air updates and push notifications. Applications built natively for a single platform do not use Expo, and no data about your use of those applications reaches Expo.

5. International Data Transfers

ThriveOS is operated from the United Arab Emirates. Your account data and user content are stored on Supabase infrastructure located in Mumbai, India (AWS region ap-south-1). Our other service providers may process data in the United States and the European Union.

This means your personal data may be transferred to, and processed in, countries other than the one in which you reside, and which may have different data protection laws.

Transfers from the EEA and the UK. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with a transfer risk assessment, as the safeguard for that transfer. You may request a copy of the relevant safeguards by writing to [email protected].

6. How Long We Keep Data

• Account and user content — retained while your account is active, and deleted when you delete your account (see section 8).
• Transaction and tax records — retained for 5 years after the transaction, as required by UAE tax and accounting law, even after account deletion.
• Crash and diagnostic data — we do not hold this data. Aggregated crash reports are retained by Apple and Google under their own retention policies and are accessible to us only while they make them available.
• Support correspondence — retained for 12 months after the matter is resolved.

Where we retain any data after account deletion, we retain only what is necessary for the stated purpose.

7. Your Rights

Depending on where you live, you may have the following rights over your personal data:

• Access — obtain a copy of the personal data we hold about you
• Rectification — correct data that is inaccurate or incomplete
• Erasure — request deletion of your personal data
• Portability — receive your data in a structured, machine-readable format
• Restriction — ask us to limit how we process your data
• Objection — object to processing based on our legitimate interests
• Withdraw consent — where processing relies on consent, withdraw it at any time

To exercise any of these rights, contact [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.

8. Deleting Your Account and Data

You can delete your account and its associated data at any time:

• In the application — open Settings and select Delete Account.
• On the web — submit a request at thriveos.app/delete-account, telling us which application your request relates to. You do not need to reinstall the application to do this.

Deletion removes your account record and all associated habit, goal, and progress data from our systems. It is permanent and cannot be undone. Deactivating or pausing an account is not the same as deletion.

Requests are completed within 30 days. Records we are legally required to keep, such as transaction records for tax purposes, are retained as described in section 6.

If you use more than one of our applications, each holds a separate account, so please submit a request for each one you want removed.

Cancelling a subscription is separate from deleting an account. Subscriptions purchased through the App Store or Google Play must be cancelled through those platforms.

9. Children's Privacy

The Service is not directed to children under 13, or under the minimum age of digital consent in your country, whichever is higher. We do not knowingly collect personal data from children below that age.

If you believe a child has provided us with personal data, contact [email protected] and we will delete it.

10. Tracking and Advertising

ThriveOS does not advertise to you and does not track you. We do not use your data for advertising, we do not track you across other companies' apps or websites, we do not use advertising identifiers, and we do not share data with data brokers or advertising networks.

Because we do not track you across other companies' apps or websites, our applications do not present the iOS App Tracking Transparency prompt.

11. Security

We use technical and organisational measures to protect personal data, including encryption in transit, encrypted storage of credentials, and access controls limiting who can reach production data.

No system is completely secure. If a breach affects your personal data and poses a risk to your rights, we will notify you and the relevant authority as required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and notify you through the Service or by email before the changes take effect.

13. Contact Us

Questions, requests, or complaints about this policy or your personal data:

• Email: [email protected]
• Website: thriveos.app
• Support: thriveos.app/support