Privacy Policy

1. Who is responsible for your data

ThriveOS is operated by Oswald Aguiar, based in Dubai, United Arab Emirates. Oswald Aguiar is the controller responsible for personal data processed to provide our Service. Contact us about privacy or your rights at support@thriveos.app.

Our applications have separate accounts and subscriptions. We do not combine your personal productivity content across applications. Our current applications are listed at thriveos.app/apps.

2. Information we handle

Accounts and purchases

If you create an account, Supabase processes your email address, account identifier and authentication information. Email/password sign-in uses a hashed password. With Sign in with Apple, we receive an Apple account identifier and the name and email address Apple shares, which may be a private relay address. Apple authorization credentials may be held securely on our server to support revocation when you delete your account.

Apple or Google handles in-app payments made through its store; Apple handles Start-ish iOS purchases. Apple also handles Quotella iOS purchases, including one-time purchases. RevenueCat manages subscription status, purchase restoration and entitlements using transaction information and a subscriber identifier that can be linked to your app account. These identifiers are not necessarily anonymous. We do not receive your full payment card details. Other ThriveOS products may use Google Play or Paddle for purchases offered through those channels.

Content and optional features

Depending on the application and features you use, user content can include tasks, goals, habits, routines, notes, text you submit, schedules, progress entries, focus sessions, preferences, generated suggestions and reflections. We process this content to provide the features you use. Where an application offers cloud storage or synchronization, the content needed for that feature is stored through our backend; content stored only on your device is handled as described in that application's notice.

Applications that offer voice input, image capture, reminders import, notifications or other device integrations request the access needed for the relevant feature. Text, images or other content you submit for AI processing are handled under section 3. Device permissions can be changed in your device settings. Revoking permission stops future access but does not erase content already imported or submitted.

See section 12 for Start-ish on iOS, including its local storage, Apple speech recognition and Reminders behavior, and section 13 for Quotella on iOS. Those implementation details apply to each app and should not be read as statements about every ThriveOS application.

Technical information, analytics and diagnostics

Our servers and infrastructure providers process connection information such as IP addresses, request times, app or browser information and operational logs. Applications may send an installation identifier with requests for usage limits or abuse prevention; Start-ish uses a randomly generated identifier for certain AI requests. We use derived identifiers and request counters, including through Upstash, to limit abuse and manage usage. Some AI requests include a derived safety identifier.

Where enabled, our applications use TelemetryDeck for product usage events. For example, Start-ish reports starting or completing a focus session, importing reminders and using image extraction. Events include limited properties such as counts, durations and outcomes, together with technical app/device information and identifiers handled by the SDK. We do not intentionally include brain dump text, task titles, images, email addresses or other free-text content in these events.

Quotella uses PostHog for product usage events, sent with a randomly generated installation identifier. Client IP addresses are discarded. We do not include quote text, text typed for AI features or theme titles in these events.

Where enabled, our applications use Sentry for crash and error reporting, including stack traces and app/device context. This is enabled in Start-ish and Quotella. Default forwarding of personally identifying information is disabled, but technical diagnostics can still contain identifiers or contextual information. Apple may separately provide diagnostics under your device's analytics settings. Changing Apple's analytics setting does not itself disable third-party SDK reporting.

Website and support

If you join a waitlist, we collect your email address and sign-up source to send the launch notification you requested. Account emails may be delivered through Resend. Support and privacy requests contain your contact details and whatever you choose to include. The account-deletion form prepares an email in your mail app; you must send that email to submit the request.

Sensitive information

Free text, dictation and images may reveal health information or other sensitive personal information if you include it. That information remains sensitive when entered into a task. Please avoid submitting medical records, passwords, payment card numbers or sensitive information about yourself or others, especially to AI features.

3. AI features: OpenAI and Anthropic

Applications with AI features use third-party AI services to process the content and context needed for the feature. Where an application asks you to confirm before sending content to an AI provider, we describe what will be sent at that point. In Start-ish, image task extraction asks before the image leaves your device. The other AI features are described in this policy and act on content you have submitted to the feature you chose to use. The examples below describe Start-ish and Quotella; other applications may offer different AI features within the processing described here. OpenAI provides AI processing in Start-ish. Anthropic (Claude) provides AI processing for Quotella's "In your own words" feature.

• Next-step suggestions: brain dump text, relevant task titles, completed or excluded suggestions, previous attempts, language and tone preferences may be sent.
• Image-to-task extraction: the selected image and your accompanying context are sent. Images may contain information about you or other people, so review what you choose to submit.
• Weekly highlights and reflections: selected progress statements, activity counts, timing and outcome summaries, comparisons with previous activity, and relevant technique context may be sent. The weekly reflection request is based on summarized activity rather than your entire local task history.
• Read-aloud reflections: reflection text is sent to OpenAI to generate speech. The voice you hear is AI-generated.
• Quotella "In your own words": the text you type (up to 280 characters) and our list of themes are sent to Anthropic, which returns a mix of themes and a short title. We do not store the text you type. The text is sent only when you use the feature.

