Privacy Policy

ThriveBiome.ai ("ThriveBiome", "we", "us") provides precision-health and longevity tools, including biological-age and pace-of-aging analysis and metabolic-health calculators (the "Service"). This policy explains what we collect, how we use it, and your choices.

1. Information we collect

• Account information: email address, name, and password (stored only as a secure hash by our authentication provider).
• Google Sign-In information: if you sign in with Google, we receive your name, email address, and profile picture URL. We do not request access to your Gmail, Drive, Calendar, contacts, or any other Google data.
• Health information you enter: e.g., age, sex, body measurements, lab/biomarker values, medications, lifestyle and questionnaire answers.
• Technical data: browser type, device information, IP address, and pages visited, used for security and to keep the Service working.
• Payment information (paid plans): processed by our payment processor; we do not store full card numbers.

2. How we use information

• Create and secure your account and sign you in.
• Generate your analyses, reports, and recommendations.
• Operate, maintain, and improve the Service, and fix errors.
• Communicate with you about your account, security, and material changes.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your health information for advertising.

3. Google user data

Data received through Google Sign-In (name, email, profile picture) is used only to create and authenticate your ThriveBiome account. It is not sold, not used for advertising, not transferred to third parties except the service providers needed to operate sign-in, and not used to train generalized AI models. ThriveBiome's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Service providers

We share data only with vendors that process it on our behalf under contractual confidentiality obligations:

• Supabase — authentication and database hosting.
• Vercel — website hosting.
• Anthropic — AI processing to generate report text from the data you submit.
• Stripe — payment processing for paid plans.
• Email delivery provider — account and password-reset emails.

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition (subject to this policy).

5. Data retention

We keep account and health data while your account is active. When you delete your account, we delete or de-identify your personal data within 30 days, except where retention is required by law.

6. Security

Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers, and access is restricted by row-level security. No system is perfectly secure; please use a strong, unique password.

7. Your rights and choices

You may access, correct, export, or delete your data, or withdraw consent, by emailing nikolay@thrivebiome.ai. California residents have rights under the CCPA/CPRA, including to know, delete, correct, and limit use of sensitive personal information; we will not discriminate against you for exercising them. You can revoke ThriveBiome's access to your Google account at any time at myaccount.google.com/permissions.

8. Children

The Service is intended for adults 18 and older. We do not knowingly collect information from children.

9. Changes

We will post updates on this page and change the effective date. Material changes will be communicated by email or in the Service.

10. Contact

ThriveBiome.ai · Foster City, California · nikolay@thrivebiome.ai