Privacy Policy

Thriven is built by Orivent Studios, a one-person software studio in Cape Town, South Africa. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We are committed to collecting only what is necessary and keeping your information safe.

Information We Collect

Account Information

Thriven uses Firebase Authentication. By default, the app signs you in anonymously — no personal information is collected at sign-up. If you choose to link your account to Google Sign-In, we receive your Google account email address, which we use to identify your account for cloud sync and restore purposes.

App Content

Goals, volume habits, anchor events, session logs, brain park notes, and other content you create in Thriven are stored locally on your device using ObjectBox. If you enable cloud backup, this content is also stored in Google Firebase Firestore, associated with your account ID. You own your content. We do not read it, sell it, or use it for any purpose other than delivering the service.

Usage Analytics

We use Firebase Analytics to collect anonymised, aggregated data about how the app is used — such as which screens are viewed and which features are used. This data does not personally identify you and is used solely to improve the app.

Crash Reports

We use Firebase Crashlytics to automatically collect crash and error reports. These reports include your device model, operating system version, app version, and a technical stack trace. They do not include your personal information or app content. Crash reports help us identify and fix bugs quickly.

Purchase Information

Subscriptions and in-app purchases are processed by Google Play. We use RevenueCat to verify and manage subscription status. RevenueCat receives your Google Play purchase token and an app user identifier to determine which features you have access to. We do not receive or store your payment card details.

Push Notifications

We use Firebase Cloud Messaging (FCM) to deliver push notifications for anchor events you schedule. We do not use push notifications for marketing or promotional purposes.

Information We Do Not Collect

Your name, phone number, or physical location
Contacts, camera, or microphone data (unless you grant permission for voice capture in a future release)
Browsing history or data from other apps
Advertising identifiers

How We Use Your Information

To provide and maintain the Thriven service
To restore your data when you reinstall the app or sign in on a new device
To verify your subscription status and unlock the correct features
To send you push notifications for anchor events you have scheduled
To identify and fix crashes and bugs
To understand how the app is used so we can improve it

We do not sell your data. We do not use your data for advertising.

Third-Party Services

Thriven uses the following third-party services, each with their own privacy policies:

Google Firebase — Authentication, Firestore, Analytics, Crashlytics, App Check, Cloud Messaging
RevenueCat — subscription management and purchase verification
Google Play — payment processing for subscriptions and in-app purchases

We encourage you to review the privacy policies of these services. We have no control over their practices and are not responsible for their content.

Data Retention

Local data (stored in ObjectBox on your device) is retained until you uninstall the app or delete it within the app settings.

Cloud data (stored in Firebase Firestore) is associated with your account and is retained until you request account deletion. Anonymised analytics and crash report data may be retained by Firebase and RevenueCat according to their own retention policies.

Your Rights

You have the right to:

Access a copy of the data we hold about you
Request correction of inaccurate data
Request deletion of your account and all associated data
Withdraw consent for cloud backup at any time via app settings

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

Request Data Deletion

You have the right to request deletion of your account and all associated data at any time. To submit a deletion request, email us at the address below with the subject line "Delete my Thriven data".

Please include:

The email address linked to your Google account (if you signed in with Google), or your Firebase User ID (found in Settings → Account within the app)
Confirmation that you want all data permanently deleted

We will delete the following within 30 days of your verified request:

Your Firebase Authentication account
All data stored in Firebase Firestore under your account (goals, habits, anchors, sessions, notes, user profile)
Your subscription record in RevenueCat (purchase history is retained by Google Play per their policies)

Local data stored on your device (in ObjectBox) is deleted when you uninstall the app. Anonymised, non-identifiable analytics and crash report data aggregated by Firebase may persist in accordance with Google's data retention policies and cannot be individually deleted.

[email protected]

Children's Privacy

Thriven is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated policy.