Requests pass through our Supabase backend. We do not deliberately add your email address, password or profile picture to AI prompts. Content you submit may itself identify you, and identifiers used for safety and rate limiting are separate from prompt content.

We do not use your AI inputs or outputs to train AI models and do not authorize OpenAI or Anthropic to use them for model training. Their commercial API services exclude customer content from model training by default. We do not opt user content into voluntary training or data-sharing programs. Their consumer chatbot settings are different. Provider retention, safety review and legal exceptions still apply; exclusion from training is not a promise of zero retention. See section 6 and the provider details.

This policy describes AI processing; accepting general terms is not a substitute for any explicit permission required before sharing personal data with an AI provider. Contact us to withdraw consent or request deletion of data already submitted. Withdrawal does not affect processing that was lawful before withdrawal.

4. Purposes and legal bases

Where the GDPR or similar law applies, the following bases apply to personal data processing. Device permission prompts also control access to the relevant device features.

We do not sell personal data, use it for targeted advertising, or share it with data brokers. We do not use advertising identifiers or track you across other companies' apps or websites for advertising. Product analytics and operational diagnostics described above are used to improve and protect our Service.

AI suggestions help you make your own choices. We do not use them to make decisions about you that have legal or similarly significant effects.

5. Service providers and international transfers

We share data with providers needed to operate the relevant feature, including Supabase, OpenAI, Anthropic, RevenueCat, Upstash, TelemetryDeck, PostHog, Sentry and, for account email delivery, Resend. Our Service Providers and Subprocessors page explains their purposes, data categories and product scope. Apple, Google and Paddle may act independently for their own store, payment or platform services.

Providers processing data on our behalf must protect it under applicable data-processing terms, use it only for the agreed purposes and provide protection consistent with this policy and applicable law. We may also disclose information when legally required, to protect rights or safety, prevent fraud, or manage a business transfer subject to appropriate confidentiality and legal safeguards.

We operate from the United Arab Emirates. Our Supabase database is hosted in South Asia (Mumbai), India. Other service providers may process data in the United States, countries in Europe and other locations used to deliver their services. Locations depend on the service and account configuration; a database region does not limit where AI requests or other provider services are processed.

Where required for transfers from the EEA, UK or other protected jurisdictions, we use an applicable adequacy decision or contractual safeguards, such as the EU Standard Contractual Clauses and UK transfer provisions. You can ask us for information about the safeguards applicable to your data at support@thriveos.app.

6. Retention

• User content: content stored on our servers is retained while needed to provide the feature or your account, then removed when deleted or following account deletion, subject to the exceptions below. Content stored only on your device remains until removed there; signing out may not erase it. Backups and copies you share are managed separately.
• Account information: retained while your account is active, then removed following account deletion, subject to necessary legal, security and backup retention.
• AI requests: Start-ish's AI functions process requests without saving a prompt history in our application database. Quotella's AI function does not store the typed text in our database or logs. OpenAI response storage is disabled for the text and image requests. Providers can still retain data for abuse monitoring, safety or legal duties. OpenAI generally retains abuse-monitoring logs for up to 30 days, with exceptions. Anthropic's retention is governed by its Commercial Terms, applicable data-processing agreements and service-specific policies, including safety-enforcement and legal exceptions. We do not promise that every provider record is erased within a fixed period.
• Usage limits and operational records: counters expire with the configured rate-limit windows. Technical logs, analytics and diagnostics are kept for the operational, security and reliability purposes described above, according to the relevant service settings and any necessary investigation or legal hold.
• Support: correspondence is retained for up to 12 months after resolution unless a legal obligation or unresolved dispute requires longer.
• Waitlists: addresses are retained until the launch notification has been sent or you ask us to remove them, whichever comes first.
• Purchases: we and payment providers retain records as needed for subscriptions, refunds, fraud prevention, and applicable tax and accounting duties. The required period depends on the record and applicable law.

Residual copies may remain in restricted backups until those backups expire. Retained data is limited to the purpose requiring retention. Contact us for the retention arrangements applicable to your request.

7. Delete your account and content

Use the account-deletion option in the application's account or settings area, or contact us using the route below. In Start-ish, open Settings → Account → Delete Account and confirm. Start-ish deletes the server account and initiates cleanup of its local personal records, scheduled notifications and shared surfaces on that device. This does not change or delete the original items in Apple Reminders. Sign-in authorization with Apple is also submitted for revocation where available.

In Quotella, open Settings › Account › Delete account and confirm. An internet connection is required. Deletion removes your account and everything stored with it on our servers: your themes, saved and hidden quotes, check-ins and settings. The app then returns to its welcome screen. Your purchase record at RevenueCat (a random account identifier and App Store transaction history, with no email or content) is kept so you can restore purchases later.

If you cannot access the app, email support@thriveos.app or use our deletion-request page to prepare an email. Tell us which app and account you mean. We may need to verify ownership. We aim to complete requests within 30 days and will explain any lawful extension.

A remote request cannot erase content stored only on your device, other devices or backups. Remove local app data on each device separately. Deletion also does not automatically remove records that payment providers must retain, or unlink every technical record that cannot be associated with your account.

