ThryvePrivacy Policy
Thryve.AI ("Thryve," "we," "us") provides a teletherapy platform connecting licensed therapists with their clients, including mood tracking, journaling, validated clinical screeners, secure messaging, and video sessions. This policy explains what information we collect, how we use it, and the choices you have.
Information we collect
What we collect depends on whether you use Thryve as a client or a therapist.
| Category | Examples |
|---|---|
| Account information | Name, email address, password (stored as a salted hash, never in plain text) |
| Health information (clients) | Mood check-ins, journal entries, PHQ-9/GAD-7 screener responses, safety plan content, goals and habits |
| Communications | Messages exchanged between a client and their linked therapist |
| Clinical notes (therapists) | Session notes and intervention records a therapist creates for their own clients |
| Billing information (therapists) | Subscription and payment details, processed by our payment processor — we never receive or store full card numbers |
| Device information | A push-notification token used to deliver reminders and alerts to your device |
How we use your information
- To operate the platform: authenticate you, connect clients with their therapist, and display check-ins, goals, and session history.
- To generate AI-assisted features — a private reflection on your journal entries, and an AI-written weekly summary for your therapist. These features run on de-identified data: your name is never sent to the AI model.
- To detect crisis language in journal entries and, when detected, alert your linked therapist and surface the 988 Lifeline to you. This is an automated screening aid, not a clinical diagnosis.
- To send appointment reminders, mood-alert notifications to therapists, and account-related emails.
- To process subscription payments for therapist accounts.
- To maintain the security, integrity, and audit trail of the platform.
We do not sell your personal information, and we do not use it for advertising or cross-app tracking.
Who we share information with
We share information only as needed to provide the service:
- Your linked therapist or client — a client's check-in, journal, and screener data is visible to the therapist they are connected with; it is not visible to other therapists or clients.
- Service providers who process data on our behalf under contract, including: Google Cloud (hosting and database infrastructure), Anthropic (AI-generated reflections and summaries, on de-identified data), Stripe (payment processing for therapist subscriptions), Daily (encrypted video sessions), and Resend (transactional email delivery).
- Legal or safety reasons — if required by law, or where we believe in good faith it is necessary to protect someone's safety.
We do not sell data to advertisers or data brokers, and none of the sharing above is used for cross-context behavioral advertising.
Security
Journal entries are encrypted at rest (AES-256). Access to client data is restricted to the client's own linked therapist and audited. Our infrastructure runs on Google Cloud, and our practices are built toward a Business Associate Agreement standard for handling protected health information — we refer to this as HIPAA-oriented. No system is perfectly secure, and we continue to invest in this as the platform grows.
Data retention
We retain your information for as long as your account is active, or as needed to provide the service and comply with legal obligations. You can request deletion of your account and associated data at any time by contacting us below.
Your choices and rights
- You can review and update your profile information from within the app.
- You can request a copy of your data, request correction of inaccurate data, or request deletion of your account by emailing us.
- If you are a California resident, you have rights under the CCPA to know, delete, and opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of.
Children's privacy
Thryve is not directed at children under 13, and we do not knowingly collect information from children under 13. Use of the platform by minors, where permitted by a therapist's practice, is intended to occur under the supervision of a parent, guardian, or licensed clinician.
Changes to this policy
We may update this policy as the platform evolves. If we make material changes, we will update the effective date above and, where appropriate, notify you in the app.
Contact us
Questions about this policy or your data? Email us at hello@gothryve.ai.