Deleting your account or uninstalling the app does not cancel an App Store subscription. Manage it in iOS Settings → your name → Subscriptions. Each ThriveOS application has a separate account and subscription.

8. Your rights and choices

Depending on your location and the applicable law, you may request access, correction, deletion, restriction or portability of personal data, object to processing based on legitimate interests, and withdraw consent. We do not penalize you for exercising applicable privacy rights. California residents may also have rights to know, correct and delete information and to opt out of sale or sharing for cross-context behavioral advertising; we do not engage in that sale or sharing.

Email support@thriveos.app. We respond within the period required by applicable law, generally one month, and explain any permitted extension. We may request proportionate information to verify you. Data stored only on your device may need to be accessed there because we do not hold a server copy.

You may complain to your local data protection authority. You can also revoke device permissions in iOS Settings, unsubscribe from a waitlist by contacting us, and choose what information to include in support messages or AI requests.

9. Children

Our Service is not directed to children under 13 or, where higher, the minimum applicable age of digital consent. We do not knowingly collect personal data from children below that age. If you believe a child has provided personal data, contact us so we can investigate and remove it as required.

10. Security and website storage

We use measures such as encrypted network connections, protected authentication credentials and access controls. No service or device is completely secure. Protect access to your device and account, and contact us if you suspect unauthorized access.

Our website uses the storage and technical services needed to deliver its pages and forms. We do not use advertising cookies. If optional tracking or other non-essential storage is introduced, we will provide the information and controls required by applicable law.

11. Changes and contact

We update the date above when this policy changes. For material changes, we provide appropriate notice and obtain new consent where required before the changed processing begins. Questions can be sent to support@thriveos.app or through our support page.

12. App details: Start-ish on iOS

Start-ish (also styled start/ish) is covered by the shared policy above. The following details describe its current iOS features and do not imply that other ThriveOS applications work in the same way.

Start-ish content stored on your device

Brain dumps, tasks, parked thoughts, suggested steps, schedules, focus sessions, completion history, check-ins, preferences and saved reflections are stored locally. Start-ish does not provide cloud synchronization of this productivity history. Creating an account does not upload a backup of that history. A profile picture you choose is also stored on your device and is not uploaded by Start-ish.

Local storage does not mean all processing stays on your device: the AI features described in section 3 send the content needed for those features to our backend and AI provider. Device backups you enable may also include app data under Apple's backup settings.

Voice, images and device permissions

• Voice input: microphone and speech recognition access lets you dictate a brain dump. Start-ish prefers on-device transcription where available; fallback recognition may send audio to Apple's speech recognition service. The resulting text can be sent for AI processing when used in an AI feature. Our AI endpoints do not receive your microphone recording.
• Image capture: you can select an image or screenshot, or take a photo with camera permission. A prepared copy of the image and any context you add are sent for AI task extraction. This does not give Start-ish unrestricted access to your photo library.
• Reminders: with permission, Start-ish reads incomplete Apple Reminders so you can import selected titles and due dates. Importing does not change or delete the originals. Imported tasks can subsequently be used in AI features.
• Notifications and system features: Start-ish schedules local notifications on your device. Task titles or progress may appear in notifications, widgets, search, Siri/Shortcuts and other enabled system surfaces. Check your device settings if other people can see your screen. Start-ish does not use Expo push delivery.

You can change microphone, speech recognition, camera, Reminders and notification permissions in iOS Settings. Withdrawing permission stops future access through that permission; it does not erase content already imported or submitted.

Start-ish does not connect to HealthKit or request health records.

13. App details: Quotella on iOS

Quotella is covered by the shared policy above. The following details describe its current iPhone features and do not imply that other ThriveOS applications work in the same way.

Quotella account and data stored on our servers

You do not need to sign in to use Quotella. A guest account is created automatically; Sign in with Apple or email sign-in is optional. Quotella stores the following on our Supabase backend in Mumbai, India, linked to your account: your chosen themes and mix, the short title of an "In your own words" theme, saved quotes, hidden quotes, quote reports, check-in answers, which quotes were delivered and when, your timezone, your schedule (quotes per day, hours and days), discreet mode, Focus pause, appearance and haptics settings, your plan status from RevenueCat and a daily count of AI requests.

In your own words

With Pro, "In your own words" sends the text you type (up to 280 characters) and our list of themes from our Supabase backend to Anthropic (Claude), which returns a mix of themes and a 2–4 word title. The text you type is not stored in our database or logs; only the resulting themes and title are stored. We do not add your email address to the request. The text is sent only when you use the feature. Two-minute actions are pre-written, not generated for you.

Notifications, analytics and diagnostics

• Notifications and system features: notifications, widgets and the Lock Screen show only the quote, never the theme you chose. Discreet mode shows "A new quote is waiting" instead of the quote. Quotes can pause automatically during a Focus.
• Analytics: PostHog receives product usage events with a random installation identifier. Client IP addresses are discarded, and no quote text, typed text or theme titles are sent.
• Diagnostics: Sentry receives crash and error reports. Client IP addresses are discarded and default forwarding of personally identifying information is disabled, but technical reports can still contain identifiers or contextual information.

Quotella is not a medical or mental-health service.